Privacy Policy
Last updated: February 13, 2026
1. Introduction
ScribMind ("we", "our", "us") is a browser extension that provides real-time transcription, AI-powered meeting summaries, and intelligent Q&A. We are committed to protecting your privacy and being transparent about how we handle data.
This Privacy Policy explains what data ScribMind collects, how it is processed, and your rights regarding your data.
2. Data Controller
Panagiotis Paplomatas
Hamburg, Germany
Email: support@scribmind.com
3. Data We Collect
3.1 Data stored locally on your device
The following data is stored exclusively in your browser's local storage (IndexedDB) and is never transmitted to our servers:
- Meeting recordings and audio segments
- Transcripts and speaker labels
- AI-generated summaries, Q&A responses, and brainstorming content
- Meeting preparation documents you upload
- Extension settings and preferences
- API keys you provide (encrypted with AES-256-GCM)
This data is encrypted at rest using AES-256-GCM encryption via the Web Crypto API.
3.2 Data processed by third-party AI services
When you use ScribMind's transcription and AI features, audio segments and text are sent to the AI provider you configure (e.g., OpenAI, Anthropic) for processing. This data is transmitted directly from your browser to the AI provider and is subject to their respective privacy policies. ScribMind does not store or relay this data through our servers.
3.3 Data collected by our trial system
When you sign up for a free trial, we collect:
- Your email address (for verification and trial management)
- IP address (for rate limiting and abuse prevention)
- Trial start and expiration dates
- Marketing consent preference (if you opt in)
This data is stored on Cloudflare D1 (EU region) and is used solely for trial management.
4. How We Use Your Data
- Email address: To send verification codes and manage your trial period
- IP address: To prevent abuse and enforce rate limiting
- Marketing consent: To send product updates only if you explicitly opt in
We do not sell, rent, or share your personal data with third parties for marketing purposes.
5. Data Storage and Security
- Local data is encrypted at rest with AES-256-GCM
- API keys are stored encrypted, separate from other data
- Trial data is stored on Cloudflare D1 in the EU (EEUR region)
- All communications use HTTPS/TLS encryption
- JWT tokens are signed with HMAC-SHA256
6. Your Rights (GDPR)
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access — You can request a copy of all data we hold about you
- Right to rectification — You can request correction of inaccurate data
- Right to erasure — You can request deletion of your data
- Right to data portability — You can export your local data at any time via the extension's export feature
- Right to object — You can object to processing of your data
- Right to withdraw consent — You can withdraw marketing consent at any time
For local data: You have full control. Use the extension's Settings to export or delete all data at any time.
For trial data: Contact us at support@scribmind.com to exercise your rights.
7. Data Retention
- Local data: Retained until you delete it. Configurable auto-cleanup (30, 60, 90, 180 days, or unlimited)
- Trial records: Retained for the duration of the trial plus 12 months for abuse prevention
- Rate limiting data: Automatically deleted after 2 hours
- Verification codes: Automatically deleted after 1 hour
8. Cookies and Tracking
ScribMind does not use cookies, analytics, or any form of user tracking. We do not collect usage statistics, telemetry, or behavioral data.
9. Third-Party Services
ScribMind integrates with the following third-party services at your discretion:
- OpenAI — For transcription (Whisper) and AI analysis (GPT-4o). OpenAI Privacy Policy
- Anthropic — For AI analysis (Claude). Anthropic Privacy Policy
- LemonSqueezy — For Pro license management. LemonSqueezy Privacy Policy
- Resend — For sending verification emails. Resend Privacy Policy
10. Children's Privacy
ScribMind is not intended for use by children under the age of 16. We do not knowingly collect personal data from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of ScribMind after changes constitutes acceptance of the updated policy.
12. Contact
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at: