PRIVACY POLICY

• We collect what we need to run DaDaScribe: your account details, the files, recordings and links you submit, the results we create from them, billing records (payments are processed by Stripe), and basic technical and usage data, including through Google Analytics.
• Your content is processed by automated AI systems to produce your results. We do not use your content to train AI models, and our service providers are not allowed to use it for their own purposes either.
• We do not sell your personal information or share it for advertising, and we do not use your name, logo or personal information in our marketing without your consent.
• Your uploaded files, recordings and results are kept for 24 months and then deleted. You can delete files sooner, and closing your account deletes your account and files immediately.
• We protect your data with reasonable safeguards, but no system is perfectly secure. Sensitive information is uploaded at your own risk, and health information covered by HIPAA may be uploaded only under a Business Associate Agreement.
• You can access, correct, download and delete your information. Just email support@dadascribe.com.

The full details are below.

Contents

1. Who we are and what this policy covers
2. Information we collect
3. How we use information
4. AI processing and no training on your content
5. How we disclose information
6. Cookies, analytics and similar technologies
7. How long we keep information
8. Security
9. Sensitive information and health data
10. Children
11. Your choices and rights
12. California privacy disclosures
13. International users (EEA, UK and Switzerland)
14. Business customers and content about other people
15. Changes to this Privacy Policy
16. Contact us

DaDaScribe is operated by InfiniStrategy, LLC, a California limited liability company doing business as DaDaScribe (“DaDaScribe,” “we,” “us” or “our”), 29911 Niguel Road, #6992, Laguna Niguel, CA 92677 - USA. We are responsible for the personal information described in this Privacy Policy, except as explained in Section 14 for content that business customers upload about other people.

This Privacy Policy applies to the website at www.dadascribe.com and its subdomains (including api.dadascribe.com), the DaDaScribe API, and the transcription, translation, captioning and related services we provide through them (together, the “Service”). It applies to visitors, account holders and anyone who submits content or contacts us. It does not apply to third-party websites or services that we link to, such as YouTube, Google or Stripe; their own privacy policies apply.

This Privacy Policy is part of, and should be read together with, our Terms of Service (the “Terms”). References to “Sections” of the Terms are to the numbered sections of the Terms. Capitalized terms not defined here, such as “Customer Data,” “Aggregate Data” and “Suggestions,” have the meanings given in Section 4 of the Terms.

2.1 Information you give us

• Account information. When you sign up, we collect your first and last name, your email address, your password and, if you choose to provide it, your company name. You can also sign up or log in with Google (see Section 2.3).
• Content you submit. This includes the audio and video files you upload, recordings you make with your microphone through our website, the YouTube or other links you submit, and the job details you enter, such as speaker names, the source language and the languages you want translations into. It also includes the results we create for you, such as transcriptions, translations, subtitles and captions, and summaries. Together, this content is “Customer Data” under the Terms.
• Information about other people in your content. Recordings often contain the voices, names and other personal information of people other than you, such as meeting participants, interviewees, clients or patients. We process that information only to provide the Service to you. You are responsible for having the right to upload it (Sections 5.4 and 5.10 of the Terms).
• Email address for delivering results. When you request a transcription from our home page, we ask for the email address where we should send your results. We save it as soon as you continue past the email step, before the final confirmation step, and we use it to notify you and to make your results available in the account panel associated with that address.
• API information. If you use the API, we collect the API keys you create in your account settings and the requests you send, including files, links and job settings.
• Payment information. Paid plans and extra transcription time are purchased through Stripe’s hosted checkout. Stripe collects your card or other payment details directly. We never receive or store your full card number. We keep records of your plan, purchases, transaction amounts and dates, and payment status.
• Communications and feedback. When you use our contact form or email us, we collect your name, email address and message, and any other information you choose to include. If you send us Suggestions (feedback), we may use them as described in Section 4.

2.2 Information we collect automatically

• Log and device information. Our servers automatically record information about each request to the Service. This includes your IP address, browser type and version, operating system, the pages or API endpoints requested, the referring page, the date and time, and error information.
• Usage information. We record how you use the Service: for example, the jobs you submit, file sizes and durations, transcription minutes used, job status and the features you use.
• Cookies, local storage and analytics. We and Google use cookies, browser storage and similar technologies, including Google Analytics, as described in Section 6.

