Data Protection

Scribe, operated by BIM Groupe Holding · Last updated 29 August 2026

Who is responsible

Scribe uses the same log-free technologies as BIM VPN and V for VPN. We are a privacy focused company with expertise in AI and privacy technologies.

The data controller is BIM Groupe Holding. Data protection contact: [email protected].

What we hold, and for how long

We ask you to create an account so that the settings you choose for Scribe, your languages, the features you turn on, your delivery preferences, can be saved and applied to your messages. The account exists for that sole purpose.

Data	Why	Kept for
Email address	To identify your account. Shared with your BIM VPN account.	Until you delete the account
Password	Handled by the BIM account service. Scribe never stores it.	n/a
WhatsApp link credentials	To stay connected as a linked device on your behalf	Until you unlink
Your settings (languages, delivery mode, SMS key)	To behave the way you configured	Until you change or delete them
Audio (voice notes, video, voicemail)	To produce the transcript	Deleted immediately after transcription, success or failure
Transcripts	Delivered to you, then dropped	Not stored
Operational logs	To keep the service running. Timestamps, message type, detected language, errors, never the content	Rolling, short-lived

Why these claims hold, not just what they say

Every promise on this page corresponds to something built into the service, not to a policy we could quietly change. In plain terms:

• Your audio never reaches a disk. Recordings are processed in memory and released as soon as the text exists, on success and on failure alike. There is no folder of recordings to leak, subpoena or forget about, because none is ever created.
• Transcription runs on hardware we own. Speech recognition happens on our own machines rather than being handed to a third party by default. Nothing about your audio is sent somewhere we do not control in the ordinary course of the service.
• Transcripts are not stored at all. The text is delivered to you and dropped from the volatile memory. There is no archive, no search index and no analytics copy. Once gone, it is gone forever.
• We do not record who contacts you. Our operational logs deliberately exclude sender and conversation identifiers. They contain enough to tell whether the service is working, and nothing that describes your social graph.
• Account data is encrypted at rest, with the keys held elsewhere. The stored data needed to keep your session alive sits on an encrypted volume whose key is not kept on the same machine. A copy of that storage, taken on its own, is unreadable. The keys are held on a different machine, in a different country.
• Backups are encrypted before they leave. They are never written in readable form, and the material needed to open them is not stored alongside them.
• You can end it instantly. Unlinking removes our ability to receive anything from your account, from that moment on. It takes one click and needs no request to us.

What we never do

• We never sell, rent or share your data with advertisers or data brokers.
• We never use your audio or transcripts to train any model, ours or anyone else's.
• We never read your WhatsApp conversations. Scribe only ever touches messages that contain audio. Neither we, nor any third party, nor any authority can access logs, messages or transcripts, because they live in volatile memory only.
• We never ask for access to your email inbox. Voicemail works through a forwarding address instead.
• We never hold a carrier credential of our own, SMS uses a key you generate and can revoke.

Who processes the audio

Speech recognition runs on BIM Computing hardware we operate. A specialist provider remains configured as a fallback for the case where our own capacity is unavailable; where that provider is used it is contractually bound not to train on submitted audio, and we have switched on its zero-retention setting so nothing is kept there either. In both cases the audio is sent to be transcribed and for nothing else.

If you would rather no audio ever leaves your own premises, Scribe can be deployed on a node you own, see BIM Computing.

Legal basis

We process your data to perform the contract you entered when you created an account and asked us to transcribe your messages. Where you enable an optional feature, SMS delivery, voicemail, translation, that specific processing rests on your consent, which you can withdraw at any time by turning the feature off.

Other people's voices

A voice note you receive was recorded by someone else. We process it only as a processor acting on your instruction, for the sole purpose of showing you what was said, and we delete it straight after. We never build a profile of the people who send you messages.

Your rights

You can ask for access to your data, correction, deletion, restriction, portability, or object to processing. The fastest route for most of it is your own account page: unlink WhatsApp, clear your settings, or ask us to delete the account outright. For anything else, write to [email protected] and we will answer within one month. If you are in the EU or UK you also have the right to complain to your national supervisory authority.

Security

Traffic is encrypted in transit. Data at rest sits on encrypted storage. The service is not directly exposed to the public internet.