1. Data Collected
FilmScribe collects:
- Account data: name, email and password (stored only as a hash) or, if you sign in with Google, the name, email and profile photo Google shares; and your language
- Profile data you choose to add: phone, occupation, a social media link, favorite video editor and CPF or CNPJ (used for invoices)
- Billing data: billing address, plan, subscription status and payment history. If you pay by Pix, also the payer's name, CPF, address (postal code, street, number, neighborhood, city and state) and the data of each payment (amount, date and Pix transaction ID). Card data is handled by our payment processor (Stripe), and bank and account data stays with your bank and with Woovi; we never receive or store it, and we never receive your bank password
- Your content: the audio and video you upload or import from YouTube, and what we generate from it (transcriptions, translations, chapters, hooks, scripts, emotion analysis, diagrams, clips and captions)
- Technical and security data: the IP address and browser or device information (user agent) of your sessions, sign-in times and error reports
- Usage data: features you use, files you open, plan limits you reach, product news you view and your email preferences
- Marketing and attribution data: campaign parameters (such as UTM), ad click identifiers, the page that referred you and the first page you visited, and the advertising and analytics cookies described in section 9
- Communications: messages you send to support, and the reason and comments you give when you cancel a subscription or delete your account
- Referral data: your referral code and the accounts that signed up with it
- AI assistant connections: which assistant you connected, its activity records and the requests it makes on your behalf (section 5)
- Creators program: if you fill in the creators form on our website, the name, email, WhatsApp, location, language, age range, social media profiles, follower count, rates, preferred payment type and how you found us that you enter
We don't ask for sensitive personal data, such as health data. Your recordings contain whatever is said in them; we process that content only to provide the service.
2. Data Usage
We use your data to:
- Provide the service: create and secure your account, process, store and deliver your content, and carry out what you ask in the app or through a connected assistant
- Bill you and issue invoices: charge your subscription and issue the electronic service invoice (NFS-e) required by Brazilian tax law
- Keep FilmScribe secure: protect accounts and sessions, prevent fraud and abuse (including repeated free trials) and investigate errors
- Support you: answer your messages and help with problems
- Improve the product: understand how features are used and fix what doesn't work
- Communicate: send service emails (such as a file being ready, content about to expire or billing) and, unless you opt out, emails about your trial, plan and offers
- Measure marketing: know which campaigns bring visitors and customers (section 6)
- Meet legal obligations and resolve payment disputes (section 11)
- Evaluate creators program applications
3. Audio and Content
- Uploaded audio is used exclusively for internal processing
- Not used for public model training
- Not shared with other users
- Can be removed upon user request or account closure
4. YouTube Integration
FilmScribe allows importing YouTube videos via link for audio extraction and transcription processing.
- Only the audio from the video provided by the user is extracted and processed
- No data from the user's YouTube account is accessed
- The extracted content is used exclusively for the platform's transcription and analysis features
5. Connecting AI Assistants
You can connect FilmScribe to third-party AI assistants of your choice, such as ChatGPT (through the FilmScribe plugin), Claude or Gemini, through the FilmScribe Connector. This section explains what data these connections handle, why, who receives it, how long it is kept and how you control it.
- Authorization: a connection is only created when you explicitly authorize it, on a FilmScribe consent screen that shows the assistant's name and the address that access is granted to. By default the assistant can only read; to let it also create, edit and delete content or spend hours, you tick a separate option on that screen
- Data the assistant can read: your files, folders, transcripts and translations, chapters, hooks, scripts, emotions, diagrams, favorites, key moments, clips, download links (for the MP3, the clips, the original video and the Final Cut, Premiere and DaVinci editor export files) and hours used this month. It only gets what it looks up while you use it
- Data we receive from the assistant: its name and the address it returns to when you connect, and the requests it makes on your behalf (for example a search term, the file or clip it refers to, a new name, a transcript correction, a YouTube link, instructions for a script or an editor timeline you send). We don't receive or store your conversations with the assistant
- Purposes: we use this data only to carry out what you ask through the assistant, to show you each connection's last use and what the assistant changed, to keep your account secure (including request limits) and for internal usage metrics. We don't sell it
- Recipients: what the assistant looks up is delivered to the company behind that assistant (for example OpenAI for ChatGPT or Anthropic for Claude) and, from then on, is handled under that company's terms and privacy policy. Inside FilmScribe, it is processed by the infrastructure providers listed in section 6
- Changes and hours: actions that delete content or spend hours only run after you confirm: in an assistant app that offers it, the question appears in the app itself and the assistant can't confirm on its own; in the others, through a second confirmation call, which the assistant must ask you for. Through the assistant, actions only use the hours included in your plan: one that would go past them, or whose length isn't known beforehand, is not run, and extra hours are only used in FilmScribe itself
- Retention: a request is used to carry it out and is not kept, except for the change it made to your content and, for changes, its answer, kept for 24 hours so a repeated request isn't carried out twice. Download links are valid for up to 24 hours. An editor export file the assistant asks for is kept for up to 24 hours and then deleted; it may include your project's timeline. A timeline from your editor that you send through an upload link the assistant hands you is kept, encrypted, for up to 24 hours and then deleted. The record of each connection (which assistant and address) and of its activity (which features it looked up or used, which file, folder or clip a change acted on, and when, without the content) is kept while your account exists and deleted with it
- Your controls: in Profile, on the Connections tab, you can see each connection and what the assistant changed, and revoke any connection at any time. Connections are also revoked when you reset or change your password, change your email or delete your account, and they expire after 45 days without use. To take away the permission to make changes, revoke the connection and connect again without ticking the option
FilmScribe does not control how a third-party assistant uses the information it receives. We recommend connecting only assistants you trust.
