Privacy Policy

WolfScribe Studio (“we”, “us”, “our”) is an AI-powered transcription service operated by More Than Design UK Ltd, based in the United Kingdom (operating under EU GDPR standards).

We are the data controller for personal data processed through this website and application. Contact us at: privacy@wolfscribestudio.com

We collect the following categories of personal data:

• Account data: your email address and a hashed (encrypted) password.
• Usage data: number of transcription minutes used, number of YouTube links processed, your subscription plan, and timestamps of activity.
• Content you upload: audio and video files you submit for transcription, and YouTube URLs. We use these solely to provide the transcription service. We do not use your content to train AI models, sell it, or share it with third parties beyond what is necessary to provide the service.
• Payment data: billing is handled entirely by Stripe. We do not store your card number or full payment details.
• Technical data: IP address, browser type, and device information collected via server logs and analytics tools.
• Cookies and tracking: see Section 7.

We use your personal data to:

• Create and manage your account
• Process your audio/video files and return transcription results
• Enforce usage limits based on your subscription plan
• Process payments through Stripe
• Send you transactional emails (account creation, password reset)
• Detect and prevent fraud and abuse
• Improve the service through aggregated, anonymised analytics

We will never: sell your data, use your uploaded content to train AI models, share your content with third parties beyond the sub-processors listed in Section 5, or send you marketing emails without your explicit consent.

• Performance of a contract (Art. 6(1)(b)): Processing your account data, uploaded files, and usage data is necessary to provide the transcription service you signed up for.
• Legitimate interests (Art. 6(1)(f)): We process technical and usage data to maintain service security, prevent abuse, and improve reliability.
• Consent (Art. 6(1)(a)): Analytics cookies (Google Analytics, Facebook Pixel) are only placed with your explicit consent via our cookie banner. You may withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)): We may retain billing records as required by tax and accounting law.

To provide the service, we share your data with the following trusted sub-processors. Each is bound by data processing agreements:

⚠️ Analytics (with your consent only): If you consent via our cookie banner, we also share data with Google Analytics (Google LLC, US) and Meta / Facebook Pixel (Meta Platforms, US) for website analytics and advertising measurement. Both transfers occur under SCCs. You can withdraw consent at any time using the cookie settings link in the footer.

• Account data: retained while your account is active. Deleted within 30 days of account deletion.
• Uploaded audio/video files: deleted from our storage (Vercel Blob) immediately after transcription is complete. AssemblyAI deletes files from their systems within their standard retention window (typically 72 hours).
• Transcripts: stored until you delete them or delete your account.
• Payment records: retained for 7 years as required by EU accounting law.
• Password reset tokens: automatically expire after 1 hour and are deleted upon use.

We use the following types of cookies and trackers:

• Strictly necessary (no consent required): a session cookie to keep you logged in. This cannot be disabled.
• Analytics — Vercel Analytics (no consent required): Vercel’s built-in analytics is cookieless and privacy-first by design. It does not track individuals across websites.
• Analytics — Google Analytics (consent required): Sets cookies to measure site traffic and user behaviour. Only activated with your consent.
• Advertising — Facebook Pixel (consent required): Tracks conversions and enables advertising audience measurement on Facebook/Instagram. Only activated with your consent.

You can change your cookie preferences at any time using the cookie settings link.

As an EU resident, you have the following rights:

• Right of access: request a copy of your personal data.
• Right to rectification: correct inaccurate data.
• Right to erasure (“right to be forgotten”): request deletion of your data. You can exercise this directly in Settings → Account → Delete Account.
• Right to data portability: receive your data in a machine-readable format.
• Right to restriction: request we limit processing of your data.
• Right to object: object to processing based on legitimate interests.
• Right to withdraw consent: withdraw consent for analytics/marketing cookies at any time.

To exercise any of these rights, email us at privacy@wolfscribestudio.com. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority (DPA).

WolfScribe Studio is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this policy from time to time. We will notify you of material changes by email or via an in-app notice. The “Last updated” date at the top of this page reflects the most recent revision.

Data controller: More Than Design UK Ltd (trading as WolfScribe Studio)
Email: privacy@wolfscribestudio.com