We appreciate that you trust us with your video and audio recordings and will ensure that our promises are kept. None of your audio files or transcripts are ever made accessible to staff of Amberscript or other persons unless this is absolutely necessary to perform the services you ordered (e.g. for human correction of your transcripts).
Amberscript issues their General Terms and Conditions, their Privacy Statement, and other legal documents in the English language for reasons of consistency. While we do offer translations for these statements, please always refer to the English version of the documents in case there are any unclarities.
Do you have questions about our privacy policy? Please contact us via [email protected]. We pay special attention to GDPR compliance when dealing with data.
With Amberscript we offer a platform that can be used for transcribing, searching, editing, and exporting the content of audio and video files. We value privacy and take any of your concerns about privacy very seriously. In the text below we will explain what we do with your privacy-related data and which (personal) data we collect from the website. This policy applies to all information that Amberscript collects via the website, the app, the newsletter, and in other ways. A different privacy policy may apply to corporate customers, for example, because they use their own servers.
In general, we collect two categories of data:
- Information we need so that you can use our product in the best possible way.
- Information that we can use to develop better products, make better offers, and provide better services.
1. The use of information that we need so that you can use our product in the best possible way
Amberscript provides two types of services: (1) Automatic speech-to-text services and (2) human speech-to-text services.
1.1 Automatic speech-to-text services
Amberscript uses technology that automatically transforms human speech into text. This technology can be accessed via the Amberscript editor and when using this service, your data is only visible to yourself. No other people are involved or have access to your audio, video, or transcripts.
The audio and transcripts that are being generated, will never be used for training purposes of the language models that are used. Specifically, Google Workspace APIs (and files downloaded from Google Workspace APIs) are not used to develop, improve, or train generalized AI and/or ML models.
For all languages, we use third parties to transcribe your audio and process your data. The personal data in these files is therefore sent to these parties and received by us after it is processed. When processing the data, we act in accordance with our user conditions. Your data is never stored in locations outside of Europe.
Transcripts that are being optimized by our human transcribers are only accessible to transcribers working on that particular transcription, not to Amberscript personnel, other persons, third parties, or companies. Our transcribers have all accepted NDAs with Amberscript.
By uploading the data you agree with this. We do everything we can to ensure that your data is stored securely. If you delete your account or files within your account, they will be permanently deleted from our servers.
1.2 Manual speech-to-text services
You can also make use of Amberscript’s human transcription and captioning services. In this service, your audio or video file and the automatically generated transcript will be visible to our transcribers and to our operations team in order to perform corrections and quality checks.
All personnel will have ‘view only’ access to data for a limited time, which is the time it takes to perform their task, based on a strict ‘principle of least privilege’.
All transcribers working for Amberscript are trained to handle sensitive data with great care. Furthermore, all transcribers have signed non-disclosure agreements and data-processing agreements with Amberscript as part of the onboarding process.
On top of that, transcribers do not have the option to download any data (audio or transcripts), as the data remains locked-in in the Amberscript platform.
2. The use of information that we can use to develop better products, to make better offers, and to offer better service
To keep our website up to date – and working, we collect various information about you and your use: your name, email address, contact details, and other identity details.
When you log in to Amberscript, we collect your name, email address, contact details, and other information needed to log in and use the dashboard as a customer. If you email our customer service or speak to them via chat, we can save the text, and if you call our customer service the call can be recorded. We do this for training purposes.
Information about the use of our website, app, and other digital media
When you visit our website, use our app or receive our newsletter, we sometimes register your IP address, geolocation based on the IP address, browser type, device data, referral website, usage, and interaction events (e.g. page views, favorites, etc.), browsing habits and app use. We can receive an automatic notification when you open a newsletter or click on a link in our newsletter. When you use our app, we may ask you to share your location or other information with us. For more information read our cookie policy. You can find it at the bottom of the page.
When you make use of the Dropbox upload, we use and send some of your data for reference to the Dropbox API. This data does not include your personal data or file content.
We use this information only to improve your user experience. It will never be sold to third parties.
Amberscript use and transfer to any other app, or information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
Why do we collect your data?
1. Deliver the service you ordered
Amberscript must process your personal data in order to provide you with speech-to-text services. Amberscript will use your personal data to send you the transcripts. Amberscript also uses your personal data to provide customer service.
2. Manage your Amberscript account
When you create an account on our website, we ask for a number of personal details, such as an e-mail address so that you can log in, your first and last name so that we can approach you personally, and your sector, so that we can customize our services and marketing.
3. Informing about the latest developments at Amberscript (our newsletter)
Amberscript can send you newsletters when (i) you have signed up on our website for an account, or (ii) if you have signed up for the Amberscript newsletter. Newsletters may consist of: company news, surveys, updates, or information about or offers of products or services from Amberscript and/or its affiliates. If you have logged in, these e-mails can be personalized based on your personal details, past purchases, and/or browsing habits. If at any time you want to unsubscribe from receiving future newsletters, you can do so by clicking on “Unsubscribe” in the newsletter. You can then unsubscribe via a selection menu.