6. Data Sharing and Transfer
FilmScribe does not sell personal data. We share it only with the providers and parties below, for the purposes in section 2:
- Payment processing: Stripe, for card (name, email, billing address and payment data); Woovi Instituição de Pagamento, for Pix (payer's name, CPF, address and payment data); and the card networks or the bank in a payment dispute (section 11)
- Hosting and storage: Cloudflare (all data, including your files)
- Artificial intelligence services for transcription and content analysis
- Email delivery: an email delivery provider (your email address and the emails we send you)
- Error monitoring, logs and internal team notifications: monitoring providers (technical data, such as your account ID; never your email or IP address in error reports or team notifications)
- Advertising and analytics: advertising and usage analytics platforms, to measure campaigns and understand how the app and website are used (section 9)
- Sign-in: Google, if you choose to sign in with Google
- Tax authority: Brazil's national NFS-e system (Receita Federal), which receives your name, CPF or CNPJ and the invoice details
- Creators program: answers to the creators form are stored in a spreadsheet tool
- AI assistants you connect and authorize (section 5)
- Authorities, when required by law or court order
Your data may be processed on servers located outside Brazil, including those of the providers above. These providers follow international data protection standards and have appropriate contractual clauses in accordance with LGPD.
7. Information Security
We adopt technical and organizational measures to protect your data, including encryption in transit (HTTPS/TLS), user-isolated storage, and restricted access control to data.
8. Your Rights and Controls (LGPD)
You may, at any time:
- Access your data and get a copy of it, by email to [email protected]
- Correct your data in Profile, or by email
- Delete your account and its data yourself, in Profile (section 10 says what we keep afterwards)
- Stop marketing emails through the unsubscribe link in each email or the email preferences in Profile
- Revoke AI assistant connections in Profile, on the Connections tab (section 5)
- Delete or block cookies in your browser (section 9)
- Revoke consents, object to a processing, ask which parties received your data and file a complaint with Brazil's data protection authority (ANPD)
10. Data Retention and Deletion
Each uploaded file and everything generated from it (transcriptions, clips and captions) is kept while you keep using it; with an active subscription, a file left unopened for 45 days is automatically removed (7 days if it failed or was never processed), and without an active subscription that window is 15 days. If the account only used the free trial and it ends without a subscription, its files are removed 5 days after signup, with no heads-up. In every other case we email you before removal so you can download anything you still need, and opening the file resets the clock.
The other data is kept as follows:
- Account, profile, usage, attribution, referral and AI assistant connection data: while your account exists, and deleted when you delete it
- Sessions: they expire 21 days after their last use
- What an AI assistant sends and receives: see section 5 (requests are not kept; links and exported files last up to 24 hours)
- Server logs: up to 30 days. Error reports: up to 90 days
- Invoices (NFS-e) and the customer data on them: at least 5 years, as Brazilian tax law requires, also after the account is deleted
- After you delete your account we keep only: a record of the deletion (name, email, phone and the reason you gave) and your email on a list that prevents repeated free trials, both with no set end date, to prevent fraud and abuse; your invoices; and our team's audit records of actions taken on your account
- Payment records also stay with Stripe, for card, and with Woovi, for Pix, and data already sent to the advertising, analytics and email providers in section 6 is kept under their own policies
- Creators program answers: until you ask us to remove them
11. Payment Disputes (Chargebacks and MED)
When a customer files a chargeback with their card issuer, FilmScribe may be required by card-network rules to provide evidence that the service was actually delivered. To respond to such disputes, we may share evidence with our payment processor (Stripe) and the card networks (Visa, Mastercard, American Express, etc.). On Pix, the dispute is the MED (Mecanismo Especial de Devolução, the Central Bank of Brazil's special refund mechanism), opened with the payer's bank; in that case, we may send the same evidence to Woovi and the bank. The evidence may include:
- Customer signup data (name, email, account creation date)
- Platform usage history (processed uploads, generated scripts and chapters, saved clips, completed translations, video downloads delivered)
- Excerpts of transcripts and AI-generated scripts produced from the customer's submitted content, used solely as proof of digital delivery
- IP address and user-agent associated with the customer's access sessions
- Payment dates, amounts charged, and a copy of the Stripe invoice or the Pix transaction ID
This sharing occurs exclusively in response to disputes initiated by the customer and follows the rules of the card networks, the MED and our payment processors. The data is used solely to resolve the dispute.
12. Changes to this Policy
This Privacy Policy may be updated. The most recent version will always be available on the platform. If there are significant changes to Google data usage, we will notify users by email.
13. Contact
The controller of your personal data is TECHMERGE DESENVOLVIMENTO LTDA, CNPJ 66.982.862/0001-75, Brazil. For any privacy question or request (access, correction, deletion, objection or revoking consent), email [email protected] or message us on WhatsApp at +55 47 96427-7557. We answer within 15 days.