LGPD and GDPR
How to exercise your data subject rights at VoxScriber: data export, correction, portability and deletion, response time, and differences by region.
VoxScriber complies with LGPD (Brazil) and GDPR (Europe). In practice, this means you can export, correct, port, and delete your data — and that the infrastructure respects the data residency of your region.
Your rights and how to exercise them
You can open a data subject request of four types:
| Request | What it delivers |
|---|---|
| Export | A copy of your data |
| Rectification | Correction of incorrect data |
| Portability | Data in a portable format |
| Deletion | Removal of your data |
Requests are made through the privacy area of your account (or via ticket, if you prefer) and are fulfilled within 15 days, the deadline under Art. 18 §5 of LGPD, which we adopt as the standard for all regions.
The export download arrives via a secure link that is valid for 15 minutes — if it expires before you download, just generate it again.
Data residency by region
- Europe accounts (EU/EEA/UK): database in Amsterdam and files in a dedicated European bucket;
- Brazil and other regions: database in Chicago and files in the default bucket;
- Users in opt-in regime regions (Europe, UK, Japan, Korea) have explicit consent for communications — the default there is to receive nothing without opt-in.
Retention and deletion
- Audio: deleted 30 days after transcription (1 day for failed uploads);
- Text: kept until you delete it — or automatically, if you set retention of 30/90/180/365 days in the privacy settings;
- Account deletion: cancels subscriptions and removes/anonymizes your data — see Delete my account. For the right to full erasure (GDPR), deep deletion scans all tables containing your data; content that belongs to an organization is first transferred to its owner.
Deletion is permanent and the deleted email cannot be used to create a new account (anti-abuse protection). Export your data before requesting deletion.
Frequently asked questions
How long does it take to fulfill my request?
Up to 15 days, for any type of data subject request, in all regions.
Can I ask for a copy of everything you have about me?
Yes — the export/portability request generates a package with your data, delivered via a secure 15-minute link.
I'm from Europe — does LGPD apply to me?
You are covered by GDPR, with data residing in Europe. The mechanisms (export, deletion, deadlines) are the same.
Is deleting my data the same as deleting my account?
Account deletion already removes/anonymizes your personal data. The GDPR deep erasure request goes further, scanning all tables — use it if you need full erasure.
Do transcriptions from my company go into my export?
Content created in the context of an organization belongs to the company. On deletion, it is transferred to the organization's owner, not deleted with your account.
Keep learning
- Data security and privacy - Retention in detail
- Delete my account - Step-by-step guide to deletion
- Domains and regions - Where each region resides
- Encryption and data encryption key (DEK) - Content protection
Still have questions? Open a ticket and we'll get back to you quickly.