Privacy Policy.

1. Scope and operator

This Privacy Policy applies to The Scribe macOS application, getthescribe.com, api.getthescribe.com, licensing, support, and related services operated by VictoryMultimedia (“The Scribe,” “we,” “us,” or “our”). It does not govern Amazon KDP, YouTube, Lemon Squeezy, Anthropic, OpenAI, Cloudflare, Hugging Face, GitHub, or other third-party services when you interact with them independently. Their privacy notices also apply.

For privacy questions or requests, contact support@getthescribe.com.

2. Local-first data

The app stores recordings, imported files, transcripts, edits, book projects, cover files, exports, preferences, and version history on your Mac unless you choose a feature that requires cloud processing or an external destination. Core Whisper transcription is designed to run locally after required model files are downloaded. We do not receive a copy of raw audio merely because you record or transcribe it locally.

Your Mac, backups, synchronized folders, and any third-party storage you choose are outside our control. You are responsible for device security, backups, permissions, and deletion of local files. Model downloads may be obtained from our distribution infrastructure or identified third-party repositories; those services receive ordinary network information such as an IP address.

3. Information we collect

Depending on how you use The Scribe, we process:

• Purchase and license data: email address, order and product identifiers, plan, subscription status, license activation data, entitlement, billing period, and limited transaction metadata supplied by Lemon Squeezy. We do not store full payment-card details.
• Account and device signals: pseudonymous license or account hashes, limited device or installation identifiers, network-abuse hashes, application version, platform, and verification status.
• Usage and operations: request identifiers, feature type, status, timestamps, selected editorial distance, requested word or page target, token and unit counts, approximate provider cost, error codes, rate-limit buckets, and allowance consumption.
• Book and revision content: the source text, author brief, title information, editorial settings, current manuscript or chapter, and returned draft needed to perform a cloud book or revision request.
• Cover content: title, subtitle, author name, visual direction, selected manuscript themes or excerpt, and the generated image returned for the project.
• Support and legal communications: messages, attachments, order details, notices, and records needed to answer a request or comply with law.
• Website and security data: standard server logs such as IP address, request time, browser or user-agent data, referring page, requested resource, and security events. The public marketing site does not currently use behavioral advertising pixels.

4. Why we use information

We use information to:

• activate licenses, display current allowances, validate purchases, and provide the requested service;
• transmit and complete book, revision, and cover jobs; checkpoint eligible work; prevent duplicate charges; and return results;
• enforce free and paid allowances, prevent fraud and abuse, protect credentials, rate-limit requests, and enforce account and global spend caps;
• diagnose failures, maintain availability, measure provider cost, improve product reliability, and provide support;
• process subscription events, refunds, disputes, copyright notices, tax and accounting records, and legal obligations;
• send essential transactional or security messages. We do not use customer manuscripts for unrelated advertising.

Where privacy law requires a legal basis, we rely on performance of our contract, legitimate interests in operating and securing the service, compliance with legal obligations, and consent where specifically requested. You may withdraw consent for future processing, but that does not undo lawful processing already completed and may prevent the relevant optional feature from working.

5. When information is shared

We share only what is reasonably needed with service providers acting for us or as independently disclosed controllers:

• Lemon Squeezy: merchant of record, checkout, tax, payment, receipt, subscription, refund, and license events.
• Cloudflare: website, API, database, workflow, security, logging, model distribution, and transactional-email infrastructure.
• Anthropic: book creation and supported manuscript revision requests sent through our API.
• OpenAI: requested premium cover generation.
• Model and software hosts: repositories such as Hugging Face or GitHub when the app downloads an identified local model or dependency.

If you deliberately use an optional feature with your own provider key or open an external service such as YouTube, Amazon KDP, or a file destination, your request is also governed by that provider. We may disclose information to professional advisers, a successor in a corporate transaction, or authorities when reasonably necessary to comply with law, protect rights and safety, or investigate abuse.

