Privacy Policy

1. Controller

The controller responsible for processing your personal data is JP Fractal Works UG (haftungsbeschränkt) ("we", "us"), Berliner Straße 69, 13189 Berlin, Germany, operating the JetScribe service.

You can reach us for any privacy question at support@jetscribe.ai. We have not appointed a data protection officer because we are not required to do so.

2. Data we process

• Account data: email address, authentication provider (email/password or Google), account creation date, and the encrypted credentials held by Firebase Authentication.
• Content you upload: audio and video files, the transcripts generated from them, and any titles or summaries produced for those transcripts.
• Usage data: file names, file sizes, media duration, transcription settings, processing status, and the transcription minutes counted against your monthly allowance.
• Billing data: your Stripe customer and subscription identifiers, plan, subscription status, and invoice history. Card details are entered on Stripe-hosted pages and are never stored by us.
• Technical data: server and function logs containing IP address, browser and device information, timestamps, and error details. Production pages also request our Google Tag Manager container from Google, which receives ordinary request metadata such as IP address, user agent, referring page, and timestamp even while optional analytics consent remains denied.
• Optional analytics data: pages visited, interactions, approximate location, and browser or device information. Google Analytics 4, loaded through Google Tag Manager, processes this data only after you choose “Allow analytics”.

3. Purposes and legal bases

• Providing the service — creating your account, transcribing your uploads, storing transcripts, and enforcing plan allowances (Art. 6(1)(b) GDPR, performance of a contract).
• Billing and subscription management through Stripe (Art. 6(1)(b) GDPR).
• Security, abuse prevention, and troubleshooting (Art. 6(1)(f) GDPR, our legitimate interest in a reliable and secure service).
• Loading the production Google Tag Manager container with optional consent denied, so that we can centrally enforce and update the reviewed tag configuration (Art. 6(1)(f) GDPR, our legitimate interest in operating a consistent consent-controlled production site).
• Retaining invoices and accounting records (Art. 6(1)(c) GDPR, legal obligations under German commercial and tax law).
• Sending service emails such as password resets and important account notices (Art. 6(1)(b) and (f) GDPR).
• Understanding how JetScribe is used and improving the service through optional Google Analytics 4, delivered through Google Tag Manager (Art. 6(1)(a) GDPR, your consent).

4. Automated processing of your recordings

To produce a transcript, your uploaded media is transmitted to a speech-to-text provider acting as our processor and is returned as text. Transcript titles and summaries may also be generated automatically.

Automated output can contain errors and is not subject to human review by us. We do not use your recordings, transcripts, or summaries to train our own models, and our processors are contractually restricted to processing your content for the purpose of delivering the service. No automated decision-making within the meaning of Art. 22 GDPR takes place.

5. Processors and recipients

Each of these providers processes data on our behalf under a data processing agreement pursuant to Art. 28 GDPR. We do not sell personal data and do not share it for advertising purposes.

• Google Ireland Limited / Google LLC — Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, hosting, the production Google Tag Manager container, and optional Google Analytics 4 after consent.
• AssemblyAI, Inc. — speech-to-text transcription of uploaded media.
• X.AI LLC — speech-to-text transcription for certain file types and languages.
• Stripe Payments Europe, Ltd. and Stripe, Inc. — payment processing, subscription management, and the billing portal.

6. International transfers

Some of our processors are based in the United States. Transfers are safeguarded by the EU Commission’s Standard Contractual Clauses and, where applicable, the provider’s certification under the EU–US Data Privacy Framework, together with supplementary technical measures such as encryption in transit.

7. Retention

• Uploaded audio and video is deleted as soon as its transcript has been generated, or as soon as processing fails. We do not keep your source media after that point.
• Transcripts, their segments, and generated metadata are retained until you delete them or close your account.
• When you delete a transcript, its metadata and segments are removed from our live systems; residual copies in backups are overwritten in the normal backup rotation.
• Account data is deleted after your account is closed, unless we must keep it longer for legal reasons.
• Invoices and accounting records are retained for up to 10 years as required by § 147 AO and § 257 HGB.
• Technical logs are retained for a short period for security and debugging purposes and are then deleted.

8. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21 GDPR). Where processing is based on consent, you may withdraw it at any time with effect for the future. To exercise any of these rights, email support@jetscribe.ai.

You also have the right to lodge a complaint with a supervisory authority — for us, the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin.

9. Security

Data is transmitted over TLS and stored encrypted at rest by our infrastructure providers. Access to production data is limited to what is necessary to operate and support the service. Uploads and transcripts are scoped to your account by server-side security rules.

10. Recordings of other people

If your recordings contain the voices of other people, you are responsible for having a legal basis and any required consent for that recording and for its transcription. See our Terms and Conditions for details.

11. Children

JetScribe is not intended for children under 16. We do not knowingly collect personal data from children under 16.

12. Changes to this policy

We may update this policy as the service evolves. The current version is always published on this page with its last-updated date. Material changes affecting you will be announced by email or in the app.

Contact

support@jetscribe.ai