Privacy Policy

1. Who is responsible

Zaur Ismailov pr Beograd, registration 68768551, PIB 115944295, at 12 Cika Ljubina Street, 3rd floor, 11102 Belgrade (Stari Grad), Serbia, is responsible for account management, billing, security and service administration. Contact info@guruscribe.ai or +381653215138.

Where a business customer determines why personal data in its recordings are processed, that customer is normally the controller and GuruScribe acts on its instructions as processor for that content. A data-processing agreement is required where applicable. Our role for account and transaction records is separate.

2. Data, purposes and legal grounds

We process email and account information, authentication and guest identifiers, uploads and download links, transcripts, speaker labels, summaries, processing options and usage records to supply the requested service. Contract performance is the legal ground for necessary processing of our customer’s information; business-customer content is processed under that customer’s lawful instructions.

IP addresses, device/browser information, request logs and error records support access control, abuse prevention, guest allowances, troubleshooting and regional pricing. We rely on legitimate interests in operating and protecting the service, balanced against individual rights. Payment amounts, currency, order identifiers and PayPal confirmations support contract performance and legal accounting obligations. Correspondence is used to answer requests and handle disputes.

Providing data needed for an upload, account or payment is necessary for that feature; you can choose not to use it. Do not include unnecessary personal data about others. Special-category data, such as health information, requires an additional lawful condition. A voice recording is not treated as biometric identification merely because it contains a voice; we do not offer identity verification.

3. Processing, training and recipients

We do not use uploaded files or their contents to train AI models. We do not send audio or text to external AI inference services for transcription or summary generation. This does not mean that no infrastructure or payment providers are involved.

Authorised personnel may access data when necessary for operations, support or security. Hosting, storage, email and infrastructure providers can process data needed to operate the service. Object-storage integrations include Selectel and Yandex Cloud. PayPal processes payment information under its own applicable privacy notice. IP geolocation providers (ipapi.co and country.is) may receive the requesting IP to determine the pricing country. Exchange-rate requests do not require sending the recording. Data may also be disclosed where legally required or necessary to establish or defend legal claims.

We do not sell recordings or personal data. Optional analytics, if enabled, is described separately in the Cookie Policy. We do not use transcription or summary results to make legally significant automated decisions about you. Country-based pricing is an automated location estimate; contact support if it is wrong.

4. Locations and international transfers

The provider is established in Serbia. Information therefore is not confined to the EU/EEA. Payment, communications and other infrastructure providers may also process information in their operating countries.

Transfers that fall within GDPR Chapter V require an applicable transfer mechanism and assessment, and Serbian transfer rules also apply where relevant. We do not represent that publication of this notice itself creates transfer safeguards or that general acceptance of these terms is explicit transfer consent. Contact info@guruscribe.ai for the arrangements applicable to your processing and to request copies of safeguards, subject to permitted redactions. Business customers requiring a DPA or transfer arrangement should agree it before uploading personal data.

5. Retention and deletion

Original audio/video uploads are deleted after 24 hours from upload; within that window they can be reprocessed. This period concerns source media, not all information connected with your use of the service.

Transcripts and summaries are retained to provide saved results until they are no longer needed for that purpose or erasure is requested. Removing a file from the interface removes its normal visibility; contact support for a personal-data erasure request. Account and guest-access records are kept while needed to provide access. Logs are kept only as needed for security and troubleshooting; payment, complaint and accounting records may need longer retention under applicable law or for legal claims. Restricted backups may remain until their rotation or erasure process completes. We can explain the applicable retention and any exception when handling your request.

6. Your rights and requests

Depending on the applicable law and conditions, you may request access, a copy, correction, erasure, restriction, portability, or object to processing based on legitimate interests. Where consent is used, you may withdraw it without affecting earlier lawful processing. Write to info@guruscribe.ai with enough information to locate the relevant account or file; we may reasonably verify identity, but do not routinely require an identity document.

We respond without undue delay, normally within one month under GDPR or 30 days under Serbian law, subject to lawful extensions with notice. If we process a recording for a business customer, we may refer your request to that controller and assist it. You can complain to Serbia’s Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs) or, where GDPR applies, your competent EU supervisory authority. You do not have to contact us first to complain to an authority.

7. Security and updates

Access controls, authentication and guest capabilities help protect files. Keep your device, login and API keys secure and avoid sharing access links. No online system can guarantee absolute security. We handle security incidents and provide notifications where required by law. Material changes to this notice will be identified by an updated version date and communicated where required.