Privacy policy

Last updated: 20 October 2026

WhatScribe is a browser extension for WhatsApp Web that turns voice messages and videos into text. This policy explains what data is processed when you use the extension and this website, why, and what your rights are. The short version: audio is only sent when you click, nothing you transcribe is stored on our servers, and there are no ads or analytics.

Who is responsible

WhatScribe is run from Sweden and is responsible for your personal data. You can reach us at privacy@whatscribe.app.

Audio and transcripts

• WhatScribe does nothing with a message until you click WhatScribe (or CC on a video). Only the message you click is processed.
• When you click, the extension sends that message's audio (for videos, only the audio track) to the WhatScribe API, which runs on Cloudflare Workers. The API passes it to ElevenLabs, our transcription provider, and returns the text with word timings to your browser.
• The WhatScribe API stores neither the audio nor the transcript. ElevenLabs processes the audio to produce the transcript under its own terms and data processing terms.
• Transcripts are cached locally in your browser (IndexedDB) so that reopening one is instant. They stay on your device and you can clear them at any time from the extension popup. Uninstalling the extension also removes them.

Other people's voices

Voice messages and videos often contain other people's voices and personal data. You are responsible for having the right to transcribe the messages you choose to transcribe. WhatScribe processes them only on your instruction and only to show you the text.

Your account and usage

You sign in with your email address and a 6-digit code. To run your account and count minutes, the WhatScribe API stores:

• your email address;
• a SHA-256 hash of each sign-in code and of each session token (never the code or token itself);
• your plan and subscription status (for example, trial, Pro or Max, active or cancelled), and your Stripe customer and subscription ids;
• the number of minutes you have used in the current period.

We do not store your name, your phone number, your contacts or the content of your messages. Sign-in codes are delivered by email through Resend.

Payments

Subscriptions are bought through Stripe's checkout, where Link acts as the seller (merchant of record) and Stripe processes the payment. They collect your email address and payment details and handle billing, taxes and receipts. Their own privacy policies, Stripe's and Link's, apply to that data. We never see your card details. We can see your subscriptions in Stripe's dashboard to provide support.

No analytics, no ads

The extension and this website contain no analytics, no advertising and no tracking cookies, and we do not sell or share your data for marketing. The extension uses the open-source WA-JS library to read the message you click; its built-in analytics are turned off.

Service providers

• Cloudflare: hosts the WhatScribe API and this website.
• ElevenLabs: transcribes the audio you send.
• Resend: delivers the sign-in codes to your email.
• Stripe and Link: checkout, payments, taxes and receipts, as merchant of record.

Some of these providers process data outside the EU/EEA. Where they do, the transfer is covered by safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

Legal basis

We process this data to provide the service you asked for (performance of a contract, GDPR article 6(1)(b)) and, for preventing abuse and keeping costs under control, on the basis of our legitimate interests (article 6(1)(f)).

How long we keep data

Audio and transcripts are not kept by us at all. Your email, plan status, subscription ids and minute counts are kept while your account exists. Ask us to delete your account and we delete them within 30 days. Sign-in codes are deleted once used or no longer valid, within two days of being sent. Stripe and Link keep their own payment records under their own policies.

Your rights

Under the GDPR you have the right to access, correct and delete your personal data, to restrict or object to its processing, and to data portability. Email privacy@whatscribe.app from the address you signed in with to use these rights. You also have the right to complain to the Swedish Authority for Privacy Protection (IMY), imy.se, or the supervisory authority where you live.

Changes

If this policy changes, we will update the date at the top of this page, and tell you in the extension if the change is significant.