Privacy Policy

Effective: April 16, 2026 · Version 2026-04-16

Draft notice: This Policy is a good-faith draft by the Videoscriber team. It has not been reviewed by counsel. Please review with a qualified attorney before launching to the public.

This Privacy Policy explains how Videoscriber LLC (a Florida limited liability company) collects, uses, and protects information about you when you use the Videoscriber cloud service (the “Service”). If you use the open-source desktop app without connecting it to the cloud, this Policy does not apply to your local data.

1. Information we collect

Account data: mobile phone number, full name, email address, account creation and login timestamps.
User Content: audio and video files you upload, along with the transcripts, recap drafts, and metadata we produce from them.
Log data: IP address, user-agent, request timestamps, and error logs necessary to operate the Service securely.
Consent records: which version of these Terms and Privacy Policy you accepted and when.

We do not ask for or collect payment card numbers directly; if paid tiers are introduced, a PCI-compliant third-party processor will handle payments.

2. How we use information

Provide the Service: transcription, recap generation, follow-up email delivery, account management.
Authenticate you via SMS or email one-time passcodes (OTPs).
Secure the Service against abuse, fraud, and unauthorized access.
Communicate service notices, security alerts, and — only if you opt in — product updates.
Comply with legal obligations.

3. We do not train on your content

Videoscriber does not use your User Content to train any machine-learning model. We do not sell your User Content. Our agreements with sub-processors require them to handle your content only to deliver the Service — see Section 5.

4. Retention

Uploaded video files: automatically deleted after 90 days.
Transcripts, recaps, and metadata: retained until you delete them or close your account.
Account data: retained for the life of your account plus a short window for dispute resolution and legal compliance, then deleted.
OTP codes and rate-limit records: transient — deleted automatically within hours.
Operational logs: retained up to 90 days.

5. Sub-processors

We share specific information with the following sub-processors strictly to deliver the Service:

OpenAI — transcription and recap generation. Receives the audio and text to be processed. Operates under a zero-retention / no-training arrangement for API traffic.
AssemblyAI — optional speaker diarization. Receives the audio when you enable diarization.
Twilio — SMS OTPs. Receives your phone number and the OTP message payload.
Resend — transactional email (including email OTP fallback and recap delivery). Receives your email address and the email payload.
Vultr — infrastructure hosting. Stores your data at rest in our provisioned instances (Miami region).

6. Security

We use industry-standard controls including TLS 1.2+ in transit, encryption at rest where provided by our hosting, firewall-restricted network ports, SSH-key-only administrative access, rate limits on authentication endpoints, and brute-force protection. No system is perfectly secure. If we become aware of a breach affecting your information we will notify you as required by applicable law.

7. Your choices and rights

Access and export: download your transcripts, recaps, and other content from the in-app downloads, or request a full copy by emailing support@videoscriber.ai.
Correction: you can update your name and email in your profile at any time.
Deletion: you can delete transcripts in the app. To close your account and delete all associated data, email support@videoscriber.ai.
California residents (CCPA/CPRA): you have the right to know, to delete, to correct, and to opt out of any “sale” or “sharing” of personal information. We do not sell your personal information.

8. Children

The Service is not directed to children under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, contact us at support@videoscriber.ai and we will delete it.

9. Cookies

We use a single first-party session cookie (vs_session) to keep you logged in. It is set with HttpOnly, Secure, and SameSite=Lax attributes. We do not use advertising or cross-site tracking cookies.

10. International users

The Service is currently available only to users with US phone numbers and is operated from the United States. If you access the Service from outside the US, you acknowledge that your information will be processed in the US.

11. Recording consent

You are solely responsible for obtaining the consent required under the laws of every applicable jurisdiction before uploading recordings of conversations, meetings, or other content involving identifiable people. Many US states require two-party or all-party consent for recording. Some jurisdictions (e.g. Illinois under BIPA) impose additional obligations around voice biometrics. Do not upload content you do not have the legal right to process.

12. Changes to this Policy

We may update this Policy. If changes are material we will notify you via email or in-app notice before they take effect. The “Effective” date at the top reflects the current version.

13. Contact

Questions, access requests, or complaints may be sent to support@videoscriber.ai.