Privacy Policy

Scribed Works, Inc. (“Scribed,” “we,” “us” or “our”), a Delaware corporation and subsidiary of Q6 Technology Holdings, Inc., operates the Scribed services covered by this policy. Our address is 2261 Market Street, Suite 22871, San Francisco, CA 94114. Contact hello@scribed.ai, attention Privacy, about this notice or your personal information.

This policy covers scribed.ai, the Scribed web app, Creative Studio, Scribed Chat, Scribed Bot, Scribed Tel, and related APIs, command-line tools, integrations and communications that link to it (the “Service”). Features vary by product and plan. A separately identified product, employment relationship or service with its own privacy notice is governed by that notice for the processing it describes.

Personal information means information that identifies, relates to or can reasonably be linked to a person or household. We act as a controller or business for information we use for our own account administration, billing, website operations, security and business communications. Section 2 explains our different role for customer-controlled workspace content. Our Terms of Service govern use of the Service; this notice describes processing and does not waive your privacy rights.

• Contact Privacy
• Terms of Service

When a business or other customer supplies personal information in its records, files, meetings, messages, workforce records or connected accounts, it ordinarily determines why that information is used. We process that customer content on its behalf to provide the Service, subject to its instructions, applicable agreements and law. The customer may be the controller or business, and Scribed its processor or service provider. A customer may itself act for another organization.

Workspace owners and authorized members can manage access, settings, integrations, exports and content according to their roles. Information you put in a shared workspace may be available to other authorized members, and the organization may retain it after you leave or delete your personal account. Credentials vault permissions have separate rules; an administrator’s ability to manage a vault does not by itself mean that administrator can read its secrets.

If your employer, a business you contact, or another customer has recorded you or placed your information in Scribed, ask that organization about its purposes, notices, lawful basis, retention and your rights. You can also contact us; we will identify the appropriate request path and assist as applicable. We do not require you to hold a Scribed account to submit a privacy request. A privacy request does not automatically authorize us to disclose another customer’s information or bypass its access controls.

Where a data processing agreement or other specific privacy terms are required for your use, contact us to arrange those terms before that processing begins. This public policy is not a substitute for a customer’s required notices, permissions or contractual safeguards.

The categories below depend on the features you use and information you, your organization or others provide. Sources include you and your devices; workspace members and administrators; people who communicate or collaborate with you; connected account and identity providers; payment and communications providers; public websites and business data sources used for a requested discovery feature; and our service providers. We also generate records of feature usage and outputs from the information supplied.

Providing account and transaction information necessary for a feature is required to provide that feature. Other fields and permissions are optional unless identified otherwise when collected. Declining them may prevent the corresponding feature from working.

When a customer requests a business-discovery or lead-import feature, business contact information returned by the selected public or third-party source is processed and delivered to that customer for the requested search or import. Public availability does not eliminate an individual’s privacy rights or make every downstream use lawful. Contact us with the source and record concerned if you want to raise a privacy issue about that processing.

