Security & Privacy FAQ

No. Your voice is processed in real-time by our secure transcription partner and is immediately discarded after transcription. Only the final text transcript (if enabled) and the AI-generated summary, highlights, and action items derived from it are saved in your Irinio account. Audio is never stored on Escribbe servers.

Your audio is streamed securely and directly from your browser to our transcription partner's servers using an encrypted WebSocket Secure (WSS) connection. It never passes through or is stored on Irinio's servers. We use short-lived temporary tokens (expiring in 60 seconds) specifically for authorizing this stream.

According to our partner's privacy policy regarding their real-time streaming API, the audio data is not stored. It is processed live and immediately discarded once the text transcript is generated. The processing occurs in-memory and is never persisted to disk.

We store text-based data: AI-generated summaries, key highlights, and action items. Full transcripts are only stored if you explicitly opt-in via workspace settings. Zero audio files are ever stored at rest. All data is protected by strict row-level security (RLS) policies within Supabase.

No. Because the audio is never stored anywhere (neither in Irinio nor by our transcription partner), it cannot be recovered. Once the real-time session ends, the raw audio is gone forever.

Yes. All data transmission uses industry-standard security protocols:

• • WSS & HTTPS: Encrypts all communication using TLS 1.3 protocol.
• • JWT Authentication: Securely manages user sessions with verified tokens.
• • Short-lived Auth: Special 60-second tokens authorize WebSocket connections exclusively.

The audio stream is encrypted end-to-end using TLS 1.3. An attacker would need to compromise your local browser memory or our SOC 2 certified partner's infrastructure. Modern encryption makes man-in-the-middle attacks nearly impossible.

Our privacy-first architecture significantly minimizes compliance risks:

• •Minimal Retention: Only derived summaries are stored by default, reducing the PII footprint.
• •Right to Erasure: Account deletion removes all stored data instantly from our database.
• •Certified Partners: Transcription processing is SOC 2 Type 2 certified and GDPR compliant.

Audio: Only your browser and our transcription partner (temporarily in-memory during session). Summaries: Exclusively authenticated users in your workspace. Irinio admins have access only for critical support purposes, monitored by strict audit trails and activity logs.