Privacy Policy

Scribossauro is a desktop application developed in Brazil to record, transcribe, and summarize meetings and audio calls. This Privacy Policy describes how we handle (or deliberately do not handle) your personal data. Questions can be sent to [email protected].

Scribossauro was designed with privacy as the default: the raw audio from your recordings never leaves your device. Transcription processing occurs locally, without being sent to external servers.

Only on paid plans — and only when you explicitly enable features such as cloud sync or the AI assistant — is transcription data transmitted in encrypted form to the services described in this policy.

Depending on how you use Scribossauro, we may collect:

• Account data — name and email provided during registration, needed for authentication and support.
• Usage data — number of transcription minutes consumed, for plan quota control.
• Transcriptions (optional) — only if you enable cloud sync; stored in encrypted form.
• Payment data — processed directly by the payment gateway; Scribossauro does not store card data.
• Technical logs — app version and error type (no audio or transcription data), used for failure diagnosis.

We do not collect raw audio, video, email content, browsing history, or any data not listed above.

• Authenticate your account and control access to your plan.
• Process payments and issue receipts.
• Sync transcriptions across devices, when enabled by you.
• Power the AI assistant on the T-Rex plan, when activated by you.
• Diagnose technical failures based on anonymized logs.
• Send service communications (updates, quota alerts, receipts).

We do not sell or rent your data. We share information only with essential service providers subject to confidentiality agreements:

• Payment gateway — for subscription processing.
• Cloud provider — for encrypted storage of transcriptions (only if sync is enabled).
• AI service — transcription text sent to the language model only during AI assistant sessions (T-Rex plan).

We may disclose data when required by law or court order, within the limits established by applicable legislation.

Recordings and transcriptions are saved locally on your device by default. When cloud sync is active, data is transmitted via HTTPS and stored with encryption at rest (AES-256).

We employ state-of-the-art security practices: short-lived token authentication, least-privilege principle, and periodic access audits. No system is 100% invulnerable; in case of an incident affecting your data, we will notify you within the legally required timeframe.

• Account data — retained while your account is active. Deleted within 30 days of a deletion request.
• Cloud transcriptions — deleted within 30 days after subscription cancellation or deletion request.
• Technical logs — retained for up to 90 days, then automatically discarded.
• Payment data — retained for the accounting period required by law (5 years).

Under applicable data protection law, you have the right to:

• Confirm whether we process your data and access it.
• Correct incomplete, inaccurate, or outdated data.
• Request anonymization, blocking, or deletion of unnecessary data.
• Request portability of your data to another service.
• Withdraw consent at any time, without prejudice to prior processing.
• Object to processing carried out without your agreement.

To exercise any of these rights, send a request to [email protected]. We will respond within 15 business days.

The Scribossauro website uses only essential technical cookies for operation (authenticated session). We do not use third-party tracking cookies, ad pixels, or behavioral analytics tools without your permission.

Scribossauro is not intended for users under 18 years of age and does not intentionally collect data from children or adolescents. If we identify that data from a minor was provided without parental consent, we will delete that information immediately.

We may update this Privacy Policy periodically. Relevant changes will be communicated by email or by notice within the app itself at least 15 days in advance. The date of the last revision will always appear at the top of this page.

To exercise your rights, ask questions, or report privacy concerns, contact us at [email protected]. This is also the channel for our Data Protection Officer (DPO).