We do not sell personal information, rent customer lists, or share manuscripts for cross-context behavioral advertising. We do not authorize model providers to use submitted customer material for our advertising. Provider handling remains subject to the contract and policy applicable to that service.

6. Automated processing and human access

Book and cover generation is automated. Allowance, fraud, rate, and spend controls may automatically approve, block, reserve, resume, or stop a request. These controls protect accounts and prevent unexpected costs. Contact support if you believe a decision is wrong.

The private owner console displays account hashes, plan and usage status, job progress, token counts, model, cost, and errors; it is designed not to display customer manuscripts or credentials. Authorized personnel may access limited content only when required to resolve a support request, investigate abuse or security, recover a job at your request, or comply with law.

7. Retention

We retain information only as long as reasonably needed for the purposes above, subject to backups, infrastructure behavior, disputes, and legal requirements:

• completed cloud manuscript and chapter-result text is cleared from the application database after approximately 7 days;
• book-job, chapter-revision, request, and webhook-operation records are deleted after approximately 90 days;
• workflow execution state, which may contain submitted source and checkpoints, may remain in the workflow infrastructure for up to approximately 30 days;
• temporary rate-limit records are removed after approximately 2 days;
• expired owner sessions are removed and owner security audit records are kept for up to approximately 1 year;
• license, entitlement, transaction, fraud-prevention, refund, accounting, and legal records may remain while the account or obligation exists and for the period required to establish, exercise, or defend legal claims.

Generated cover image data is returned to the app for local storage. We retain request and usage metadata as described above; generation providers may retain request content under their applicable enterprise or API terms. Local recordings, transcripts, projects, and exports remain until you delete them from your Mac and any backups.

8. Security

We use measures intended to protect information, including encrypted network transport, secret management, server-side authorization and metering, hashed account and abuse identifiers, least-privilege administration, short-lived owner sessions, rate limits, idempotency controls, spend caps, audit logs, and retention cleanup. No system is perfectly secure. Do not place secrets, unnecessary sensitive personal data, or material you are not permitted to process in a project.

If you believe your information or license has been compromised, contact us promptly. We will investigate and provide notices required by applicable law.

9. International processing

Our providers may process information in the United States and other countries. Those locations may have different privacy laws. Where required, we use contractual and organizational safeguards for international transfers. Mandatory local rights continue to apply.

10. Cookies and website choices

The marketing website may use essential storage or cookies for security, routing, accessibility, and basic operation. We do not currently use behavioral advertising cookies on getthescribe.com. Lemon Squeezy and external sites may use their own cookies when you open checkout or another link. Browser controls can block or delete cookies, although essential functions may stop working.

We do not currently respond to “Do Not Track” signals because there is no uniform standard. Where a legally recognized opt-out signal applies to a processing activity we perform, we will honor it as required.

11. Children

The Scribe is not directed to children and is not intended for anyone under 18 or the age of legal majority where they live. We do not knowingly collect a child’s personal information. Contact us if you believe a child supplied information, and we will investigate and delete it where required.

12. Your privacy rights

Depending on where you live, you may request access, correction, deletion, restriction, portability, or objection; withdraw consent; opt out of certain sale, sharing, profiling, or targeted advertising; or appeal a privacy decision. We do not discriminate for exercising a privacy right.

Email support@getthescribe.com with “Privacy request,” the request, and enough information to identify the relevant license or order. We may need to verify identity and authority before acting. An authorized agent may submit a request where law permits. We will respond within the legally required period and explain any lawful exception. You may also complain to your local data-protection or consumer-protection authority.

To delete local work, use the app’s delete controls and remove related exports or backups. To cancel a subscription, use the manage-subscription link in your Lemon Squeezy receipt; deleting local files does not cancel billing.

13. Changes to this policy

We may update this policy when features, providers, practices, or laws change. The current effective date and version appear at the top. We will provide additional notice before a material change where required. Archived copies may be requested from support.

14. Contact

Privacy questions and rights requests: support@getthescribe.com.

Operator: VictoryMultimedia, operator of The Scribe.