2.3 Information we receive from third parties

• Google Sign-In. If you sign up or log in with your Google account, Google provides us with basic profile information, such as your name, email address, Google account identifier and profile picture, as permitted by your Google settings.
• Stripe. Stripe tells us whether a payment succeeded and gives us related billing details, such as the plan purchased, the amount, the date and limited payment-method information (for example, the card brand and last four digits).
• Content platforms. When you submit a YouTube or other link, we retrieve the media at that link in order to transcribe it.
• Business customers. If an organization gives you access to the Service, it may provide us with information about you, such as your name and work email address.

We use personal information to:

• Provide the Service. This includes creating and managing your account; processing your files, recordings and links; producing transcriptions, translations, captions, summaries and other results; delivering results by email, in your account and through the API; and providing customer support.
• Handle payments and subscriptions. We use it to process purchases through Stripe, manage subscriptions, renewals and cancellations, and send required notices, such as price-change notices under Section 6.2 of the Terms.
• Communicate with you. We send service emails, such as job notifications, account and security messages, and changes to the Terms or this Privacy Policy, and we respond to your messages. We may also occasionally email account holders about new features and offers. Every such email includes an unsubscribe link.
• Keep the Service safe. This includes preventing spam, fraud and abuse (for example, through the “human” check on our forms), protecting accounts, investigating security issues and enforcing the Terms.
• Understand and improve the Service. We use analytics, usage statistics and error information to fix problems and improve features; Aggregate Data as described in Section 7.5 of the Terms; and Suggestions as described in Section 4. This does not include training AI models on Customer Data, which we never do.
• Comply with law. This includes meeting legal, tax and accounting obligations, responding to lawful requests, and establishing, exercising or defending legal claims.
• Other purposes with your consent or at your direction.

We do not use your personal information or Customer Data for advertising or for building advertising profiles, and we do not use your name, logo, trademarks or personal information in our marketing materials, website or other publicity without your prior written consent (Section 10.4 of the Terms).

DaDaScribe is an AI-based service. Your content is processed by automated systems, which include our own software and AI services provided by third-party providers. These systems perform speech recognition, speaker separation, translation, summarization, automatic proofreading, audio background removal and lyrics extraction. People do not listen to, watch or read your content as part of normal processing. Our personnel access it only when needed to provide support you request, to investigate a technical, security or abuse issue, or to comply with the law.

• No training on Customer Data. We do not use Customer Data, which includes the audio, video and other content you upload and the transcriptions, translations and captions generated from it, to train, fine-tune or otherwise improve our artificial intelligence or machine learning models. This also applies to Aggregate Data to the extent it is derived from the content of Customer Data (Section 7.3 of the Terms).
• Service providers. Our service providers process Customer Data only on our behalf and as necessary to provide the Service. They have no right to use it for their own purposes, including to train or improve their own AI or machine learning models (Section 7.3 of the Terms).
• Feedback. Suggestions you choose to send us (comments, ideas and other feedback about the Service) may be used to improve the Service and to train and improve our AI and machine learning models (Section 7.6 of the Terms). Customer Data contained in, quoted in or attached to feedback is not a Suggestion and remains protected by Section 7.3 of the Terms.
• Speaker recognition. Our multiple-speaker feature separates the different voices within a recording so they can be labeled with the speaker names you provide. We do not use it to identify who a speaker is, and we do not create voiceprints or recognize the same person across different recordings.
• No automated decisions about you. We do not use AI outputs to make decisions about you that have legal or similarly significant effects. AI-generated results can contain errors, so please review them before relying on them.

We disclose personal information only as follows:

• Service providers. We use companies that help us run the Service. They act on our behalf and are allowed to use personal information only to provide their services to us. They are:
  • cloud hosting providers (our web servers are in the United States);
  • cloud storage providers, including Amazon Web Services, where uploaded files are stored;
  • AI speech-recognition, translation and language-processing providers;
  • our payment processor, Stripe;
  • Google, for Google Sign-In and Google Analytics (see Section 6).
• At your direction. We disclose information when you ask us to, for example when you sign in with Google. If you use the Service through an organization's account, information is also available to that organization as described in Section 14.
• Professional advisers. These include lawyers, accountants and auditors, under duties of confidentiality.
• Legal and safety reasons. We disclose information when we believe in good faith that it is required by law, subpoena, court order or other legal process, or that it is necessary to protect the rights, property or safety of DaDaScribe, our users or others, to investigate fraud or security issues, or to enforce the Terms.
• Business transfers. Information may be transferred as part of a merger, acquisition, financing, sale of assets or similar transaction, or in bankruptcy. We will require any recipient to honor this Privacy Policy for the information it receives.
• Aggregate or de-identified information. This is information that cannot reasonably be used to identify you, as described in Section 7.5 of the Terms.

