Privacy Policy

Last updated 3 November 2026

This policy explains what Scribe & Imagine (scribeimagine.com, “we”, “us”), operated by Stronger eCommerce, collects when you use the website and the Scribe & Imagine connector in Claude or other apps, why, how long we keep it, and the choices you have. The short version: we keep only what the service needs, your OpenAI key is encrypted, uploaded recordings are deleted after use, we never sell your data, and you can delete everything yourself at any time.

1. What we collect

Account information (from Google)

When you sign in with Google we receive your name, email address, profile picture URL and Google account ID. We request only the openid, email and profile scopes. We do not access your Gmail, Drive, Calendar, contacts or any other Google data.

Your OpenAI API key

You give us an OpenAI API key so the service can make requests on your behalf. We check it with OpenAI once, then store it encrypted with AES-256-GCM. It is decrypted only in memory, only to make the requests you ask for. We show only a short hint (like sk-…WXYZ) and never display, log or share the full key.

Content you create or send

• Recordings you upload or link to, and the settings you choose (context, participant names, keywords, languages).
• Transcripts made from them, including speaker names you add.
• Image prompts and images you generate or edit, and pictures you link to for editing.

Technical information

• Records of background jobs (status, timing, settings, estimated cost) so you and Claude can collect results.
• IP addresses, used briefly in rate-limit counters to prevent abuse, and in our host's standard request logs.
• Which apps you have connected (an encrypted record per connection, so connections can be refreshed and revoked).

Credit purchases and charges

If you buy credit, card details go straight to our payment processor (Cardknox) and never reach our servers. We keep the amount, date and the processor's reference number, and a ledger of each job's charge (OpenAI price, fee, balance), so you can see exactly what you paid for. We email a receipt to your sign-in address.

Donations

If you tip, card details are entered into fields hosted by our payment processor (Cardknox) and never reach our servers. We receive and keep the amount, the reference number, and the optional name, email and message you choose to give.

What we don't collect

No advertising or analytics trackers, no third-party cookies, no selling or sharing of personal data for advertising, and nothing is used to train AI models.

2. How we use it

• To sign you in, keep you signed in, and connect the apps you approve.
• To transcribe recordings and make or edit images when you ask, using your OpenAI key.
• To show you, and the apps you connected, your saved transcripts and images.
• To keep the service secure: rate limits, preventing abuse, investigating problems.
• To send a donation receipt (only if you give an email address) and to tell the operator a donation arrived.
• To reply when you contact us.

Legal bases (where GDPR or similar laws apply): performing our agreement with you (providing the service), our legitimate interests (security and abuse prevention), and your consent (optional donation details). You can withdraw consent by deleting your data as described below.

3. Google user data

Scribe & Imagine's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use your Google name, email and ID only to identify your account and show you who is signed in. We do not transfer them to anyone except as needed to run the service (our hosting and database providers), do not use them for advertising, and do not let humans read them except for security, legal compliance, or with your permission to resolve a support request.

4. Who receives your data

We also disclose information if required by law or a valid legal request, to protect the rights and safety of users or the public, or as part of a merger or transfer of the service (in which case this policy continues to apply). Images are shared by link: anyone who has an image's link can open it, so share links with care; deleting the image stops the link working.

5. How long we keep it

• Uploaded recordings: deleted as soon as the transcript is made; any never transcribed are deleted automatically within two days. Recordings fetched from a link are processed in temporary storage and discarded when the job ends.
• Transcripts: the newest 60 per account, until you delete them or your account.
• Images: the newest 40 images (up to 60 MB) per account; older ones are deleted automatically.
• Job records: status records for recent jobs, overwritten as new ones arrive.
• Rate-limit data: rate-limit counters, deleted after about an hour.
• Your account and key: until you remove the key or delete the account.
• Your credit balance and list of charges: until you delete your account. Our payment processor keeps its own record of each card transaction as accounting law requires.
• Donation records: as long as needed for accounting and legal obligations.

6. Your choices and rights

• On your account page you can replace or remove your OpenAI key, sign out every connected app at once, or delete your account, which immediately erases your profile, key, transcripts, images and connections.
• You can delete individual transcripts and images at any time.
• You can ask us for a copy of your data, to correct it, or to delete it by emailing jay@strongerecommerce.com. We'll respond within 30 days. Depending on where you live (for example the EU, UK or California) you may have further rights, including to object, restrict processing, port your data, and complain to your data protection authority. We do not sell or share personal information as those terms are defined under California law.
• You can revoke Scribe & Imagine's access to your Google account at myaccount.google.com → Security → Third-party apps.

7. Cookies

We use only strictly necessary cookies: si_session keeps you signed in on this website (30 days), and si_gnonce protects the Google sign-in step (10 minutes). No tracking cookies.

8. Security

Everything travels over HTTPS. OpenAI keys, sign-in sessions and app tokens are encrypted; app connections expire and rotate; links you give us are fetched with protections that block access to private networks. No system is perfectly secure, so please use an OpenAI key you can revoke, and set a spending limit in your OpenAI account. If we learn of a breach affecting your data we will notify you as the law requires.

9. Children

Scribe & Imagine is not intended for children under 13 (or under 16 in the EU/UK), and we don't knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

10. International transfers

We and our providers are based in, or process data in, the United States. Where the law requires, transfers rely on appropriate safeguards such as the providers' standard contractual clauses.

11. Recordings of other people

Recordings and transcripts often contain other people's voices and words. You are responsible for having their consent where the law requires it (see our Terms). We process that content only to provide the service to you.

12. Changes

If we change this policy we'll update the date at the top, and for significant changes we'll give notice on the website before they take effect.

13. Contact

Stronger eCommerce · jay@strongerecommerce.com