Privacy Policy

Last updated: March 17, 2026

1. Introduction

UNScribe ("we," "our," or "the Service") is an AI-powered transcription and summarization tool for publicly available United Nations Web TV content. This Privacy Policy explains how we collect, use, and protect your information.

You must be at least 13 years old to use UNScribe. We do not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA). If we learn that we have collected data from a child under 13, we will promptly delete it.

2. Information We Collect

Account Information: When you create an account, we collect your email address and a hashed password. We do not store passwords in plain text.

Usage Data: We store the URLs you submit for transcription, selected language preferences, and the resulting transcriptions and summaries associated with your account.

Technical Data: We may collect basic technical information such as browser type, device type, and IP address for security and service improvement purposes.

3. How We Use Your Information & Legal Basis

Under the EU General Data Protection Regulation (GDPR), we process your data on the following legal bases:

  • Contractual Performance (Art. 6(1)(b) GDPR): Processing your email for account creation, providing transcription and summarization services, maintaining your transcription history, and delivering results via email — all necessary to fulfill our service contract with you.
  • Legitimate Interest (Art. 6(1)(f) GDPR): Collecting basic technical data (browser type, IP address) for security, fraud prevention, and service improvement. Our legitimate interest does not override your fundamental rights.
  • Consent (Art. 6(1)(a) GDPR): Anonymous usage analytics via Vercel Analytics. You may withdraw consent at any time by clearing your browser cookies.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Third-Party Services & Data Processing Agreements

To provide our service, we use the following third-party providers. We have verified that each provider offers a Data Processing Agreement (DPA) compliant with GDPR:

  • OpenAI — for audio transcription (Whisper). Audio is processed in real-time and not retained beyond processing. DPA available at openai.com.
  • Anthropic — for AI-powered diplomatic summary generation (Claude). Transcript text is processed in real-time. DPA available at anthropic.com.
  • Supabase — for user authentication, database, and account management. DPA available at supabase.com.
  • Vercel — for application hosting and serverless compute. DPA available at vercel.com.
  • Resend — for transactional email delivery (magic links and transcription results). DPA available at resend.com.
  • Stripe — for payment processing. Stripe is PCI DSS Level 1 certified. DPA available at stripe.com.

Each provider operates under their own privacy policies and GDPR-compliant data processing agreements. We regularly review our providers' compliance status.

5. Data Retention

Audio files from UN Web TV are processed in real-time and are not permanently stored on our servers. Transcriptions and summaries are retained in your account for as long as you maintain an active account. Upon account deletion, all associated data is permanently removed within 30 days.

6. Data Security

We implement industry-standard security measures including encrypted connections (TLS/SSL), secure authentication, and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

You have the right to:

  • Access your personal data stored in your account
  • Export your transcriptions and summaries at any time
  • Delete your account and all associated data
  • Correct inaccurate personal information
  • Object to data processing where applicable under GDPR

To exercise any of these rights, contact us at the email below.

8. Cookies

UNScribe uses only essential cookies required for authentication and session management. We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

9. International Data Transfers

Our service may process data in jurisdictions outside your country of residence. We ensure appropriate safeguards are in place for any international data transfers in compliance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Right to Know — what personal information we collect, use, and disclose
  • Right to Delete — your personal information, subject to certain exceptions
  • Right to Opt-Out — of the sale or sharing of your personal information
  • Right to Non-Discrimination — for exercising your CCPA rights

UNScribe does not sell or share your personal information as defined by the CCPA/CPRA. We do not use your data for cross-context behavioral advertising.

Categories of personal information collected: identifiers (email address), internet activity (transcription URLs, usage data), and geolocation data (IP address for security).

To exercise your California privacy rights, contact us at hello@unscribe.org.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact

For privacy-related inquiries, data requests, or concerns:

Email: hello@unscribe.org