• Identity and contact details: name, email, phone number, profile image, account and workspace identifiers, organization, business address, job title, membership and role. Sources include registration, invitations, identity providers and imported records.
• Authentication and account security: sign-in credentials, password hashes, session information, connected-account authorization tokens, API or integration credentials, multifactor settings and security events. Do not send passwords or authentication codes in a privacy or support request.
• Billing and commercial records: billing contact and address, subscription and seat selections, metered usage, purchases, invoices, tax information, payment status and processor transaction identifiers. Stripe or another identified payment provider handles payment details; Scribed does not store your complete payment-card number or card security code.
• Workspace and business records: contacts, leads, deals, collection fields, notes, tasks, pages, documents, files, form responses, bookings, calendar events, imports, permissions and sharing settings. These records may include information about individuals who are not Scribed users.
• Communications and media: email and attachments, chat and text messages, sender and recipient information, phone numbers, call timing and routing, recordings, voicemail, transcripts, meeting participant details and media captured by a feature you enable. Submitted photos, audio and video can include people’s likenesses, voices and information visible or audible in the recording.
• AI and creative feature data: instructions, prompts, reference files, connected content used for a request, search results, model outputs, generated images and videos, voice or avatar source material, feedback, tool actions and job metadata. Outputs and inferred summaries can themselves contain personal information.
• Workforce and sensitive workspace content: employee profile details, timecards, schedules, leave, compensation, commissions and gross-pay records where those modules are used; passwords, secret keys, secure notes and one-time-code seeds placed in Credentials. Other sensitive information may appear in user-submitted content even when we do not ask for it.
• Device, network and activity data: IP address, browser and operating-system details, language, approximate location derived from network information, access times, request and error logs, page or feature interactions, device notification tokens and usage needed for metering, fraud prevention and troubleshooting. This is separate from optional advertising or analytics described in Section 10.
• Support, preferences and compliance records: inquiries, survey or feedback responses, support correspondence, marketing preferences, privacy requests, verification records, cookie choices, policy versions, consent timestamps and relevant audit events.

We use information for the purposes below. Where European, UK or similar law requires a legal basis and we act as a controller, the basis depends on the particular activity. For customer-controlled content, the customer determines its legal basis and we process under its instructions; our contract with a customer does not by itself provide that customer with permission to process everyone’s information.

We do not treat this policy or ordinary use of the Service as blanket consent. Where consent is required, it must be obtained separately for the relevant activity and can be withdrawn. If special-category information requires an additional legal condition, an ordinary contract or legitimate interest alone is insufficient.

• Deliver requested services: create accounts, authenticate users, collaborate, process communications and files, synchronize integrations, produce requested AI outputs, run automations, respond to support and administer subscriptions. Our basis may be taking requested precontractual steps or performing a contract with you; for business representatives, it may be our legitimate interest in administering the customer relationship.
• Protect and maintain the Service: prevent unauthorized access and abuse, enforce usage controls, investigate incidents, resolve errors and maintain reliable systems. We rely on applicable legal obligations and legitimate interests in protecting users and operating a secure service, with consideration of affected individuals’ rights.
• Manage payments and compliance: meter usage, collect payment, keep financial and consent records, handle disputes and comply with lawful requests. Applicable bases include contract performance, legal obligations and legitimate interests in accurate records and establishing or defending claims.
• Understand and improve product performance: use operational information, feedback and appropriately limited analytics to identify problems and improve features. We rely on legitimate interests where permitted, and consent for optional device tracking where required; the website controls described below apply regardless of where you visit from.
• Communicate about Scribed: send service and security notices and respond to requests. Send promotional communications only under an applicable lawful basis, with consent where required and a way to opt out. Marketing preferences do not prevent essential account or security notices.
• Provide a separately explained use: if we propose materially different processing, we provide the required notice and obtain additional permission where required before proceeding. We may use aggregated or properly de-identified statistics, while treating information that remains reasonably linkable to a person as personal information.

Communications features process message content, participants and delivery or call metadata through relevant carriers, email, meeting, chat, transcription and hosting providers. Recording, transcription, summarization and meeting capture may process voices, video, shared-screen material, meeting images and information about people who did not create an account. The exact media collected depends on the feature and configuration.

The person or organization enabling these features must give appropriate notice and obtain all necessary recording, transcription, artificial-voice and communications permissions. A recording indicator, meeting bot, Scribed account or agreement to this policy is not a substitute for legally required participant consent. Participants should contact the meeting host or workspace responsible for a recording to object or request a copy or deletion.

A phone number supplied for account administration is not automatically permission for promotional calls or texts. For Scribed’s own promotional messaging programs, applicable opt-in disclosures govern the program, consent is not a condition of purchase, message frequency varies, and carrier message or data rates may apply. Use the message’s unsubscribe instructions, including STOP for supported SMS programs, or contact support to revoke consent; HELP or support provides assistance. Customer-operated campaigns are the customer’s responsibility and may require contacting that sender.