No selling or sharing. We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as the terms “sell” and “share” are defined in the California Consumer Privacy Act (Section 12.13 of the Terms). We have not done so in the past 12 months. We do not disclose personal information to third parties for their own direct marketing purposes.

Cookies are small text files stored by your browser. Local storage and session storage are similar browser features. We use them as follows:

Essential cookies (first-party). The Service needs these to work:

• PHPSESSID (www.dadascribe.com and api.dadascribe.com): keeps your session and keeps you signed in. Persistent.
• token: a security token that protects our forms against misuse. It expires when you close your browser.
• lastForm: remembers which transcription form you last used. It expires when you close your browser.
• chosenPlan: remembers the plan you selected while signing up. Expires after 1 year.
• UPplan and CKdown: temporary cookies used during plan upgrades and checkout.
• g_state: set by Google Sign-In on our sign-up and login pages to remember the state of the Google sign-in prompt. Expires after about 6 months.

Google Analytics. We use Google Analytics to understand how visitors use our website. When you load a page, your browser sends Google:

• the page address and title, the referring page, your browser language and your screen size;
• scrolling, time on page, clicks on links and buttons, file downloads and site-search terms;
• a random identifier stored in your browser's local storage (clientId), and session identifiers stored in session storage (sessionId, sessionCount).

Google receives your IP address as part of these requests. Our Google Analytics setup does not collect what you type into form fields. Event-level Google Analytics data is kept for no more than 14 months. We have not enabled Google Analytics advertising features, such as Google signals or Google Ads linking, and we do not use Google Analytics data for advertising. You can learn how Google uses this data at How Google uses information from sites or apps that use its services.

Google Sign-In. Our sign-up and login pages load Google’s sign-in code from accounts.google.com. Google therefore receives your IP address and browser information, and it may read its own cookies, even if you do not use the Google button. Google’s use of that information is governed by the Google Privacy Policy.

We do not use advertising cookies, advertising pixels or third-party ad networks.

Your choices.

• Most browsers let you block or delete cookies and site data. If you block essential cookies, you will not be able to log in or use some features.
• You can stop Google Analytics from receiving information from our website by blocking requests to google-analytics.com with your browser’s tracking protection or a content-blocking extension.
• Google also offers the Google Analytics Opt-out Browser Add-on. It is designed for Google’s standard Analytics code, so a blocker is the more reliable option on our website.

Do Not Track and Global Privacy Control. Our website does not currently change its behavior in response to “Do Not Track” browser signals. Because we do not sell or share personal information (see Section 5), a Global Privacy Control signal does not change how we handle your information. If that ever changes, we will honor Global Privacy Control signals as an opt-out request as required by law.

We keep personal information only as long as we need it for the purposes described in this Privacy Policy, unless the law requires or permits us to keep it longer:

• Uploaded files, recordings and results: the audio and video files and browser recordings you upload or submit (other than through the API), and the transcriptions, translations, captions and summaries created from them, are kept for 24 months after the transcription is completed and then deleted without notice (Section 8.4 of the Terms). You can delete them earlier or ask us to delete them. Please download anything you want to keep.
• API files: audio, video and other files submitted through the API, and the results generated from them, are deleted 1 hour after the job is complete. Results can be downloaded during that hour (Section 8.4 of the Terms).
• Account information (including API keys): kept while your account is open. When you close your account, your account information and files are deleted immediately (Sections 6.3 and 8.4 of the Terms), except for the records we must keep as described below. If a free account has not been used for six (6) months, we may delete it and its files without notice (Section 8.3 of the Terms).
• Billing and transaction records: 7 years, for tax, accounting and legal purposes.
• Server and API logs: up to 12 months, or longer if needed to investigate a security or abuse issue.
• Support and contact-form messages: up to 3 years after our last communication with you.
• Google Analytics data: no more than 14 months at the event level (see Section 6).
• Suggestions and Aggregate Data: may be kept indefinitely (Sections 7.5 and 7.6 of the Terms).

When we delete data, residual copies may remain in routine backups for a limited time until they are overwritten in the ordinary course. We may also keep data where the law requires it. Retained copies stay protected as described in this Privacy Policy and Exhibit B of the Terms.

We maintain commercially reasonable administrative, technical and physical safeguards designed to protect personal information and Customer Data against unauthorized access, use, alteration, loss or disclosure. For example, our website and API use encrypted HTTPS connections, and we limit access to Customer Data to the personnel and service providers who need it to provide, maintain, support or secure the Service (Exhibit B of the Terms).

