Privacy Policy

1. Introduction

VibeScribe ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our voice-to-text transcription application and related services (the "Service").

Please read this Privacy Policy carefully. By using the Service, you consent to the practices described herein.

2. Information We Collect

2.1 Information You Provide

Data Type	Purpose	Retention
Email Address	Account creation and communication	Until account deletion
Payment Information	Process subscriptions (via LemonSqueezy)	Per payment processor policy
Custom Style Prompts	Personalize your transcription experience	Stored locally on your device

2.2 Audio and Transcription Data

• Audio Recordings: Processed in real-time via encrypted connection, immediately discarded after transcription
• Transcribed Text: Stored locally on your device only; never uploaded to our servers
• Refined Text: Sent to OpenAI for processing, subject to OpenAI's zero-data-retention API policy

2.3 Automatically Collected Information

• Usage Statistics: Word counts and feature usage for billing and analytics (anonymized)
• Device Information: Operating system version, app version for troubleshooting
• Error Logs: Crash reports and error messages (no personal content included)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and manage your subscription
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and customer service requests
• Monitor and analyze usage patterns to improve user experience
• Detect, investigate, and prevent fraudulent or unauthorized activity
• Enforce our Terms of Service and Fair Use Policy

4. Third-Party Service Providers

We work with carefully selected third-party service providers to deliver the Service:

4.1 Deepgram (Transcription)

• Processes audio-to-text conversion
• SOC 2 Type II and GDPR compliant
• Zero audio retention by default
• Data encrypted in transit

4.2 OpenAI (Text Refinement)

• Powers our AI text refinement features
• API requests are not used for training
• Zero-data-retention policy for API usage
• SOC 2 compliant

4.3 Supabase (Authentication & Database)

• Manages user authentication
• Stores account information and usage data
• SOC 2 Type II compliant
• GDPR compliant with EU data residency options

4.4 LemonSqueezy (Payments)

• Processes subscription payments
• PCI DSS compliant
• We do not store your payment card details

5. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption: All data transmitted between your device and our services is encrypted using TLS 1.3
• Access Controls: Strict access controls limit who can access user data
• Regular Audits: Our third-party providers undergo regular security audits
• Local Storage: Transcription history is stored locally on your device, not in the cloud

6. Data Retention

• Account Data: Retained until you delete your account
• Usage Logs: Aggregated usage data retained for 90 days
• Audio Data: Never retained; processed in real-time and immediately discarded
• Transcriptions: Stored locally on your device; you control deletion

7. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data
• Portability: Request transfer of your data to another service
• Objection: Object to certain processing of your personal data
• Restriction: Request restriction of processing in certain circumstances

To exercise any of these rights, please contact us at hello@vibescribe.me.

8. GDPR Compliance

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Contract: Processing necessary to provide the Service you requested
• Legitimate Interests: Processing for our legitimate business interests (e.g., fraud prevention, improving the Service)
• Consent: Where you have given explicit consent for specific processing activities

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect and how it is used
• The right to delete your personal information
• The right to opt-out of the sale of personal information (note: we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

10. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected personal information from a child under 13, we will promptly delete that information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from your country. We ensure appropriate safeguards are in place when transferring data internationally.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this policy and, where appropriate, providing additional notice.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Email: hello@vibescribe.me