Mobile numbers and text-message opt-in or consent records are not shared with affiliates or other third parties for their independent marketing or promotional purposes. We may disclose information to the communications providers needed to deliver the program, to fulfill your request or as law requires. Opting out of a campaign does not require deletion of records needed to honor that opt-out.

Chat messages and Credentials are not represented as end-to-end encrypted or inaccessible to Scribed. Authorized processing on our servers and relevant service providers is necessary for their features. Notification previews may be visible on a device’s lock screen; control this in your device and notification settings.

• Communications support

When you request an AI feature, we send the information needed for that feature to the relevant model, transcription, search, image, voice, video or other processing provider. This can include a prompt, selected or retrieved workspace context, files, recorded media and earlier conversation context. An agent or automation may also send information to a connected service when carrying out an action you authorize. Review its access and recipients before enabling it.

AI outputs may infer information about a person and may be wrong. Do not rely on them as verified facts about an individual or use them for unlawful discrimination. Photo, headshot, voice and avatar features may process sensitive likeness or voice information; provide only material you have the right and required permissions to use.

Some requested headshot, photo-avatar and digital-twin features create or train a personalized representation from the photos or footage you provide, and may retain that representation to generate the looks or videos you request. This feature-specific personalization is distinct from training a provider’s general-purpose model. Complete any subject-consent process shown for the feature and contact us about removal of its source media and personalized assets.

We process private customer content to deliver requested features and to operate, secure and support those features. This policy does not grant permission to sell that content or to use it for unrelated general-purpose model training. We do not knowingly permit generative model providers to train their general-purpose models on confidential customer content; provider agreements and available data controls must support the applicable use. Google API data has the additional restrictions in Section 7.

Provider retention, abuse monitoring and permitted human review depend on the provider and service configuration. We do not promise zero retention or that no authorized person can ever access a request. Contact us before using a feature with contractual restrictions on providers, retention, location or sensitive information. Any optional program involving a new training use of identifiable customer content requires separate notice and applicable permission.

We do not offer AI-generated content as a legally binding determination about a person’s employment, credit, insurance, housing, health or other similarly significant eligibility. Where a customer uses information from the Service in its own decision process, that customer is responsible for the lawful basis, required explanations, human review and individual rights.

Connecting an account authorizes the access shown in its permission screen. Depending on your choices, this may include identity and profile details; email messages, recipients, attachments and labels; calendar events and participants; contacts; or files and metadata. We use this information to display and synchronize the connected service and perform the user-facing actions you request, such as sending an email, creating a booking, importing a file or summarizing selected material.

Scribed’s use and transfer to other applications of information received from Google APIs is subject to the Google API Services User Data Policy, including its Limited Use requirements. Restricted Google user data and information derived from it are not used for advertising, sold to data brokers, used to determine creditworthiness or used to develop or train generalized AI or machine-learning models.

Google data is shared only as permitted for the authorized user-facing functionality, security, legal obligations or other Limited Use exceptions. Human access to covered Google data is limited to the circumstances Google permits, such as your affirmative agreement for specific data, security investigations, legal requirements or permitted aggregated internal operations. These specific restrictions take precedence over broader descriptions in this policy, including business transfers.

Disconnect an integration in its settings or revoke Scribed’s access through the provider’s account controls to stop future authorized access. Disconnecting does not necessarily erase content already imported, shared with others, included in a sent communication or retained under a separate legal obligation; use deletion controls or submit a request for that information. Third-party services separately determine how they handle information under their own notices.

• Google API Services User Data Policy
• Manage Google third-party connections

Scribed Bot accesses the account and workspace you select and processes meetings, uploaded media or recordings you choose to submit, along with resulting transcripts and summaries. Microphone access enables recording when requested. Scribed Chat processes workspace membership, channels, direct messages, attachments, read or activity state and notification information. Available permissions and features depend on the app, device and version.

