We appreciate that you trust us with your video and audio recordings and will do everything possible to not damage this trust. None of your audio or transcripts are ever made accessible to staff of Amberscript or other persons unless this is absolutely necessary to perform the services you ordered (e.g. for human correction of your transcripts).
Amberscript issues their General Terms and Conditions, their Privacy Statement, and other legal documents in the English language for reasons of consistency. While we do offer translations for these statements, please always refer to the English version of the documents in case there are any unclarities.
Do you have questions about our privacy policy? Please contact us via [email protected]. We pay special attention to GDPR compliance when dealing with data.
With Amberscript we offer a platform that can be used for transcribing, searching, editing, and exporting the content of audio and video files. We value privacy and want to take care of your concerns about privacy. In the text below we will explain what we do with your privacy-related data and which (personal) data we collect from the website. This policy applies to all information that Amberscript collects via the website, the app, the newsletter, and in other ways. A different privacy policy may apply to corporate customers, for example, because they use their own servers.
In general, we collect two categories of data:
- Information we need so that you can use our product in the best possible way.
- Information that we can use to develop better products, make better offers, and provide better services.
1. The use of information that we need so that you can use our product in the best possible way
Amberscript provides two types of services: (1) Automatic speech-to-text services and (2) human speech-to-text services.
1.1 Automatic speech-to-text services
Amberscript develops technology that automatically transforms human speech into text. This technology can be accessed via the Amberscript editor (app.www.amberscript.com) and when using this service, your data is only visible to yourself. No other people are involved or have access to your audio, video, or transcripts.
To use our services, you upload media files such as audio or video. We use uploaded audio and user feedback to generate anonymized training data for speech-to-text engines. We do this to improve the speech-to-text engine and to improve the user experience by offering a continuously improving service.
The audio and transcripts are only processed automatically, encrypted, and anonymized. You can indicate at any time that your audio and transcripts should not be used to improve the speech-to-text engine and your user experience by sending an email to [email protected]. Specifically, Google Workspace APIs (and files downloaded from Google Workspace APIs) are not used to develop, improve, or train generalized AI and/or ML models.
For some languages (languages other than Dutch, English, French, German, Portuguese, Spanish, Danish, Italian, Norwegian, Finnish, and Swedish), we use third parties to transcribe your audio and process your data. The personal data in these files is therefore sent to these parties and received by us after it is processed. When processing the data, we act in accordance with our user conditions.
Transcripts that are being optimized by our human transcribers are only accessible to transcribers working on that particular transcription, not to Amberscript personnel, other persons, third parties, or companies. Our transcribers have all accepted NDAs with Amberscript.
When executing our service in Dutch, English, French, German, Portuguese, Spanish, Danish, Italian, Norwegian, Finnish, and Swedish, servers are used in Western Europe. For this, we have concluded special contracts that guarantee this, so there is no chance that audio and/or transcripts in the Dutch, English, French, German, Portuguese, Spanish, Danish, Italian, Norwegian, Finnish and Swedish, languages will leave the European continent.
When performing our service for languages other than Dutch, English, French, German, Portuguese, Spanish, Danish, Italian, Norwegian, Finnish, and Swedish, it is possible that the data that you upload will be processed at locations outside of Europe. Your data is never stored in locations outside of Europe. By uploading the data you agree with this. We do everything we can to ensure that your data is stored securely. Your content stays on our servers during your time as an active user. If you delete your account or the files within your account, they will be permanently deleted from our servers.
1.2 Manual speech-to-text services
You can also make use of Amberscript’s human transcription and captioning services. In this service, your audio or video file and the automatically generated transcript will be visible to our transcribers and to our operations team in order to perform corrections and quality checks.
All personnel will have ‘view only’ access to data for a limited time, which is the time it takes to perform their function, based on a strict ‘principle of least privilege’.
All transcribers working for Amberscript are trained to handle sensitive data with great care. Furthermore, all transcribers have signed non-disclosure agreements and data-processing agreements with Amberscript as part of the onboarding process.
On top of that, transcribers do not have the option to download any data (audio or transcripts), as the data remains locked-in in the Amberscript platform.
