Privacy Policy

1. Introduction and Scope

Talkscriber, Inc. ("Talkscriber," "we," "us," or "our") provides voice AI infrastructure and workflow tools, including Omnix, Logos STT, Logos TTS, and Logos AI Agent (collectively, the "Services").

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information in connection with:

• our website at https://www.talkscriber.com (the "Site");
• our business communications, sales, and marketing activities; and
• our provision of the Services.

This Privacy Policy does not replace any MSA, Order Form, DPA, or other written agreement between Talkscriber and a customer.

Capitalized terms used but not defined here have the meanings given in our Terms of Service.

2. U.S.-Only Services

The Services are intended only for use in the United States through Talkscriber's standard public offering.

We do not offer the Services through the standard public offering to persons or organizations established in the European Union, European Economic Area, United Kingdom, or Switzerland, and we do not intend to receive personal data subject to those jurisdictions' comprehensive privacy laws through the standard public offering of the Services.

If you are located in or acting on behalf of an entity in those jurisdictions, do not use the public Services or submit personal information to us through the public offering unless we have expressly agreed otherwise in a signed written agreement.

3. Our Roles

3.1 Site, Business Contact, and Marketing Data

For personal information collected directly from Site visitors, prospective customers, business contacts, account administrators, and similar individuals, Talkscriber acts as a business or controller and determines the purposes and means of processing.

3.2 Customer Data

For identified personal information contained in Customer Data submitted to the Services by or on behalf of a customer, Talkscriber generally acts as a service provider or processor on behalf of that customer to provide the Services.

3.3 De-Identified Data

Where permitted by contract and law, Talkscriber may create and use De-Identified Data from Customer Data for internal lawful business purposes as described in Section 6.

4. Information We Collect

4.1 Information You Provide Directly

We may collect:

• name;
• business email address;
• phone number;
• company name;
• job title;
• account credentials and profile information;
• billing and payment-related information, usually through third-party payment processors;
• communications you send to us, including support requests and feedback; and
• information submitted in connection with demos, onboarding, or integrations.

4.2 Information Collected Through the Services

Depending on the Services used and your configuration, we may process:

• audio recordings and live audio streams;
• transcripts, timestamps, speaker labels, and redaction outputs;
• summaries, extracted facts, follow-up items, tasks, workflow outputs, and CRM updates;
• sentiment, pacing, compliance, coaching, or similar analytics;
• prompts, documents, text inputs, and other content submitted to the Services; and
• technical and operational metadata associated with Service use.

4.3 Information Collected Automatically on the Site

When you use the Site, we and our service providers may automatically collect:

• IP address and approximate location derived from IP;
• browser type, device type, operating system, and application version;
• pages viewed, referral URLs, session information, timestamps, and usage logs; and
• information collected through cookies, pixels, SDKs, and similar technologies used for authentication, security, site functionality, analytics, attribution, and Site-level advertising or remarketing.

4.4 Information from Third Parties

We may receive information from:

• single sign-on providers;
• payment processors;
• customer-authorized integrations;
• marketing and attribution partners; and
• customer administrators and enterprise account owners.

5. Categories of Personal Information We Collect and Disclose

In the preceding 12 months, we may have collected or disclosed the following categories of personal information, depending on the context:

• Identifiers, such as name, email address, IP address, account name, device identifiers, and similar online identifiers;
• Commercial information, such as subscription details, transaction records, and billing history;
• Internet or other electronic network activity, such as Site browsing activity, product usage logs, and interaction data;
• Audio and similar sensory information, such as recordings, live audio streams, and transcripts;
• Professional or employment-related information, such as company name, title, and business role;
• Inferences, such as sentiment or workflow analytics generated from Customer Data; and
• Sensitive personal information, where applicable, such as account credentials, contents of communications, or biometric information processed to identify a consumer.

We collect these categories from the sources described in Section 4, use them for the purposes described in Section 6, and disclose them to the categories of recipients described in Section 9.

6. How We Use Information

We use personal information to:

• provide, maintain, support, and secure the Site and Services;
• authenticate users and manage accounts;
• process payments and administer subscriptions;
• operate product features such as transcription, summarization, analytics, workflow automation, and redaction;
• provide customer support, onboarding, and training;
• detect, investigate, and prevent fraud, abuse, and security incidents;
• enforce our agreements and protect legal rights;
• comply with applicable law and legal process;
• send service-related notices and business communications;
• conduct Site analytics, attribution, and Site-level marketing activities; and
• create and use De-Identified Data as described below.

We may use business contact information to send marketing communications permitted by law. You may opt out using the unsubscribe link in those messages or by contacting us.