Native apps store authentication information using the device’s secure storage facilities and keep preferences or necessary cached data locally. Installed web apps use browser storage appropriate to their features. Signing out or uninstalling does not delete your server-side account or workspace data. You can revoke microphone, file, photo, camera or notification permissions that a feature requests in device settings; the corresponding feature may stop working.

Where you enable push notifications, we process a device or browser subscription token to deliver notices. Delivery may involve Expo, Apple Push Notification service, Google’s Android notification infrastructure or browser push services. These providers receive the routing information and notification payload needed for delivery. Device settings and the Service’s available notification controls govern what appears.

Scribed Tel runs on supported webpages to detect telephone numbers locally and offer call or text actions. A number you activate or look up is processed by the extension and the Service for that action. Site preferences and the current hostname can be used to determine whether a feature is enabled. This functionality does not require uploading the entire page or a history of everything you browse.

When you invoke credential matching or autofill, the extension examines the current site and login fields, retrieves an authorized saved login or one-time code, and inserts the values you choose into that webpage. The destination website can receive the values entered there. Review the site before filling. Browser extension permissions also support local settings, the side panel, microphone-based calls and notifications; you can disable the extension or change its permissions in the browser.

Information in messages, recordings, records or files may reveal health, financial, government-identifier, biometric, religious, racial or ethnic, union or other sensitive information. We do not require those categories for ordinary registration. Customers must limit their submissions to what a supported feature needs, have an appropriate legal basis and meet any additional consent or other conditions required for sensitive information.

Credentials intentionally stores secrets. Secret payloads are encrypted at rest using keys Scribed controls; authorized server processes can decrypt them, and reveal activity is logged. Searchable metadata, such as item names, website addresses, usernames, tags and field labels, is not protected in the same way as secret payloads. Share vault access carefully and do not put a secret in a metadata field.

Payroll, timecards and related workforce modules handle data at the organization’s direction. That organization determines employee access, disclosures, payroll-related retention and employment-law obligations. Payroll functionality is not a promise that Scribed acts as an employer, bank, tax adviser or regulated payroll processor.

Do not submit protected health information or other data whose handling requires a special agreement, regulated environment or safeguards the Service has not agreed to support. Any such use requires explicit written agreement and the necessary controls before submission. This policy is not a business associate agreement, a representation of HIPAA certification or permission to use every feature for regulated data.

We use sensitive information for the requested service, account protection and other legally permitted purposes; we do not use Credentials secrets or the content of private communications to target advertising. Where applicable law gives you a right to limit a particular sensitive-data use, contact us using Section 15.

Necessary cookies and local storage support sign-in, security, preferences and the record of your privacy choices. Optional analytics and advertising on the web app start only after an affirmative choice. The landing website does not currently load optional analytics or advertising trackers. Our Cookie settings explain the categories and let you accept, reject or change optional choices without losing core access.

When enabled and accepted, web-app analytics can include Google Analytics, PostHog and Vercel usage or performance metrics. Events can include page or feature activity and an opaque account identifier. Our PostHog configuration disables session replay and automatic capture of page contents, heatmaps, console recordings and exceptions; it does not identify users by their name or email. Operational server, billing and security logs are separate from these optional tools.

If you accept marketing cookies, configured Google Ads features may process online identifiers, device and page activity, referral or campaign information and conversion events for measurement and remarketing. This can constitute “sharing,” “sale” or targeted advertising under some state privacy laws even without money changing hands. We do not sell private account or workspace content for money, and do not send private workspace content to advertisers.

Use Cookie settings to reject optional categories or withdraw a previous choice. On browsers where we can read a Global Privacy Control (GPC) signal or Do Not Track (DNT) preference, we disable optional analytics and marketing, including when an older stored choice allowed them. Cookie settings displays a detected signal. These browser preferences affect that browser; they do not by themselves identify all your other devices or submit an account-deletion request.

