Trust Center · Privacy / GDPR
Privacy, GDPR, and shared responsibilities
SebScribe is designed for professional use where the customer keeps control of their business framework: legal basis, informing individuals, internal rules, data subject rights, and final validation.
GDPR roles
In standard B2B use, the customer generally acts as the data controller and SebScribe as the processor to execute the requested service.
A draft data processing agreement and a responsibility matrix can be provided on request as part of a qualified exchange.
Data concerned
- Dictated or recorded audio and transcribed text.
- Reworded texts, generated reports, and writing profiles used.
- Technical metadata required for operation and support.
- Local history, temporary synchronization, and support data only according to the features enabled.
- On desktop, locally bounded excerpts around the cursor or the active document when the contextual feature is enabled.
Retention and rights
SebScribe is not designed as a permanent business archive. Retention periods depend on the purpose, configuration, and features used: local history generally under the customer's control, short temporary synchronization when enabled, temporary backend processing for long jobs, and separate retention for voluntarily submitted support data.
Data subject rights requests are handled with the customer as data controller when SebScribe acts as processor. SebScribe can assist the customer, on documented instruction and within the limits of the data still present in the service, in identifying, deleting, or exporting the data concerned.