7. De-Identified Data Program

7.1 Definition

"De-Identified Data" means information derived from Customer Data that is maintained in a form that is not reasonably capable of being associated with, linked to, or used to infer information about an identified or identifiable person or household.

7.2 How We Create De-Identified Data

When creating De-Identified Data, we use measures reasonably designed for the nature of the data and the reasonably foreseeable risks of identification. Depending on the context, those measures may include:

• removing or replacing direct identifiers;
• masking, suppressing, or generalizing metadata;
• removing account-level or conversation-level references not needed for the intended internal use;
• segregating identified source data from de-identified datasets;
• restricting access to identified source data; and
• testing de-identification controls.

7.3 Public Commitment; No Re-Identification

Talkscriber publicly commits to maintain and use De-Identified Data in de-identified form and not attempt to re-identify it, except solely to test whether its de-identification processes remain effective.

7.4 Internal Uses

Talkscriber may use De-Identified Data for internal lawful business purposes, including:

• product and model improvement;
• testing and evaluation;
• quality assurance;
• safety, abuse prevention, and security;
• analytics and benchmarking; and
• research and development.

7.5 External Disclosure Limits

Talkscriber does not sell, license, disclose, or otherwise make available De-Identified Data to third parties in row-level, conversation-level, or customer-specific form, except to service providers acting on Talkscriber's behalf under written restrictions that prohibit re-identification and unauthorized use.

7.6 Biometric Boundary

Absent a separate signed written addendum, Talkscriber does not use voiceprints, speaker-identification templates, or biometric identifiers derived from Customer Data for model improvement.

7.7 Requests Relating to De-Identified Data

Because De-Identified Data is not reasonably linked to an individual, we generally cannot respond to requests to access, correct, or delete it as if it were identified personal information.

8. Recording, Voice Features, and End Users

Certain Services capture, record, transcribe, monitor, or analyze communications, including conversations involving individuals who may not have a direct relationship with Talkscriber.

Certain voice-related features may implicate state biometric privacy laws, including Illinois and Texas and, depending on the functionality and use case, other state laws.

Customers are primarily responsible for:

• determining applicable recording, monitoring, employment, consumer-protection, and biometric-privacy laws;
• providing required notices;
• obtaining required permissions and consents before collection and processing begins;
• configuring the Services lawfully; and
• maintaining records sufficient to demonstrate compliance,

except to the extent applicable law imposes direct obligations on Talkscriber.

If you are an end user whose information was submitted to the Services by or on behalf of a Talkscriber customer, please direct your privacy request to that customer first. Where required by law or appropriate under our contractual commitments, we may assist the customer in responding or may respond directly.

9. How We Disclose Information

We may disclose personal information:

• to service providers and contractors that help us host, secure, support, operate, and improve the Site and Services;
• to payment processors and identity, fraud, or security vendors;
• to customer-designated integrations and administrators;
• to advertising, analytics, attribution, and marketing vendors for Site-level marketing activities;
• to professional advisors, including auditors, lawyers, consultants, and insurers;
• in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets;
• to comply with law, legal process, or lawful government requests;
• to protect rights, safety, security, and the integrity of the Site or Services; and
• with your direction or consent.

We may also disclose aggregate statistics and De-Identified Data consistent with Section 7.

10. No-Sale / No-Share Position for Customer Data

Talkscriber does not sell or share Customer Data processed through Omnix, Logos, or other production Services for cross-context behavioral advertising.

Talkscriber does not use Customer Data processed through the production Services for third-party advertising purposes.

Certain Site and marketing activities described in Sections 4.3, 6, and 11 may involve sharing limited Site visitor information with advertising or analytics partners in ways that may be considered a "sale" or "sharing" of personal information under California and similar U.S. privacy laws. Those activities apply only to Site and marketing data, not to production Customer Data.

11. Cookies, Tracking, and Site Advertising

We and our service providers use cookies, pixels, SDKs, and similar technologies on the Site for:

• authentication and account security;
• fraud and abuse prevention;
• Site functionality and preferences;
• analytics and performance measurement;
• attribution and conversion tracking; and
• Site-level advertising and remarketing.

Our partners may include web analytics providers, advertising networks, social media platforms, and attribution tools. Their collection and use of information is subject to their own privacy notices.

To the extent Site-level tracking constitutes a sale or sharing of personal information under applicable U.S. law, Talkscriber processes opt-out preference signals, including Global Privacy Control ("GPC"), for the browser or device from which the signal is received.

You may also opt out of Site-level sale or sharing by emailing info@talkscriber.com with the subject line "Privacy Opt-Out Request."

You can also manage cookies through your browser settings and opt out of certain third-party advertising through industry tools.

