FastScribe

Privacy Policy – Fastscribe

Last updated: January 2025

Fastscribe SAS ("we", "our", "us") operates an AI-powered SaaS platform that provides transcription, summarization, analysis and automated content generation from audio, video and text files.

We are committed to protecting the privacy of our users and to keeping their personal data secure in accordance with the General Data Protection Regulation (GDPR).

Data controller

Company name: Fastscribe SAS

Address: 200 Rue de la Croix Nivert, 75015 Paris, France

DPO / Privacy contact: [email protected]

Data we collect

We only collect the data necessary to provide and improve the service:

Account information

  • • Email, encrypted password, billing information

Uploaded files

  • • Audio, video and text content processed solely to deliver the requested services

Technical data

  • • Logs, technical cookies, minimal analytics data

Security

  • • No sensitive data is collected intentionally

Purposes of processing

Your data is processed to:

Provide and improve the service

Manage the customer relationship (support, billing)

Ensure security and legal compliance

Legal bases

Processing is based on:

Performance of the user contract

Compliance with legal obligations

The legitimate interest in improving the platform

Data sharing and subprocessors

We do not sell or rent your data

Some data is processed by our technical service providers:

Hosting and infrastructure

Amazon Web Services EMEA SARL

Address: 38 avenue John F. Kennedy, L‑1855, Luxembourg

Role: secure data hosting on EU servers

Vercel Inc.

Address: 440 N Barranca Ave #4133, Covina, CA 91723, USA

Role: front-end hosting and performance optimization (CDN)

Safeguards: transfers governed by Standard Contractual Clauses (SCCs)

AI processing

OpenAI OpCo, LLC

Address: 1455 3rd Street, San Francisco, CA 94158, USA

Role: processing of uploaded files as part of the AI service

Safeguards: transfers governed by GDPR-compliant SCCs

Storage, security and retention

Hosting

Hosting in the EU via AWS, global CDN via Vercel

Encryption

Data encrypted in transit and at rest

Retention

  • • Uploaded files: deleted after processing or upon request
  • • Inactive accounts: deleted within 12 months
  • • Legal data (billing): 10 years

Your rights (GDPR)

You may:

1
Access, rectify or erase your data
2
Object to processing
3
Request the portability of your data

Cookies

Only strictly necessary technical cookies and minimal analytics cookies are used. You can disable them in your browser.

International transfers

Some processing (OpenAI, Vercel) involves transfers to the United States. These transfers are governed by Standard Contractual Clauses (SCCs) ensuring a level of protection compliant with the GDPR.

Changes

We may update this policy in the event of legal or technical changes. Users will be notified of any major change.

Contact

For any question or to exercise your rights: