Privacy Policy

Last updated: June 22, 2026

This Privacy Policy explains what information Stenobox (the “Service”) collects, how it is used, and how it is protected. We designed Stenobox to handle sensitive legal audio with care: we collect only what's needed to provide the Service, and we retain it for as little time as practical.

The short version: Your audio and transcripts are yours. They are encrypted, stored on Google Cloud, accessible only to you, and used only to produce your transcripts. Source audio is deleted within a day of processing; review copies auto-delete after 30 days. We never sell your data.

1. Information we collect

Account information. Your email address and authentication details (via Google sign-in or email/password).
Audio you upload. The recordings you submit for transcription, plus any case context you choose to enter (such as participant names).
Transcripts and review data. The drafts the Service generates and your edits to them.
Billing information. Subscription status and a customer identifier. Card details are handled directly by our payment processor (Stripe); we do not store your full card number.
Basic technical/usage data. Standard logs needed to operate and secure the Service.

2. How we use your information

We use your information solely to:

Provide, operate, and improve the transcription Service;
Process your audio into transcripts and make them available in your account;
Manage your subscription and billing;
Secure the Service and prevent abuse;
Communicate with you about your account or the Service.

We do not sell your personal information or your audio, and we do not use the contents of your audio or transcripts to advertise to you.

3. Where your data is stored and how it's protected

Your audio and transcripts are stored on Google Cloud infrastructure, encrypted in transit and at rest, on platforms independently certified to standards such as SOC 2 and ISO 27001. Access is restricted by per-account security rules so that only you can access your files; no other customer can see your records. To produce transcripts, audio may be processed by trusted third-party cloud and speech-processing providers acting on our behalf under confidentiality obligations, solely to deliver the Service to you.

4. Data retention

Source audio uploads are automatically deleted within one day of processing.
Review copies of audio (used for the click-to-hear review) are automatically deleted after 30 days.
Transcripts remain in your account so you can access them, until you delete them or close your account.

5. Your choices

You can delete transcripts from your account, cancel your subscription at any time, and request deletion of your account and associated data by contacting us. Some limited records may be retained where required for legal, security, or accounting purposes.

6. Security

We take reasonable measures to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

7. Children's privacy

The Service is intended for professional use and is not directed to children under 18.

8. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted here with a new “last updated” date.

9. Contact

Questions about your privacy or this policy? Contact us at hello@stenobox.com.