Some cookies and similar technologies are necessary for Site functionality and cannot be disabled without affecting the Site.

12. Data Retention

12.1 Site and Business Contact Data

We retain Site visitor, business contact, and account-administration information for as long as reasonably necessary for account management, support, contractual performance, marketing activities you have not opted out of, legal compliance, and legitimate business recordkeeping.

12.2 Customer Data

We retain identified Customer Data for the period set by the applicable customer configuration, Order Form, MSA, or documented retention setting.

If no specific retention period is agreed, we may retain identified audio, transcripts, and associated outputs for up to ninety (90) days after capture, unless:

• a customer requests earlier deletion; or
• a longer period is reasonably needed for legal, security, or operational reasons.

12.3 Post-Termination

After the customer relationship ends, we may retain identified Customer Data for up to thirty (30) days to permit export, then delete it from production systems within a commercially reasonable period, subject to:

• legal retention requirements and legal holds;
• backup and disaster-recovery cycles;
• audit logs, system logs, and security records; and
• data already maintained only in de-identified form.

12.4 Biometric Retention Schedule

To the extent Talkscriber is deemed to possess biometric identifiers or biometric information through customer-enabled features, Talkscriber's public retention schedule is to permanently destroy that data when the initial purpose for collection has been satisfied and, in any event, no later than the earliest deadline required by applicable law, including where applicable:

• no later than one (1) year after the purpose for collection expires; or
• no later than three (3) years after the individual's last interaction with the applicable customer,

whichever occurs first, unless a shorter period is required by law, contract, or customer configuration.

12.5 De-Identified and Aggregate Data

We may retain De-Identified Data and aggregate data for longer periods, including after termination, so long as it is maintained in de-identified or aggregate form.

13. U.S. Privacy Rights

Depending on your U.S. state of residence and the nature of your relationship with us, you may have rights to request access to, correction of, or deletion of certain personal information, and to opt out of certain disclosures or uses of personal information.

13.1 California Rights

If you are a California resident, you may have rights under California law to request:

• the categories of personal information we collected about you;
• the categories of sources from which the information was collected;
• the business or commercial purposes for collection, use, disclosure, sale, or sharing;
• the categories of third parties to whom we disclosed personal information;
• the specific pieces of personal information we collected about you;
• deletion of certain personal information;
• correction of inaccurate personal information; and
• information about our sale, sharing, or business-purpose disclosures of personal information.

13.2 Customer Data Requests

If your information is contained in Customer Data submitted by or on behalf of a Talkscriber customer, we may direct your request to that customer because Talkscriber generally processes that information on the customer's behalf.

13.3 De-Identified Data

We may not provide access to or delete information maintained only in de-identified form because it is not reasonably linked to you.

13.4 Sensitive Personal Information

For Site-level data, Talkscriber does not use or disclose sensitive personal information for purposes requiring a separate right-to-limit mechanism, except as may be disclosed at the point of collection or otherwise required by law.

For Customer Data, Talkscriber generally processes sensitive personal information in its role as service provider or processor on behalf of the customer and in accordance with applicable contracts and law.

13.5 Financial Incentives and Non-Discrimination

We do not currently offer financial incentives in exchange for the collection, retention, sale, or sharing of personal information.

We will not unlawfully discriminate against you for exercising privacy rights.

14. How to Submit a Privacy Request

You may submit a privacy request by emailing info@talkscriber.com.

Where required by applicable law, we will provide the required response within the applicable timeframe, generally within forty-five (45) days, subject to any lawful extension.

We may need to verify your identity before responding. We may also request information reasonably necessary to locate your records and process your request.

15. Security

Talkscriber maintains reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, disclosure, alteration, and destruction.

These safeguards may include encryption in transit and at rest where appropriate, role-based access controls, logging, vulnerability management, secure development practices, and incident response procedures.

No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

16. Children's Privacy

The Site and Services are not directed to children, and we do not knowingly collect personal information from children under 16 through the public Services.

If we learn that we collected such information without appropriate authorization, we will take reasonable steps to delete it.

17. U.S.-Only Processing

The public Services are operated from the United States, and data submitted through the standard public offering of the Services is intended to be stored and processed in the United States.

Because the public Services are U.S.-only, you should not submit personal information subject to non-U.S. comprehensive privacy regimes through the public Services unless we have expressly agreed otherwise in a signed written agreement.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make a material change, we will post the revised version and update the "Last Updated" date. Where appropriate, we may also provide additional notice by email, in-product message, or website notice.

19. Contact Us

Talkscriber, Inc.
Attn: Privacy Team
Email: info@talkscriber.com
Website: https://www.talkscriber.com