Privacy Policy

Last updated: September 10, 2026

Overview

This policy covers transcriba.io and the Transcriba Chrome extension together. It explains what stays on your device, what only reaches our servers once you choose to sync, and how we handle it from there.

What stays on your device

The extension can capture the call's live captions and on-demand screenshots entirely inside your browser. None of it requires an account, and none of it leaves your device unless you turn sync on for that meeting.

What we collect with an account

Creating an account gives us your name and email. Syncing a meeting adds its transcript — including the name and speech of any participant who shows up in the captions, not just yours —, any screenshots you captured, and the AI-generated summary, action items, or chat responses tied to it.

No bot joins your calls

Transcriba never sends a visible participant into your Google Meet or Microsoft Teams call, and nothing outside your browser observes the meeting while it's in progress.

Legal basis for processing

We process your account data (name, email, billing) to perform our contract with you (LGPD art. 7, V). A meeting transcript, though, almost always includes speech from people who don't have a Transcriba account — we process that data based on your legitimate interest in keeping a record of your own work meeting (art. 7, IX), which doesn't replace your own duty to inform other participants where your local law requires it (see 'Acceptable use' in our Terms of Service).

How AI features use your data

When you request a summary, action items, or ask a question about a meeting, the relevant transcript text is sent to Anthropic's Claude via Amazon Bedrock (AWS infrastructure) to generate that response for your account. It's used only to produce your result, not to train a shared model.

Where your data is hosted

Today, all of Transcriba's processing and storage — database, media files, login, and AI features — runs on Amazon Web Services (AWS) infrastructure in the US East region (us-east-1). If you're outside the US, this is an international transfer of personal data. We rely on AWS's standard contractual data-protection commitments; we're still formalizing additional safeguards specific to this transfer and will update this section once that's done.

Who we share data with

We use AWS (Amazon Web Services) for hosting, database, media storage, login (Cognito), and AI models (Bedrock/Anthropic Claude), and Stripe to process payments — Stripe receives your card details directly, we never store them. None of these providers use your data for their own advertising purposes.

How long we keep it

A synced meeting, its screenshots, and its AI-generated insights stay in your account for as long as it exists. Deleting a meeting immediately removes its transcript, associated media, and everything derived from it from our systems; deleting your whole account does the same for all your data, including revoking your login access. The one exception is our infrastructure's automated database backup, which may retain a copy for up to 7 days after deletion before it expires on its own.

Cookies and analytics

We use essential cookies to keep you signed in and to remember your pricing currency — neither needs your consent, since both are required for the service to work. We don't run any usage analytics or third-party trackers today; if that changes, we'll ask for your permission first through a cookie notice, not turn it on silently.

Your controls

You can export all your data (Settings > Privacy) or delete any synced meeting at any time, and browsing or searching your own meeting history is never restricted by plan. Deleting your account (Settings > Account) removes your profile, all meetings and associated media, and revokes your login — permanently, with no recovery window.

Data Protection Officer

Questions or requests about your rights as a data subject (access, correction, deletion, portability, information about data sharing) can go to dpo@transcriba.io. We respond within 15 days, in line with LGPD art. 19.

Children

Transcriba is built for people running work meetings and isn't directed at minors. We don't knowingly collect data from children (under 12, per Brazil's Child and Adolescent Statute) and, if we learn this happened without a legal guardian's specific, prominent consent, we delete it.

Changes to this policy

If this policy changes in a way that matters, we'll update the date at the top of this page and, when the change affects how we handle data you've already given us, email you before it takes effect. Continuing to use Transcriba after a change means you've accepted the update.

Contact

General questions about this policy can go to privacy@transcriba.io. To exercise data subject rights specifically, see the 'Data Protection Officer' section above.