The web app shares the preference cookie across supported scribed.ai subdomains. Choices expire after 180 days or a material policy-version change, when a new choice is requested. Clearing browser storage, changing browsers or using a different device can require setting preferences again. Withdrawal stops optional tracking going forward and clears known accessible tracking storage; it cannot recall information already lawfully sent to a provider.

We record privacy choices where possible with the choice, policy version, timestamp, randomly assigned browser identifier, IP address and user-agent information and, when signed in, account identifier. These records support honoring choices, demonstrating compliance and resolving disputes; keeping a required consent or rejection record does not itself rely on optional tracking consent.

• Cookie settings — Your privacy choices
• Google advertising and technology privacy

We disclose information relevant to the purposes below. The categories collected in Section 3 may be disclosed to the service providers supporting those categories; for example, payment information to a payment processor and recording content to a transcription provider. Access is not the same for every provider. Contact us for information about the providers relevant to a particular service or contractual requirement.

Third parties receiving information at your direction, public recipients and independent services may handle it under their own policies. Where Google Limited Use or another specific legal or contractual restriction is stricter, that restriction controls.

• Service providers: hosting, storage, databases, content delivery, authentication, payments, communications, file processing, transcription, AI, security, support and analytics providers as needed to perform their functions. They are engaged to process information for the applicable service and subject to relevant contractual restrictions.
• Your organization and selected recipients: authorized workspace members; people to whom you send a message, invitation, recording or file; and services you connect or instruct an agent to use. A public page or share link may make content accessible beyond your workspace. Copies downloaded or forwarded by recipients are outside our direct control.
• Advertising providers: limited online and conversion information for the optional advertising described in Section 10, subject to your choices and applicable law. Private messages, Credentials secrets and restricted Google API content are not advertising inputs.
• Affiliates and professional advisers: information necessary for shared administration, support, security, financial reporting or advice, subject to appropriate confidentiality and purpose limits. Affiliation does not give a company permission to market using text-message consent information.
• Legal and safety recipients: disclosures required by law or valid legal process, or reasonably necessary to investigate fraud or abuse, protect safety, establish or defend legal claims or enforce lawful agreements. We consider applicable confidentiality, data protection and notice requirements.
• Business transactions: information relevant to a proposed or completed financing, merger, acquisition, reorganization, insolvency or transfer of assets, with applicable confidentiality protections and required notices or permissions. A transaction does not remove applicable privacy obligations.
• With your direction or separate consent: another disclosure clearly explained when you request or authorize it.

We retain personal information for the purposes described here, only for as long as reasonably necessary for those purposes and applicable legal requirements. A single retention period would not accurately describe every feature or record. The criteria below apply to the corresponding categories in Section 3; a specific agreement, product setting or legal hold may affect a particular record.

Deleting your account is different from leaving a workspace, cancelling a subscription, disconnecting an integration, uninstalling an app or deleting one item. The account settings provide an account-deletion process with identity verification. Before deleting an account that owns a workspace with other members, you must transfer ownership or remove those members. Content and employment records belonging to another organization’s workspace can remain under that organization’s control after your account is removed.

Deletion may not instantly remove every backup, cached copy or external provider record. Remaining copies may persist through backup rotation or necessary legal, security and financial retention. We restrict their further use to the reason retained. Information already exported, sent to a recipient or published by you may remain in the recipient’s possession. Contact us about a particular deletion scope, retention requirement or provider record; do not assume that a deleted user interface item proves deletion everywhere.

• Account, authentication and preference data: while needed to maintain the account and its connections, then as necessary to complete closure, honor preferences and resolve security or legal issues.
• Workspace content, recordings, messages, outputs and workforce records: while the customer maintains the content or instructs us to retain it, subject to supported deletion settings, contractual obligations and applicable law.
• Billing, tax, transaction and dispute records: for the accounting, legal, dispute-resolution and audit periods applicable to the record; payment processors may have independent obligations.
• Security, access and operational logs: for investigation, reliability, fraud prevention and legal needs based on the event, sensitivity and risk, rather than indefinite reuse for an unrelated purpose.
• Support and privacy requests, consent and suppression records: to handle the request, demonstrate its resolution, document lawful choices and avoid contacting someone who opted out; legal requirements may prevent erasing all evidence of the request.
• Analytics and advertising records: according to the relevant configured retention, service purpose and privacy choices; withdrawing consent stops future optional collection but does not retroactively undo lawful processing.

