Privacy Policy

Last updated: October 23, 2026

HeyScribe (operated by ZQ Labs, Inc., “we”, “us”) turns speech into text. This Privacy Policy explains what information we collect, how we use and share it, how long we keep it, and the choices and rights you have when you use our website and web app (the “Services”).

Scope

This Policy covers information collected through our website and web app. It does not cover third-party sites or services that we link to, such as YouTube; please read their policies separately.

Information we collect

Information you provide

• Account information: your email address, name (if you add it) and authentication details when you sign up or sign in, including with Google or Apple.
• Audio and media you submit: speech from your microphone or a shared browser tab (voice typing and live transcription), files you upload, and links you ask us to transcribe.
• Text you create: transcripts, summaries, titles, and text you ask our AI tools to clean up or summarize.
• Billing information: if you buy a paid plan, payment is handled by Stripe. We receive your plan and payment status. We do not store your full card number.
• Communications: messages you send us, such as support or feedback requests.

Information collected automatically

• Usage and account data: your plan, the minutes you have used, and the features you use.
• Technical data: device and browser type, approximate location derived from your IP address, and error and security logs. When you are signed in, the app also sends us diagnostic events such as an error message, or that a transcription started or finished, with its length and type. These events never include your audio, transcript text, file names or links.
• Browser storage: see “Browser storage and cookies” below.

How we use information

• To provide the Services: transcribing your speech, files and links, and generating clean-ups and summaries you request.
• To create and manage your account, apply your plan and minutes, and process payments.
• To maintain security, prevent abuse and fraud, and fix errors.
• To respond to your questions and send service-related messages, such as account verification codes.
• To comply with legal obligations.

How your audio and text are processed

• Voice typing and live transcription. Your browser streams audio to a speech recognition provider over an encrypted connection, using a short-lived credential from our servers. The provider returns text. We do not store this audio, and we ask the provider not to retain it for model improvement.
• Free recorder. On the free recorder page, a recording (audio or video) is made inside your browser for playback and download. In “Record only” mode it is not sent to us or anyone else. In “Record + live transcript” mode, which requires you to sign in, the audio is also streamed to the speech recognition provider to create the transcript, which is saved to your library in your browser. We never store the recording itself.
• Uploaded files and links. Files you upload are stored in Amazon Web Services (Amazon S3) so that a speech recognition provider can transcribe them. For links, our servers fetch the audio from the link you provide. Your upload goes to a private folder that only your account can write to, is deleted when your transcript is ready, and is in any case deleted automatically within a few days (currently 3).
• AI tools. When you use Fix punctuation, Clean up text, Summarize or similar tools, the text you choose is sent to an AI provider to generate the result.
• Each provider handles the data it receives under its own terms and privacy policy, which may allow limited retention for security and abuse monitoring.
• We do not use your content to train AI models, and we do not sell it.
• Do not submit passwords, payment card details, government ID numbers or other highly sensitive information. Make sure you have the right, and any required consent, to record or transcribe other people.

Optional cloud backup and sync

Cloud backup and sync is a feature of paid plans. It is off by default, and nothing is uploaded until you turn it on in Account settings and confirm. You turn it on separately in each browser.

• What is stored: your transcripts' titles, text, timestamps and speaker labels, summaries, folders, favorites, language, length and dates. Never audio or video.
• Where: a private area of your HeyScribe account on Amazon Web Services (a database and cloud storage), encrypted at rest and in transit. Only your account can read it; HeyScribe staff do not read transcripts as part of normal operation.
• How long: until you delete it. You can turn backup off at any time and choose to delete the cloud copy, or delete individual transcripts. Deleting a transcript while backup is on also deletes its cloud copy.
• If your plan ends: syncing stops and your cloud copy is kept until you delete it from Account settings or ask us to delete it.

How we share information

• Speech recognition and AI providers: as described above, solely to produce your transcripts and results.
• Service providers: companies that help us run the Services, including Amazon Web Services (hosting, sign-in, storage and compute) and Stripe (payments). They may process information only on our behalf and under appropriate agreements.
• Legal and safety: when required by law or a valid legal request, or to protect our rights, users or the public.
• Business transfers: if we are involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

Browser storage and cookies

• Local storage and IndexedDB: we use them to keep you signed in and to store your transcript library, drafts and settings on your device. Unless you turn on cloud backup (see below), this data stays in your browser. You can delete it in Account settings, when you sign out, or by clearing site data.
• Google Fonts: our pages load fonts from Google Fonts. When they load, your browser connects to Google’s servers, which receive your IP address and browser information.
• Installed app (PWA): if you add HeyScribe to your device, a service worker saves static app files so the app starts faster and can show an offline message. It does not store your audio or transcripts.
• We do not currently use advertising cookies, third-party advertising trackers or third-party analytics. If that changes we will update this Policy.

Data retention and deletion

We keep personal information only as long as needed to provide the Services, comply with legal obligations, resolve disputes and enforce our agreements. Account information is kept while your account is active. Your transcripts and settings in your browser remain there until you delete them.

To delete your account and associated personal information, including any cloud backup, email us at contact@aiworksuite.com from your account email address. We will respond within the time required by applicable law (generally 30 to 45 days). We may keep limited information where the law requires it, for example billing and tax records. Deleting data in your browser does not delete your account, and deleting your account does not delete data held by providers under their own policies.

Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent where we rely on it. This includes rights under the GDPR and UK GDPR for people in the European Economic Area and the United Kingdom, and under the California Consumer Privacy Act (CCPA/CPRA) for California residents. We do not sell or share personal information as those terms are defined under California law.

To exercise a right, email contact@aiworksuite.com. We may need to verify your identity first. If you are in the EEA or UK and are unhappy with our response, you can also contact your local data protection authority.

Legal bases for processing (EEA and UK)

• Contract: to provide the Services you request and manage your account and plan.
• Legitimate interests: to secure and improve the Services and prevent abuse, balanced against your rights.
• Consent: where we ask for it, for example browser microphone access, which you can withdraw at any time.
• Legal obligation: where we must process data to comply with the law.

International transfers

We are based in the United States and process information in the United States and other countries where we and our providers operate. Where required, we rely on appropriate safeguards for transfers of personal information from the EEA, UK or Switzerland, such as standard contractual clauses.

Security

We use reasonable technical and organisational measures to protect information, including encrypted connections and access-controlled cloud storage. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

The Services are not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them. If you believe a child has given us personal information, please contact us and we will delete it.

Changes to this Policy

We may update this Policy from time to time. We will post the updated version on this page with a new “Last updated” date and, for material changes, take reasonable steps to notify you. Continued use of the Services after changes take effect means you accept the updated Policy.

Contact us

ZQ Labs, Inc., Silicon Valley, California, USA
Questions or requests about your personal information? Email contact@aiworksuite.com.