Privacy Policy

Your privacy is fundamental to us. Here we explain how we collect, use and protect your data.

Last updated: April 2026 | GDPR Compliant (Regulation 2016/679)

Data Controller

VoxScriber

Website: www.voxscriber.com
E-mail: privacy@voxscriber.com
DPO: Lucas Ribeiro Cavalcante
Email DPO: dpo@voxscriber.com
Main Activity: AI-powered audio-to-text transcription
Legal Basis: Consent, contract performance and legitimate interest
Data Location: Brazil and United States (with Standard Contractual Clauses)

Personal Data We Collect

We only collect data necessary to provide our transcription services

Identification Data

  • • Full name
  • • Email address
  • • Phone number (when provided)
  • • Date of birth (when provided)
  • • Profile photo (optional)
Legal basis: Consent and contract performance (Art. 6(1)(a)(b) GDPR)

Browsing Data

  • • IP address
  • • Browser type and version
  • • Operating system
  • • Pages visited and time spent
  • • Cookies and unique identifiers
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR)

Transcription Data

  • • Uploaded audio files
  • • Generated transcribed text
  • • File metadata (duration, format)
  • • Transcription history
  • • Configuration preferences
Legal basis: Contract performance and consent (Art. 6(1)(a)(b) GDPR)

Financial Data

  • • Billing information
  • • Payment history
  • • Subscribed plan
  • • Tax identification number (when required)
  • • Billing address
Legal basis: Legal obligation and contract performance (Art. 6(1)(b)(c) GDPR)

How We Use Your Data

Primary Purposes

  • • Process and transcribe your audio files
  • • Manage your account and authentication
  • • Process payments and issue invoices
  • • Provide technical support
  • • Comply with legal and contractual obligations

Improvements and Analytics

  • • Improve transcription quality
  • • Analyze platform usage (anonymized data)
  • • Develop new features
  • • Detect and prevent fraud
  • • Optimize system performance

What We Do NOT Do

  • • We never sell your personal data to third parties
  • • We do not share the content of your audio files
  • • We do not use your data for purposes unrelated to the service
  • • We do not send marketing communications without your explicit consent

Data Sharing

Your data may only be shared in the following situations, always in compliance with the GDPR:

Service Providers

We share data with essential technical partners for our operations:

  • • Hosting: Oracle Cloud Infrastructure (Brazil)
  • • Storage: Cloudflare R2 (global) + Oracle Cloud (Brazil)
  • • AI Transcription: AssemblyAI (USA), OpenAI Whisper (USA), ElevenLabs (USA)
  • • Payments: Stripe (international), MercadoPago (Brazil), Woovi/OpenPix (Brazil — PIX)
  • • Transactional email: Postmark (USA) — confirmations and system notifications
  • • Marketing email: MailerLite (Latvia/USA) — onboarding sequences
  • • Analytics: Google Analytics 4 + Google Ads (USA) — usage and conversions
  • • Behavioral analytics: Microsoft Clarity (USA) — anonymized session recordings
  • • Product analytics: Himetrica — platform usage metrics
  • • Advertising: Meta Pixel / Facebook Ads (USA)
  • • OAuth authentication: Google (USA), Facebook/Meta (USA)

Legal Obligations

We may share data when required by law:

  • • Court order or competent authority
  • • Fraud or criminal investigations
  • • Compliance with tax obligations
  • • Protection of rights and safety

Our Security Guarantees

  • • Rigorous contracts: All partners sign DPAs (Data Processing Agreements)
  • • Secure transfers: Standard Contractual Clauses for international processing (Art. 46 GDPR)
  • • Certified partners: AssemblyAI, OpenAI, and ElevenLabs with automatic data deletion
  • • Continuous auditing: 24/7 monitoring and regular vendor audits
  • • Minimal retention: Data processed by AI is deleted immediately after transcription
  • • Encryption: All data encrypted in transit and at rest using AES-256

Data Retention and Storage

We retain your data only for as long as necessary to fulfill the stated purposes:

Audio Files and Transcriptions

  • • During active account: Retained according to your plan
  • • After cancellation: 30 days for download/backup
  • • Deletion: You can delete at any time
  • • Security backup: 90 days after deletion

Account Data

  • • Identification data: During active account + 5 years
  • • Payment history: 5 years (tax obligation)
  • • Access logs: 6 months
  • • Marketing data: Until consent withdrawal

Infrastructure and Security

  • • Hosting: Oracle Cloud Infrastructure (Brazil)
  • • Storage: Cloudflare R2 + Oracle Cloud (Brazil)
  • • AI Processing: AssemblyAI (USA), OpenAI Whisper (USA), ElevenLabs (USA)
  • • Encryption: AES-256 in transit and at rest
  • • Backups: Automated and encrypted
  • • Access: Restricted, audited and monitored 24/7
International Transfers: For AI processing, data is transferred to the USA under Standard Contractual Clauses (Art. 46 GDPR) and deleted immediately after transcription.

Your Rights Under the GDPR

You have legally guaranteed rights over your personal data

Right of Access

View all data we hold about you, including how it was obtained and how it is used (Art. 15 GDPR).

Right to Rectification

Correct incomplete, inaccurate or outdated data (Art. 16 GDPR).

Right to Erasure

Request deletion of your personal data when it is no longer necessary (Art. 17 GDPR).

Right to Data Portability

Receive your data in a structured, commonly used and machine-readable format (Art. 20 GDPR).

Right to Object

Object to data processing based on legitimate interest or for direct marketing (Art. 21 GDPR).

Withdrawal of Consent

Withdraw your consent at any time for processing that depends on it (Art. 7(3) GDPR).

How to Exercise Your Rights

To exercise any of your rights, contact us:

Response time:
Up to 30 days (Art. 12(3) GDPR)
Verification:
Identity verification may be required

Cookies and Tracking

We use cookies and similar technologies to improve your experience. You have full control over how your data is collected.

Google Analytics 4 + Google Ads

Understand how you use the platform, measure conversions and optimize paid campaigns. Anonymized data subject to Google Consent Mode v2.

Optional

Meta Pixel (Facebook/Instagram)

Show relevant ads and measure campaign effectiveness on Facebook and Instagram. Only with consent.

Optional

Microsoft Clarity

Anonymized session recordings and heatmaps to identify usability issues. No identifiable data is collected.

Optional

Himetrica

First-party product analytics (usage events, performance, errors). Data processed on controlled infrastructure.

Optional

Learn more: See our Cookie Policy for full details on how we use these technologies.

Contact Us

For questions, requests about your data or to exercise your rights:

Data Protection Officer (DPO)

DPO: Lucas Ribeiro Cavalcante

E-mail: dpo@voxscriber.com

Response time: Up to 30 days

Supervisory Authority

You may file a complaint with your local Data Protection Authority

edpb.europa.eu/about-edpb/about-edpb/members_en

For complaints about personal data processing

This policy may be updated periodically. Significant changes will be communicated by email.

VoxScriber - Committed to your privacy