2. The use of information that we can use to develop better products, to make better offers, and to offer better service
To keep our website up to date – and working, we collect various information about you and your use: your name, email address, contact details, and other identity details.
When you log in to Amberscript we collect your name, email address, contact details, and other information needed to log in and use the site as a customer. If you email our customer service or speak to them via chat, we can save the text, and if you call our customer service the call can be recorded. We do this for training purposes.
Information about the use of our website, app, and other digital media
When you visit our website, use our app or receive our newsletter, we sometimes register your IP address, geolocation based on the IP address, browser type, device data, referral website, usage, and interaction events (e.g. page views, favorites, etc.), surfing habits and app use. We can receive an automatic notification when you open a newsletter or click on a link in our newsletter. When you use our app, we may ask you to share your location or other information with us. For more information read our cookie policy.
When you use one of our services based on Google products (YouTube, Drive), we use and send some of your data to YouTube API and Google Drive API. Use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
We use this information only to improve your user experience. It will never be sold to third parties.
Amberscript use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
Why do we collect your data?
1. Deliver the service you ordered
Amberscript must process your personal data in order to provide you with speech-to-text services. Amberscript will use your personal data to send you the texts. Amberscript also uses your personal data to provide customer service.
2. Manage your Amberscript account
When you create an account on our website, we ask for a number of personal details, such as an e-mail address so that you can log in, your first and last name so that we can approach you personally, and your sector, so that we can customize our services and marketing.
3. Informing about the latest developments at Amberscript (our newsletter)
Amberscript can send you newsletters when (i) you have signed up on our website for a (trial) account, or (ii) if you have signed up for the Amberscript newsletter. Newsletters may consist of: company news, surveys, updates, or information about or offers of products or services from Amberscript and/or its affiliates. If you have logged in, these e-mails can be personalized based on your personal details, past purchases, and/or surfing habits. If at any time you want to unsubscribe from receiving future newsletters, you can do so by clicking on “Unsubscribe” in the newsletter. You can then unsubscribe via a selection menu. You can also unsubscribe by sending an e-mail to [email protected]. We will then unsubscribe you manually.
4. Adapting our marketing communication to your personal interests and preferences and optimizing our product portfolio
In order to know what is relevant to you, we can use automated tools to analyze your personal data. We use your personal data that we have collected through your account, the newsletter, your surfing habits, and your purchases. We use the data for advisory models so that we can tailor our (marketing) communication to your personal interests and preferences. If, for example, our analysis shows that you are interested in 100% manual transcriptions, we can take this into account in our newsletter and on our websites by adjusting the offers and content accordingly. You will then receive information about services that are relevant to you.
5. Conducting research into needs to improve products, services, and communication
Our research department often conducts surveys and interviews to learn more about customer needs. We use the outcomes of this to make our communication, products, and services more relevant. We collect and analyze different types of data to understand behavior and preferences, motivations, and needs. That is why we use various exploratory and evaluating research methods, from ethnographic interviews and group discussions to usability tests, from surveys to experimental design and analysis of behavioral data. In this context, we can collaborate with external research partners, such as research and recruitment agencies. Depending on the research theme, we invite different people. This means that we can also invite people from our own database (e.g. people with whom we have a customer relationship) to participate in research. When we approach you to participate in an investigation, you can always refuse or reject the request.
6. Improve your experience through our app
Amberscript may request your permission to share your data via the Amberscript app for the following reasons: i) to make relevant proposals for the use of our services; iii) to show you relevant information from your use during the use of Amberscript (in the app).
7. Preventing fraud with your personal data, including payment details
Amberscript is obliged to protect yourself and you against possible fraud. In order to prevent and combat fraud with your payment details, Amberscript has drawn up certain rules in consultation with our payment service provider(s). Based on these rules, the use of your e-mail address is required to determine whether a fraudulent transaction is linked to this e-mail address.
Amberscript assumes its legitimate interest in the processing of your personal data (e-mail address) in this case. The credit card and other payment information that you use to make purchases through our website are collected, processed, and hosted by our partners Stripe and Braintree. No Amberscript employee will ever have access to this information.