We use administrative, technical and organizational safeguards designed for the information and processing involved, including authentication, access controls, encryption mechanisms and audit records where appropriate. No website, device, transmission or storage system is completely secure. We do not promise that encryption makes information inaccessible to every authorized operator or provider.

Protect your credentials, use available multifactor authentication, review workspace and integration access and promptly report suspected compromise. Avoid sending sensitive content in ordinary email when a support issue can be described without it. Where a breach requires notification to a customer, authority or individual, we provide that notification as required by applicable law and agreements.

• Security overview
• Report a security or account issue

Scribed is based in the United States. Information may be processed in the United States and other countries where relevant providers and authorized operations are located. Those countries may have different privacy protections from your country. Do not assume that a product is hosted exclusively in your jurisdiction unless a specific agreement says so.

Where applicable law requires safeguards for a transfer, an appropriate lawful transfer mechanism is required. Depending on the transfer, that may involve an adequacy decision, applicable standard contractual clauses and UK transfer terms, or another legally permitted mechanism and any necessary supplementary protections. Contact us for the locations, safeguards and available contractual terms applicable to your use, including a copy or description where required.

Your acceptance of the Terms or use of the website does not, by itself, constitute consent to a restricted international transfer. This policy does not claim certification under the EU–U.S., UK or Swiss Data Privacy Frameworks.

Depending on your location, our role and applicable law, you may request access to personal information, correction, deletion, a portable copy, information about its sources and recipients, restriction of processing, or an objection to processing. You may withdraw consent for future processing, opt out of applicable sales, sharing or targeted advertising, and exercise rights relating to qualifying automated decisions. Rights can have legal exceptions, including protection of others’ information and legally required records.

Email hello@scribed.ai with “Privacy request” in the subject, or write to Scribed Works, Inc., Attention: Privacy, 2261 Market Street, Suite 22871, San Francisco, CA 94114. Tell us the right you want to exercise, the email or other identifier relevant to the information and enough context to locate it, such as the organization or feature. You may use support@scribed.ai if you need help reaching us. You do not need to create a new account, pay a fee as a condition of a valid ordinary request or accept marketing to exercise a right.

We verify requests in a manner proportionate to their risk, usually through an existing account or information we already hold. We may ask for additional information only as reasonably necessary and use it for verification or compliance. Do not send a government ID or secret unless we explain why it is necessary and provide an appropriate channel. Browser-level advertising opt-outs do not require account verification.

An authorized agent may submit a request where permitted; we may ask for evidence of authority and verify the individual directly where lawful. If we act for a customer, we may refer the request to that customer and assist it. We respond within the period applicable to the request and explain permitted extensions, refusals or limitations. Where applicable law provides an appeal, reply to our decision with “Privacy appeal”; we review it and provide the required response and further complaint information.

Use account settings for available profile and deletion controls, Cookie settings for browser tracking, device settings for permissions, provider settings to revoke integrations, and unsubscribe links for promotional email. You may contact us if a control is unavailable or inaccessible. We will not unlawfully discriminate or retaliate because you exercise your privacy rights. Some processing is necessary for a requested service, so a choice to remove it may prevent that service from functioning.

• Submit a privacy request
• Cookie settings — Your privacy choices

This section supplements the policy where the California Consumer Privacy Act, as amended, or another state privacy law applies. Section 3 describes the categories we collect, the sources and examples; Sections 4–11 explain purposes and recipient categories; Section 12 provides retention criteria. These descriptions also cover the relevant practices during the preceding 12 months, to the extent the feature or practice operated during that period.

