Escribolt

Last updated: June 5, 2026

At Escribolt, we believe that privacy is an architectural standard, not a secondary settings checkbox. Our products are designed local-first by default. This Privacy Policy describes how Escribolt (referred to as "Escribolt", "we", "us", or "our") collects, uses, shares, and handles your personal data ("Personal Data") and audio content when you use our website, desktop applications, cloud relays, and related services (collectively, the "Services").

By using or accessing the Services in any manner, you acknowledge that you accept the practices and policies outlined in this Privacy Policy, and you hereby consent to our collection, use, and disclosure of your information as described herein.

Remember that your use of Escribolt’s Services is at all times subject to our Terms of Service, which incorporates this Privacy Policy.

1. Executive Summary & Privacy Guarantees

  • Zero AI Model Training on Your Data: We do not train AI models on your audio recordings, transcripts, summaries, or note contents. Furthermore, we contractually prohibit all third-party AI providers (such as OpenAI, Anthropic, or Deepgram) from using your data to train their models.
  • Local-First Architecture: In Local and Bring Your Own Key (BYOK) Modes, all audio processing occurs on your physical machine or routes directly from the client to your chosen AI vendor. Escribolt's servers never receive, relay, or store this data.
  • No Audio Retention in Pro Mode: If you use our high-speed Cloud Relay Services (Pro Mode), your audio files are processed in-memory to generate transcriptions and summaries, and are permanently deleted from our relay servers immediately after the operation is complete.
  • Strict Privacy Toggle: Pro users can enable "Strict Privacy" in settings to fully disable cloud-based database sync and backup, restricting all notes and transcripts solely to their local SQLite database.

2. Personal Data We Collect

We collect several categories of information to provide, secure, and improve our Services.

A. Personal Data You Provide Directly

  • Profile & Contact Data: When you create an account, register for a subscription, or request support, we collect your first and last name, email address, and account credentials.
  • Payment Data: All payments are processed securely via our third-party payment partner, Stripe Inc. Stripe collects your billing details, card brand, and the last 4 digits of your payment card. Escribolt does not store or process your full credit card credentials. Stripe's usage of your data is governed by the Stripe Privacy Policy.
  • Direct Communications: Any feedback, emails, support tickets, or screenshots you voluntarily choose to send us.

B. Customer Content (Audios, Transcripts, and Notes)

  • Local Mode: 100% of your audio buffers and transcripts are processed on your local RAM and GPU/CPU. We collect exactly 0% of this content.
  • BYOK Mode: Your audio is sent directly from your device to your configured API endpoints (e.g., Deepgram, OpenAI) using keys saved in your macOS Keychain. Escribolt does not receive or log this content.
  • Pro/Cloud Mode: When you request cloud transcription or summary actions, Escribolt temporarily processes the audio file. We do not store the audio files or resulting transcripts on our servers after transcription/summary delivery is complete.

C. Device and Usage Data (Collected Automatically)

When you interact with our Services, we may collect technical data, including:

  • Device & IP Data: IP address, operating system version, desktop client version, device language, and an anonymized hardware identifier (device hash mapping) used exclusively to enforce software licensing limits.
  • Web Analytics: Web page interactions, referrers, and basic performance metrics on our landing and documentation pages.

3. Our Commercial & Business Purposes for Using Data

We process your Personal Data based on your consent, contractual necessity, or our legitimate business interests, for the following purposes:

  • Service Delivery: To create and manage your account, authenticate licensing, process transactions, and provide high-speed cloud transcription relays.
  • Customer Support: To diagnose bugs, answer inquiries, and resolve technical issues reported through the app.
  • Security & Compliance: To prevent fraud, enforce software license limits, comply with legal obligations, and secure our network infrastructure against abuse.
  • Fair Use Enforcement: To audit aggregate cloud transcription usage and ensure customers are complying with the Fair Use Policy in our Terms of Service.

4. How We Share & Disclose Information

We do not sell, rent, or trade your Personal Data. We share data only with trusted service providers who operate under strict confidentiality clauses:

  • Hosting & Infrastructure: Secure cloud virtual private servers (VPS) and server providers, used to store database configurations, licensing tokens, and user accounts.
  • Payment Processing: Stripe Inc., to securely manage billing and subscriptions.
  • AI Transcription & Processing: For Pro/Cloud Mode, we securely relay audio segments to Deepgram, OpenAI, and Anthropic for instant processing. Your data is deleted from their servers within 30 days and is never used to train their models.
  • Legal Obligations: We may share data with law enforcement or regulatory bodies if required by a valid legal order, court warrant, or to protect the safety and rights of Escribolt, our users, or the public.
  • Business Transactions: In the event of a merger, acquisition, or sale of assets, your account data may be transferred to the acquiring entity under the same privacy commitments.

5. Data Retention & Deletion

We retain your Personal Data only for as long as necessary to fulfill the purposes outlined in this policy:

  • Voice Recordings: Deleted instantly from cloud relay servers upon final transcript generation.
  • Database & Note Sync: If Pro Mode sync is enabled, notes and transcripts are synced to our secure cloud database. If you toggle "Strict Privacy" on, or delete a note in the app, it is deleted from both local and cloud databases.
  • Account Data: Retained for the duration of your active subscription. You can delete your account at any time.

6. Cookie Policy

Our website uses cookies and pixel technologies to recognize your browser, verify your session status, and monitor aggregate web analytics:

  • Essential Cookies: Required to keep you logged into the billing panel and to secure forms. Disabling these will break account dashboard features.
  • Performance Cookies: We use lightweight analytics (such as privacy-focused tools) to count page visits and analyze traffic paths. We do not use third-party tracking pixels (like Meta Pixel) to track your behavior across other websites.

You can disable cookies through your browser settings, though some features of our website may not function correctly as a result.

7. Security Practices

We protect your data using comprehensive administrative and technical safeguards:

  • Encryption: All data is encrypted in transit using Transport Layer Security (TLS 1.3) and at rest on our secure servers using AES-256 database-level encryption.
  • VPC Isolation: Our cloud infrastructure is isolated inside Virtual Private Clouds (VPC) with firewalls restricting access to authenticated application services.
  • Local Key Security: BYOK credentials are stored locally using the native macOS Keychain Services, which encrypts secrets at the hardware level. Escribolt cannot access these keys remotely.

8. Your Rights & Data Controls (GDPR/CCPA/Swiss)

Under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), you possess specific rights regarding your Personal Data:

  • Right of Access & Portability: You can request a copy of the Personal Data we hold about you in a structured, machine-readable format. You can also export your entire local SQLite database directly from the desktop application settings.
  • Right of Rectification: You can request updates to your profile, email address, or subscription settings by contacting us at privacy@escribolt.com.
  • Right of Erasure (Deletion): You can request the deletion of your account and all associated data by contacting us at privacy@escribolt.com. Upon request, we will delete your user profile, active licensing tokens, Stripe billing association, and all synced databases from our cloud infrastructure.
  • Right to Object/Opt-Out: Since we do not sell your data or use it for advertising/AI training, there are no tracking or sales opt-outs required. For Pro cloud backups, you can opt-out at any time by toggling Strict Privacy in the app settings.

To submit a formal request regarding your rights, contact us at privacy@escribolt.com.

9. Contact Information

If you have any questions or feedback about this Privacy Policy, please contact us at:

Email: privacy@escribolt.com