1. Who we are
DuckScript is a meeting transcription service. You record from your browser, we transcribe, and we generate a report. DuckScript is the controller of your personal data. For any question: privacy@duckscript.com.
This page describes what we collect, why, how long we keep it, and how to erase it. It describes what the product actually does, not what it could do.
2. Your meeting data
This is the heart of the service, and the rule is simple: the content of your meetings belongs to you and is only used to provide the service.
- Audio and video recordings: stored encrypted (AES-256) on Amazon S3, in the European Union. They are automatically deleted after 30 days, on all accounts, whatever the plan. During those 30 days, paid plans can replay the recording from the meeting page; the free plan sees the remaining retention time without being able to play it.
- Transcripts and reports: kept in our database until you delete the meeting or your account. You decide how long they live.
- Transcription is performed by Soniox, our speech recognition provider. The audio is sent to them to be transcribed, nothing more.
- Reports are generated by Claude (Anthropic). The transcript is sent to them to produce the summary, key points and action items. This data is not used to train their models.
What we never do with the content of your meetings: sell it, share it with any third party other than the two providers above, use it for advertising, or send it to our analytics tool.
3. Analytics: nothing without your consent
We use PostHog, hosted in the European Union, to understand how the product is used.
Nothing loads without your consent. As long as you have not accepted analytics cookies, or if you declined them, no analytics script runs in your browser: no page tracking, no session recording, nothing. You can change your choice at any time from Settings, Data & Privacy section.
If you accept, here is what is recorded from your browser:
- the pages you visit and your journey through the product;
- your clicks on interface elements;
- your account email address and identifier, to link that journey to a user;
- your session, replayable by our team, but with all displayed text masked: what appears on screen, including your transcripts and reports, is replaced with asterisks before anything is sent.
The same consent controls Google Analytics, loaded through Google Tag Manager: nothing before you accept; after you do, Google receives the pages you visit and your IP address.
And what is never recorded: the content of your meetings, your transcripts, your reports. Not in plain text, not in session recordings, not in technical logs.
Independently of this choice, our servers record technical account events in PostHog: signup, login, meeting created, transcription completed, processing failure. These events carry metadata (duration, language, meeting type), never content. Anti-abuse blocks are recorded with a hashed identifier, never with your IP address or email in plain text.
5. Other data we process
- Account: name, email address, profile picture if you sign in with Google, encrypted password if you use one.
- Payment: processed by Stripe. We never see or store your card number; we receive a transaction identifier and your subscription status.
- Google sign-in: if you use it, Google sends us your name, email and profile picture, nothing else.
6. How long
- Audio and video recordings: 30 days, all accounts.
- Transcripts and reports: until you delete them.
- Account data: until you delete your account.
- Payment records: kept by Stripe according to its legal obligations.
7. Deleting your account: what is actually erased
Deletion is available in Settings and takes effect immediately. Concretely, it:
- deletes your meetings, transcripts, reports and all their metadata from our database;
- deletes your audio and video recordings from our storage;
- deletes your account, your login sessions, your email verification tokens and the link with your Google account if any;
- cancels your Stripe subscription if it is active.
Two limits, to be exact:
- Stripe keeps the payment records its legal and accounting obligations require;
- analytics events already sent to PostHog are not erased by this operation. Write to privacy@duckscript.com and we will forward the erasure request to PostHog.
8. Your rights
The GDPR gives you rights of access, rectification, erasure, restriction, objection and portability. Two of them are built into the product: the full export of your data (JSON format) and account deletion, both in Settings. For the rest, write to privacy@duckscript.com. If our answer does not satisfy you, you can lodge a complaint with your local data protection authority (for France, the CNIL).
9. Security
All data travels encrypted (TLS). Recordings are stored encrypted (AES-256) on Amazon S3; the database is hosted on Railway, whose storage is encrypted at rest (SOC 2 Type II). Data access goes through authentication checked on every request: your meetings are readable by your account only.
10. Minors
DuckScript is meant for professionals and is not intended for anyone under 18.
11. Changes to this page
If this policy changes substantially, we will let you know by email or in the product. The last updated date appears at the top of the page.