No method of transmitting or storing data is completely secure, and we cannot guarantee that your information will never be accessed without authorization. Please use a strong, unique password, keep your login details and API keys confidential, and tell us right away at support@dadascribe.com if you suspect unauthorized use of your account (Section 5.2 of the Terms).

If we become aware of a security breach that results in unauthorized access to or acquisition of your personal information or Customer Data, we will notify you without unreasonable delay and as required by applicable law, and we will take reasonable steps to contain and remediate it.

We do not ask you to give us sensitive information. Your recordings may nevertheless contain it, for example health or financial details, government ID numbers, or information about religion, politics or other sensitive matters. If they do:

• We process that information only to provide the Service you request, in the same way as other Customer Data. We do not use it to infer characteristics about you or anyone else.
• As explained in Section 5.5 of the Terms, the Service is not represented to meet any heightened security, privacy or regulatory standard that may apply to Sensitive Information. You upload it at your own risk, and you are responsible for obtaining any required consents.
• If you are a covered entity or business associate under HIPAA, you may upload protected health information (PHI) only after signing our Business Associate Agreement. To request one, email support@dadascribe.com (Section 5.6 of the Terms). A signed Business Associate Agreement governs that PHI.

Your account password is also sensitive information. We use it only to authenticate you and keep your account secure.

The Service is intended only for adults. You must be at least 18 years old, or the age of majority where you live if that is higher, to use it (Section 1.3 of the Terms). The Service is not directed to children. We do not knowingly collect personal information from anyone under 18, including children under 13 and minors under 16, and we do not sell or share any minor’s personal information.

If we learn that we have collected personal information from someone under 18, we will delete it. If you believe a child has given us personal information, please contact us at support@dadascribe.com.

Adults sometimes upload recordings in which children can be heard. The person uploading is responsible for having the right to do so (Sections 5.4 and 5.10 of the Terms), and we process that content only to provide the Service.

Wherever you live, you can:

• Access and download your information. You can view and download your results in your account, and you can ask us for a copy of the personal information we hold about you.
• Correct your information. You can update your account details in your account, or ask us to correct inaccurate information.
• Delete your information:
  • You can delete files from your account.
  • You can close your account at any time with the “CLOSE ACCOUNT” button in the Account Info panel (Section 8.1 of the Terms). Closing your account ends access and deletes your account and files immediately, so download your files first; Section 6.3 of the Terms explains what happens to any remaining transcription time.
  • You can also ask us to delete your personal information. We will do so within a reasonable time, except for information we must keep for legal, tax, security or dispute purposes, and residual backup copies as described in Section 7.
• Control emails. You can unsubscribe from any non-essential email using the link in it or by contacting us. Service emails about your account, your jobs, your purchases and changes to our terms continue while you have an account.
• Control cookies and analytics as described in Section 6.

How to make a request. Email support@dadascribe.com with the subject line “Privacy Request,” or write to us at the address in Section 16. Please tell us which right you want to exercise. To protect your information, we will verify your identity before acting on a request, usually by confirming that you control the email address on the account. We may ask for more information if needed, and we will use it only for verification.

• Authorized agents. You may use an authorized agent to make a request for you. We may require signed written permission from you, or a valid power of attorney, and may ask you to verify your identity directly.
• Response times. We respond within 45 days, or within one month where the GDPR or UK GDPR applies. These periods can be extended where the law allows, and we will tell you if we need more time.
• No charge and no discrimination. Requests are free unless they are manifestly unfounded or excessive. We will not discriminate against you for exercising your privacy rights, for example by denying the Service or charging different prices.
• If we decline. If we decline your request, we will explain why, and you can reply to ask us to reconsider.

If you use the Service through an organization's account, or if your information appears in content that someone else uploaded, please also see Section 14.

California residents have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (the “CCPA”), and other California laws. The CCPA applies only to businesses that meet certain size or data-volume thresholds, and DaDaScribe may not be required to comply with it. We nevertheless provide these disclosures and honor the rights below for all users.

Categories of personal information we collected in the past 12 months:

• Identifiers: name, email address, IP address, account and API identifiers, Google account identifier, and the online identifiers used by Google Analytics.
• Customer records (Cal. Civ. Code § 1798.80(e)): name, company name, email address and limited payment information.
• Commercial information: plans, purchases and transcription time used.
• Internet or other electronic network activity: logs, usage information and analytics data.
• Audio, electronic and visual information: the audio and video files, recordings and links you submit, and the results we create from them.
• Professional information: company name, if you provide it.
• Sensitive personal information: account login (email address and password), and any sensitive information contained in content you choose to upload (see Section 9).
• Approximate location inferred from IP address (for example, by Google Analytics). We do not collect precise geolocation.