The California categories represented can include identifiers; customer-record information; commercial information; internet or electronic-network activity; approximate geolocation; audio, electronic and visual information; professional or employment information; inferences; and sensitive personal information such as account-access credentials and private communications. Education, protected-classification, health or other sensitive information is collected only to the extent provided through a relevant customer feature or submission, rather than being required for ordinary registration. Not every category applies to every person.

For business purposes, we disclose relevant categories to the service providers, organizations and recipients identified in Section 11. For optional advertising, online identifiers and internet activity may be disclosed to advertising providers in a way considered sale or sharing. Customer-directed business discovery also processes the contact information described in Section 3; contact us to exercise applicable rights for that information. We do not sell private account or workspace content for money. We do not knowingly sell or share personal information of individuals under 16.

California residents may have rights to know and access specific information and categories, correct inaccuracies, delete, opt out of sale or sharing, limit qualifying sensitive-information uses and receive equal treatment. The applicable rights and our obligations depend on the law’s scope and exceptions. For browser advertising opt-outs, use Your privacy choices or a supported GPC signal; for other requests, follow Section 15.

Other state laws may provide similar access, correction, deletion and portability rights, a right to opt out of targeted advertising, sales or certain profiling, an authorized-agent process and an appeal. We honor applicable rights and recognized opt-out signals as described above. If an appeal does not resolve a concern, you may contact your state attorney general or other competent regulator.

California residents may also ask about disclosures for another company’s direct marketing under the applicable Shine the Light law. We do not provide personal information to other companies for their own direct marketing in a manner requiring that disclosure without the required choice.

• Your privacy choices — opt out of sale or sharing
• California privacy rights information

Where applicable, you can request access, rectification, erasure, restriction and portability; withdraw consent without affecting prior lawful processing; object to processing based on legitimate interests; and object to direct marketing. You may also have safeguards concerning decisions based solely on automated processing that produce legal or similarly significant effects. Sections 4 and 14 explain legal bases and international processing.

You may complain to the data protection authority for your habitual residence, place of work or the place of the alleged infringement. UK residents may contact the Information Commissioner’s Office, and Swiss residents the Federal Data Protection and Information Commissioner. Contacting us first can help resolve an issue, but is not a condition of exercising a right or making a regulatory complaint.

Rights in other jurisdictions, including Canada, may include access, correction, withdrawal of consent and complaints to a competent authority, subject to local law. Contact us through Section 15; we assess the request under the law that applies rather than limiting all users to one jurisdiction’s rules.

• EEA data protection authorities
• UK Information Commissioner — complaints
• Swiss data protection authority

The Service is designed for business use and is not directed to children. Account holders must satisfy the age and legal-capacity requirements in the Terms. We do not knowingly collect personal information directly from children under 16 for an ordinary Scribed account or knowingly sell or share their information for cross-context advertising.

If you believe a child supplied personal information in violation of these requirements, contact hello@scribed.ai so we can investigate and take appropriate steps. A customer’s submission of records concerning a minor is a separate processing activity for which that customer must have authority and meet applicable child-privacy requirements; it does not make the Service an approved school or children’s product.

A public share, published page, external recipient or connected service can make information available beyond the Service. Search engines or recipients may retain a copy even after you remove an original. Review the audience, access settings and personal information included before publishing or exporting.

External websites, app stores, identity services and providers you independently choose have their own privacy terms and controls. Linking to them does not make this policy their policy. We remain responsible for our own processing and for obligations that apply when we engage a provider on our behalf.

We may update this notice as features, practices or legal requirements change. We display the updated date and version and provide additional notice of material changes as required, such as an in-product message or email. If a change requires fresh consent, we obtain that consent before the relevant new processing; continuing to use the Service does not replace it.

For privacy questions, requests, an accessible copy of this notice or information about contractual privacy terms, contact hello@scribed.ai, Attention: Privacy, or write to Scribed Works, Inc., 2261 Market Street, Suite 22871, San Francisco, CA 94114. For account or technical help, contact support@scribed.ai.

• Email Privacy
• Contact Support