4. Adapting our marketing communication to your personal interests and preferences and optimizing our product portfolio
In order to know what is relevant to you, we can use automated tools to analyze your personal data. We use your personal data that we have collected through your account, the newsletter, your browsing habits, and your purchases. We use the data for advisory models so that we can tailor our (marketing) communication to your personal interests and preferences. If, for example, our analysis shows that you are interested in 100% manual transcriptions, we can take this into account in our newsletter and on our websites by adjusting the offers and content accordingly.
5. Conducting research into needs to improve products, services, and communication
Our research department often conducts surveys and interviews to learn more about customer needs. We use the outcomes to make our communication, products, and services more relevant. We collect and analyze different types of data to understand behavior and preferences, motivations, and needs. That is why we use various exploratory and evaluating research methods, from ethnographic interviews and group discussions to usability tests, from surveys to experimental design and analysis of behavioral data. In this context, we can collaborate with external research partners, such as research and recruitment agencies. Depending on the research theme, we invite different people. This means that we can also invite people from our own database (e.g. people with whom we have a customer relationship) to participate in research. When we approach you to participate in an investigation, you can always refuse to cooperate.
6. Improve your experience through our app
Amberscript may request your permission to share your data via the Amberscript app for the following reasons: i) to make relevant proposals for the use of our services; iii) to show you relevant information from your use during the use of Amberscript (in the app).
7. Preventing fraud with your personal data, including payment details
Amberscript is obliged to protect itself and you against possible fraud. In order to prevent and combat fraud with your payment details, Amberscript has drawn up certain rules in consultation with our payment service provider(s). Based on these rules, the use of your e-mail address is required to determine whether a fraudulent transaction is linked to this e-mail address.
Amberscript assumes its legitimate interest when processing of your personal data (e-mail address) in this case. Your credit card and other payment information that you use to make purchases through our website are collected, processed, and hosted by our partners Stripe and Braintree. No Amberscript employee will ever have access to this information.
8. Comply with legal and regulatory requirements for Amberscript
Amberscript must comply with various (national/international) laws and regulations. According to some laws, Amberscript must store your data. This data is usually related to your purchase of our services.
Who has access to your data?
Your personal data will only be shared with our transcription partners (transcriptionists, transcription agencies), and only when this is strictly necessary for the execution of our agreement with you. Some of our partners are located outside the European Economic Area. These partners are also considered individual controllers of your personal data and they bear individual responsibility for this. However, Amberscript has made arrangements with these partners to ensure that your personal data is processed correctly.
We may pass on your personal data to a third party if we have to provide or share your personal data in order to comply with a legal obligation.
How long do we keep your data?
Your personal data will be kept for as long as this is necessary for the purposes described in this privacy policy, or insofar as this is necessary to comply with legal obligations and to resolve (commercial) disputes.
Your data will be automatically deleted after six months. Four and two weeks before your files will be deleted, you will receive an email notification with a link to cancel the deletion. If you don’t take action, your files will be permanently deleted. If you prefer to keep your files, the deletion can be turned off in your account.
In case you want to delete your files earlier, you can delete the files in your account. Once you hit the delete button, all your data (media and transcriptions) is immediately removed from our servers, forever. This happens due to privacy and security reasons. Therefore, be extra careful with the delete button!
Safety
Amberscript will take all appropriate technical and organizational measures to protect your personal data against loss or unlawful use.
Once you upload data to Amberscript’s servers, the data is encrypted in motion and at rest.
Do you know your rights?
In the event that we actually process your personal data, you remain the owner of your data. That is why you have the right to the requests below:
1. Access to information
You can request information about your personal data that we store and use. We are happy to answer any questions you may have. For this, we can ask for your identification.
Audio and video files may contain personal data of individuals other than the user. For this data the user is the data controller as defined by GDPR as Amberscript has no control over the contents of this data. As the data controller, users are responsible to ensure that personal data is collected and processed under the requirements set in GDPR. Amberscript processes this data on behalf of the user and adheres to the requirements of data processor as defined in GDPR.
2. Delete
You can request that we delete your personal data unless we are legally obliged to store your personal data (e.g. for tax reasons). For this, we can ask for your identification.
3. Rectify
You may also request rectification or completion of your personal data if you believe that the personal data we process is inaccurate or incomplete. For this, we can ask you for identification.
In case of using one of the Google SSO, you have the possibility to revoke your access via the Google security settings page at https://security.google.com/settings/security/permissions.
4. Restrict
You may request us to limit the processing of your personal data when: a) the accuracy of the personal data is disputed by you; or b) the processing is unlawful, but you object to the erasure of the personal data (because you may want to have access to the personal data at a later stage) and you request us to limit the use instead; c) we no longer need your personal data for the predetermined purposes, but you may need the data in the context of legal proceedings; (d) you objected to the processing of your personal data by Amberscript on the basis of your legitimate interest. We will not process your personal data during the term of your ‘objection’ and our assessment of it.