We collect these categories from the sources described in Section 2, for the business and commercial purposes described in Sections 3 and 4. We disclose each category for business purposes only to the categories of recipients described in Section 5, as needed for those purposes, and keep it for the periods described in Section 7. We use sensitive personal information only for purposes permitted by the CCPA, such as providing the Service you request and keeping it secure. We do not use it to infer characteristics about you, so the right to limit its use does not apply.

No sale or sharing. We do not sell or share personal information, including that of consumers under 16, and we have not done so in the past 12 months.

Your California rights. You have the right to:

• know what personal information we collect, use and disclose, and to access it;
• delete it;
• correct inaccurate personal information;
• opt out of any sale or sharing (we do neither);
• not be discriminated against for exercising these rights.

To exercise them, follow the steps in Section 11.

Shine the Light (Cal. Civ. Code § 1798.83). We do not disclose personal information to third parties for their own direct marketing purposes. California residents may ask us about this by contacting us as described in Section 16.

Additional California consumer notices appear in Section 12.13 of the Terms.

DaDaScribe is based in the United States, and our web servers are in the United States. Our service providers may process information in the United States and in other countries where they or their subprocessors operate. If you use the Service from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

We offer the Service to users in the European Economic Area (EEA), the United Kingdom and Switzerland. If you are located there, the following also applies:

• Controller. InfiniStrategy, LLC (DaDaScribe) is the controller of your account, billing, website and communications data. For content that a business customer uploads about other people, we act as a processor; see Section 14.
• Legal bases. We process personal information:
  • to perform our contract with you (providing the Service, your account and payments);
  • based on our legitimate interests in operating, securing, analyzing and improving the Service, preventing fraud and abuse, and communicating with you;
  • to comply with legal obligations (for example, tax records);
  • based on your consent where the law requires it (for example, for certain cookies and similar technologies, or for marketing emails). You may withdraw consent at any time.
• Special categories of data. We do not seek special categories of personal data. If your content contains them, we process them only to provide the Service at your request and as described in Section 9.
• Your rights. Subject to the conditions in the law, you have the right to:
  • access, correct or erase your personal data;
  • restrict or object to its processing, including processing based on our legitimate interests;
  • data portability;
  • withdraw consent.
  To exercise these rights, follow the steps in Section 11. You also have the right to lodge a complaint with your local data protection supervisory authority. In the UK, that is the Information Commissioner’s Office; in Switzerland, the Federal Data Protection and Information Commissioner.
• International transfers. Where the law requires it, we use appropriate safeguards for transfers of personal data outside the EEA, the UK or Switzerland. These include the European Commission’s Standard Contractual Clauses and the UK Addendum to them, or another mechanism permitted by law. Contact us for more information.
• Data processing agreement. Business customers that need a data processing agreement under the GDPR or UK GDPR can request one at support@dadascribe.com.

Companies and other organizations use DaDaScribe to transcribe recordings that may contain personal information about their employees, clients, patients or other people. For that content, we act as a “service provider” or “processor” on the customer’s behalf. In practice:

• We process the content only to provide the Service to that customer, under the Terms and any data processing agreement or Business Associate Agreement with that customer. We use it only as permitted by Sections 7.2 and 7.3 of the Terms, and never to train AI models.
• The customer decides what to upload and is responsible for giving any required notices, obtaining any required consents and complying with applicable law (Sections 5.4, 5.5 and 5.10 of the Terms).
• If your information appears in content that an organization uploaded, please send your request to that organization. We will help the customer respond, as described in Section 12.13 of the Terms. If you contact us directly, we will forward your request to the customer where we can identify it.
• If you use the Service through an organization’s account, that organization may be able to access your account information and the content you submit.

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and change the “Last updated” date at the top. If a change is material, we will also notify you before it takes effect, by email to the address associated with your account or by a notice within the Service, consistent with Section 12.6 of the Terms. If we want to use personal information we already hold in a materially different way from what we described when we collected it, we will ask for your consent where the law requires it.

For questions, requests or complaints about this Privacy Policy or your personal information, contact us at:

InfiniStrategy, LLC (DaDaScribe)
29911 Niguel Road, #6992
Laguna Niguel, CA 92677 - USA
Email: support@dadascribe.com
Or use our contact form.