8. Comply with legal and regulatory requirements for Amberscript
Amberscript must comply with various (national/international) laws and regulations. According to some laws, Amberscript must store your data. These data are usually related to your purchase of our services.
Who has access to your data?
Your personal data will only be shared with our transcription partners (transcriptionists, transcription agencies), but only when this is strictly necessary for the execution of our agreement with you. Some of our partners are located outside the European Economic Area. These partners are also considered individual controllers of your personal data and they bear individual responsibility for this. However, Amberscript has made arrangements with these partners to ensure that your personal data is processed correctly.
We may pass on your personal data to a third party if we have to provide or share your personal data in order to comply with a legal obligation.
How long do we keep your data?
Your personal data will be kept for as long as this is necessary for the purposes described in this privacy policy, or insofar as this is necessary to comply with legal obligations and to resolve (commercial) disputes.
The audio and transcripts in your profile are kept for at least six months. One week before we want to delete the files, you will get an email to inform you about the deletion. At that moment you can indicate that you do not want your files to be deleted. If we do not receive an answer within 5 business days, your files will be deleted.
In case you want to delete your files earlier, you can delete the files in your account. Once you hit the delete button, all your data (media and transcriptions) is immediately removed from our servers, forever. This happens due to privacy and security reasons. Therefore, be extra careful with the delete button!
Safety
Amberscript will take all appropriate technical and organizational measures to protect your personal data against loss or unlawful use.
Once you upload data to Amberscript’s servers, the data is encrypted in motion and at rest.
Do you know your rights?
In the event that we actually process your personal data, you remain the owner of your data. That is why you have the right to:
1. Access and information
You can request information about data from you that we store and use. We are happy to answer any questions you may have. For this, we can ask you for identification.
Audio and video files may contain personal data of natural persons other than the user. For this data the user is the data controller as defined by GDPR as Amberscript has no control over the contents of this data. As the data controller, users are responsible to ensure that personal data is collected and processed under the requirements set in GDPR. Amberscript processes this data on behalf of the user and adheres to the requirements of data processor as defined in GDPR.
2. Delete
You can request that we delete your personal data unless we are legally obliged to store your personal data (e.g. for tax reasons). For this, we can ask you for identification.
3. Rectify
You may also request rectification or supplementation of your personal data if you believe that the personal data we process is inaccurate or incomplete. For this, we can ask you for identification.
In case of using one of the Google services (YouTube, SSO or Google Drive), you have the possibility to revoke your access via the Google security settings page at https://security.google.com/settings/security/permissions.
4. Restrict
You may request us to limit the processing of your personal data when: a) the accuracy of the personal data is disputed by you; or b) the processing is unlawful, but you object to the erasure of the personal data (because you may want to have access to the personal data at a later stage) and you request us to limit the use instead; c) we no longer need your personal data for the predetermined purposes, but you may need the data in the context of legal proceedings; (d) you objected to the processing of your personal data by Amberscript on the basis of your legitimate interest. We will not process your personal data during the term of your ‘objection’ and our assessment of it.
5. Objection
If we process your personal data in the context of the legitimate interests of Amberscript, you may object to further processing on this legal ground. Amberscript will take note of your objection and determine whether our legitimate interests outweigh your personal interests, rights, and freedoms. In the event that we process your personal data for direct marketing purposes on the basis of your legitimate interests, you may object to this at any time via the unsubscribe link in each newsletter that you receive from us. We will then cancel your subscription as soon as possible.
6. Data portability
In the event that we process your personal data digitally, you have the right to request the transfer of your personal data. We will provide you with a machine-readable file of your personal data that we have processed.
7. Withdraw permission
You always have the option to withdraw your consent. Withdrawal of consent does not affect the legality of processing before you withdraw the consent.
If you wish to use the aforementioned rights and/or have other questions, comments, and/or complaints, please contact our customer service (see below) with your motivated request. For this, we can ask you for identification.
Cookies and similar techniques
In addition to this, we can use cookies or similar techniques when users use our sites. Cookies are small pieces of information that are placed on your device when you visit the sites. Note: when you navigate to the sites, you accept cookies.
