Privacy Notice

1. Who we are

Scribbitt is operated by Hot and Crispy Digital. For the personal data described in this notice, Hot and Crispy Digital acts as the data controller.

2. Data we collect

• Account data: name, email address, password hash, profile preferences.
• Content you upload: audio and video recordings, transcripts, speaker labels, notes, and any text you submit.
• Support & communications: messages you send us and information you share when contacting support.
• Usage & device data: log data, IP address, browser type, device identifiers, pages viewed, and interactions with the service.
• Billing data: handled by our payment provider Paddle. We receive transaction status, plan, and customer reference, but not full card numbers.

3. Why we use it

• To create your account and provide the service (contract).
• To process and transcribe your uploads, generate AI summaries and answers (contract).
• To secure the service, prevent fraud and abuse, and enforce our terms (legitimate interests, legal obligation).
• To respond to support requests and communicate with you about the service (contract, legitimate interests).
• To improve the product, debug, and monitor reliability (legitimate interests).
• To send transactional emails about your account and, with your consent where required, occasional product updates.

4. Who we share data with

• Subprocessors that help us run the service, including hosting, database, AI model providers, transcription providers, analytics, and email delivery.
• Paddle, our Merchant of Record, for sales, subscription management, payments, tax compliance, and invoicing.
• Professional advisers (e.g. legal, accounting) where necessary.
• Authorities where required by law or to protect rights, safety, or property.

We do not sell your personal data and do not use the content of your private recordings to train third-party AI models.

5. International transfers

Some of our subprocessors are located outside your country, including in the United States. Where transfers leave the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Retention

We keep personal data for as long as your account is active. When you delete your account or content, we remove it from our live systems within a reasonable period, after which residual copies may remain in backups for a limited time before being overwritten. We retain billing records as required by tax and accounting law.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, to withdraw consent, and to lodge a complaint with a data protection authority. To exercise any right, contact us through the app. We aim to respond within one month.

8. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and audit logging. No service is perfectly secure, but we work to maintain a high standard.

9. Cookies

We use a small number of strictly necessary cookies to keep you signed in and to remember preferences. We may use limited analytics cookies to understand product usage. You can control cookies in your browser settings; disabling strictly necessary cookies will prevent the service from working.

10. Changes

We may update this notice from time to time. Material changes will be communicated through the service or by email.

11. Contact

For privacy questions or to exercise your rights, contact Hot and Crispy Digital through the support channel in the app.