5. Objection
If we process your personal data in the context of the legitimate interests of Amberscript, you may object to further processing on this legal ground. Amberscript will take note of your objection and determine whether our legitimate interests outweigh your personal interests, rights, and freedoms. In the event that we process your personal data for direct marketing purposes on the basis of your legitimate interests, you may object to this at any time via the unsubscribe link in each newsletter that you receive from us. We will then cancel your registration as soon as possible.
6. Data portability
In the event that we process your personal data digitally, you have the right to request the transfer of your personal data. We will provide you with a machine-readable file of your personal data that we have processed.
7. Withdraw permission
You always have the option to withdraw your consent. Withdrawal of consent does not affect the legality of processing before you withdraw the consent.
If you wish to use the aforementioned rights and/or have other questions, comments, and/or complaints, please contact our customer service with your motivated request. For this, we can ask for your identification.
Cookies and similar techniques
In addition to this, we can use cookies or similar techniques when users use our sites. Cookies are small pieces of information that are placed on your device when you visit the sites. Note: when you navigate to the sites, you accept cookies.
Our sites use the following cookies:
Functional cookies
These cookies may store the name of your browser, the type of computer, and technical information about the way in which you are connected to our sites, such as the operating system and the used internet provider, as well as other comparable information. This information is used to technically facilitate the navigation and use of the sites. In addition, technical cookies can be used to store personal settings such as language or to remember your order information on subsequent visits.
Analytical cookies
Our sites use analytical cookies that are placed by Google Analytics to measure the number of visits as well as the parts of the sites that are most popular among users. This information is used to provide aggregated and statistical information about the use of our sites and is also used to improve the content of our sites in order to enrich the user experience. Furthermore, our sites use analytical cookies to measure how you found our sites, in order to measure the effectiveness of email campaigns, advertisements, or AdWords on other third-party sites. The analytics cookies are linked to the personal data we store about you as set out above, to personalize our newsletters and for personalized advertisements on third-party sites.
However, Google may combine this data with generic data that it holds over a user and that is obtained through its other services. That is why Amberscript will only use Google Analytics with your permission. Since Amberscript has no control over these services, we would like to refer you to Google’s information about its services.
In addition, Amberscript has signed an agreement with Google. This agreement contains agreements between Amberscript (as responsible for the personal data) and Google (as processors of personal data). These agreements state the purposes for which the acquired personal data may be used, which security measures must be taken, and which forms of supervision Amberscript may exercise as a controller.
Social media cookies
You may share parts of our sites on social media such as Facebook, Twitter, and LinkedIn. These social media use cookies to enable you to do this. The Privacy and Cookie Policy of Amberscript does not apply to the use of such websites. We refer you to the Privacy and Cookie Policy of the relevant social media platform for information about their use of these cookies (Facebook / Twitter / LinkedIn).
Delete cookies
Cookies do not store your data, such as your e-mail address or telephone number, but usually, process your IP address. If you do not want cookies to be stored on your computer or if you wish to delete cookies that have already been stored, you can arrange this via the settings screen in your browser settings. The adjustment of these settings differs per browser. Please note: once the stored cookies have been deleted, you will no longer be able to access the sites without accepting the cookies once again.
Sharing your information – how do we keep your information safe?
We are grateful for the trust you place in us. Amberscript has taken all technical and administrative precautions to ensure that all information you send to us is secure. We would gladly sign an NDA (Non-Disclosure Agreement) or DPA (Data Processing Agreement) if desired. Please check our Helpdesk for more information on how to request an NDA or DPA.
All users choose a password that can be set up by us with which they can view their information. As a user, you are responsible for keeping your password confidential.
SAML 2.0 SSO for Identity Providers in Education
When logging in to Amberscript via SAML 2.0 SSO, the following personal data might be requested from the identity provider you use:
|
Personal data |
Purpose |
Technical representation |
|
Unique identifiers |
To verify that the attributes are released by the identity provider and to store the values to the user’s Amberscript account |
eduPersonPrincipalName |
|
Name |
To verify that the attributes are released by the identity provider and to store the values to the user’s Amberscript account |
cn displayName givenName sn |
|
E-mail address |
To verify that the attributes are released by the identity provider and to store the values to the user’s Amberscript account |
|
GÉANT Data Protection Code of Conduct
Amberscript complies with the international framework GÉANT Data Protection Code of Conduct for the transfer of personal data from identity providers to the service. This framework is intended for services in the EU and the EEA that are used in research and higher education.
Relevant communication
After registering for our service, you may occasionally receive information from us. The information we send you will be kept to a minimum. If you no longer wish to receive information from us, you can unsubscribe using the following methods:
- Click on the “unsubscribe” link in the mail
- Contact us by writing a mail to info@amberscript.com
Changes to this privacy policy
Amberscript can change this privacy policy at any time at its discretion. When we do this, we will update the latest updated date at the bottom of this page. We encourage you to check regularly on this page to see if there are any changes so that you are kept informed of how we contribute to protecting the personal data we collect.
Jurisdiction
Amberscript is headquartered in, and falls under the jurisdiction of the Netherlands.
Contact
If you have questions about this privacy policy or the practices that are used on our websites, please contact us at:
Amberscript Global B.V.
Herengracht 477
1017 BS Amsterdam
E-mail: [email protected]