Our sites use the following cookies:
Functional cookies
These cookies may store the name of your browser, the type of computer, and technical information about the way in which you are connected to our sites, such as the operating system and the used internet provider, as well as other comparable information. This information is used to technically facilitate the navigation and use of the sites. In addition, technical cookies can be used to store personal settings such as language or to remember your order information on subsequent visits.
Analytical cookies
Our sites use analytical cookies that are placed by Google Analytics to measure the number of visits as well as the parts of the sites that are most popular among users. This information is used to provide aggregated and statistical information about the use of our sites and is also used to improve the content of our sites in order to enrich the user experience. Furthermore, our sites use analytical cookies to measure how you found our sites, in order to measure the effectiveness of email campaigns, advertisements, or AdWords on other third-party sites. The analytics cookies are linked to the personal data we store about you as set out above, to personalize our newsletters and for personalized advertisements on third-party sites.
However, Google may combine this data with generic data that it holds over a user and that is obtained through its other services. That is why Amberscript will only use Google Analytics with your permission. Since Amberscript has no control over these services, we would like to refer you to Google’s information about its services.
In addition, Amberscript has signed an agreement with Google. This agreement contains agreements between Amberscript (as responsible for the personal data) and Google (as processors of personal data). These agreements state the purposes for which the acquired personal data may be used, which security measures must be taken, and which forms of supervision Amberscript may exercise as a controller.
Social media cookies
You may share parts of our sites on social media such as Facebook, Twitter, and LinkedIn. These social media use cookies to enable you to do this. The Privacy and Cookie Policy of Amberscript does not apply to the use of such websites. We refer you to the Privacy and Cookie Policy of the relevant social media platform for information about their use of these cookies (Facebook / Twitter / LinkedIn).
Delete cookies
Cookies do not store your data, such as your e-mail address or telephone number, but usually, process your IP address. If you do not want cookies to be stored on your computer or if you wish to delete cookies that have already been stored, you can arrange this via the settings screen in your browser settings. The adjustment of these settings differs per browser. Please note: once the stored cookies have been deleted, you will no longer be able to access the sites without accepting the cookies once again.
Sharing your information – how do we keep your information safe?
We are grateful for the trust you place in us. Amberscript has taken all technical and administrative precautions to ensure that all information you send to us is secure. We would gladly sign an NDA (Non-Disclosure Agreement) or DPA (Data Processing Agreement) if desired.
All users choose a password that can be set up by us with which they can view their information. As a user, you are responsible for keeping your password confidential.
SAML 2.0 SSO for Identity Providers in Education
When logging in to Amberscript via SAML 2.0 SSO, the following personal data might be requested from the identity provider you use:
|
Personal data |
Purpose |
Technical representation |
|
Unique identifiers |
To verify that the attributes are released by the identity provider and to store the values to the user’s Amberscript account |
eduPersonPrincipalName |
|
Name |
To verify that the attributes are released by the identity provider and to store the values to the user’s Amberscript account |
cn displayName givenName sn |
|
E-mail address |
To verify that the attributes are released by the identity provider and to store the values to the user’s Amberscript account |
|
GÉANT Data Protection Code of Conduct
Amberscript complies with the international framework GÉANT Data Protection Code of Conduct for the transfer of personal data from identity providers to the service. This framework is intended for services in the EU and the EEA that are used in research and higher education.
Relevant communication
After registering for our service, you may occasionally receive information from us. The information we send you will be kept to a minimum. If you no longer wish to receive information from us, you can unsubscribe using the following methods:
- Click on the “unsubscribe” link in the mail
- Contact us by writing a mail to info@amberscript.com
Changes to this privacy policy
Amberscript can change this privacy policy at any time at its discretion. When we do this, we will update the latest updated date at the bottom of this page. We encourage you to check regularly on this page to see if there are any changes so that you are kept informed of how we contribute to protecting the personal data we collect.
Jurisdiction
Amberscript is headquartered in, and falls under the jurisdiction of the Netherlands.
Contact
If you have questions about this privacy policy or the practices that are used on our websites, please contact us at:
Amberscript Global B.V.
Keizersgracht 209
1016 DT Amsterdam
E-mail: [email protected]
This document was last updated in November 2021