Privacy Policy

Last updated: July 14, 2026

This Privacy Policy explains how Majorum Network LLC ("Majorum," "we," "us," or "our") collects, uses, discloses, and protects personal data in connection with aScribe, our audio/video transcription and AI summarization software-as-a-service platform, hosted at as.majorum.net (the "Service").

This Policy should be read together with our Terms of Service.

Marketing website and contact form

This document also covers the aScribe marketing website (the public pages that describe the product, pricing, and deployment options). That site is separate from the hosted Service application you sign into for transcription and library features.

When you use the contact form on the marketing site, we collect:

• Name and email address (required)
• Company (optional)
• Intent (for example self-host deployment, maintenance, or hosted product questions)
• Message text
• Locale preference you were viewing (UI language on the marketing site, e.g. EN, FR, ES, DE, or IT)

We use this information only to respond to sales, deployment, and support inquiries about aScribe and Majorum offerings. We do not add marketing contact submissions to the Service user database.

Storage and delivery: Submissions are delivered to a webhook and/or appended to a JSONL log file on the marketing host, as configured at deployment time. Access is restricted to authorized Majorum personnel.

Bot protection: The form uses Cloudflare Turnstile to reduce automated abuse. We also apply rate limits using your IP address for that purpose.

Retention: We keep inquiry records for a reasonable period to handle follow-up and short internal archive needs, then delete or anonymize them when no longer needed for business or legal purposes.

Rights: For privacy requests related to marketing contact data, email pub@majorum.net (same contact as in Section 1).

We do not currently run a marketing analytics or advertising cookie program on this site beyond what is described here and in technical logs needed to operate the form.

Language preference and consent. The marketing site may set a first-party cookie named ascribe_locale (and may mirror the same value in browser localStorage) to remember your chosen UI language. It is not used for tracking or advertising, is not HttpOnly (it is set from the language menu after you accept cookies), uses Path=/, SameSite=Lax, Max-Age of about one year, and Secure on HTTPS. We also set a first-party cookie ascribe_cookie_consent (and a localStorage mirror) to record whether you accepted or declined optional storage via the on-site consent dialog. If you decline, we do not store language preference cookies. You can clear site data in your browser to reset the choice.

1. Who We Are

Majorum Network LLC is a Wyoming limited liability company, formed April 15, 2026 (EIN 32-0852817), single-member and member-managed.

Our role: controller and processor. Majorum acts in two distinct data-protection capacities, depending on the category of data involved:

• As data controller, for your account, billing, technical, and security data (Sections 2.1, 2.3, and 2.4) — data generated by your direct relationship with Majorum as a user of the Service, for which we determine the purposes and means of processing.

• As data processor (or "service provider," depending on applicable law), for the substantive content you record, upload, or generate through the Service — your audio/video, transcripts, summaries, notes, and chat/search content (Section 2.2) — which we process solely on your documented instructions to provide the Service. If you use the Service to record or process a conversation involving other people (for example, a business meeting or a call with colleagues), you — or, where applicable, your employer or organization — are the controller of that conversation's content, and Majorum processes it only as your processor, on your instructions. See our Terms of Service, Section 6 (Data Processing Terms), for further detail, including sub-processor authorization and our commitments regarding assistance with data subject rights and deletion/return of content on termination.

• Registered agent address (Wyoming, USA): 30 N Gould St Ste N, Sheridan, WY 82801, United States (c/o Northwest Registered Agent Service Inc.)

• Operational/business address: Condominio San Blas, Avenida Las Amaras N6, La Libertad 05009/01511, El Salvador

• Sole owner / authorized representative: Côme Khalil Arjuna Thibaut

• Contact email: pub@majorum.net

• Website: www.majorum.net

If you have any question, concern, or request regarding your personal data, contact us at pub@majorum.net.

2. What Data We Collect

We collect the following categories of personal data:

2.1 Account data. Username, email address, a hashed (never plaintext) password, and account settings and preferences (such as language, default profile, and automation preferences).

2.2 Content data. The audio and video files you upload or record; the transcripts generated from them (including speaker labels, where diarization is used); AI-generated summaries; notes you write; and chat messages, both messages exchanged about a single recording and queries you submit to "Ask your library," our cross-recording search and chat feature.

2.3 Billing data. For paid accounts: a Stripe-issued customer identifier and a reference to your payment method on file with Stripe. We never receive or store your raw payment card number — all card data is handled directly between you and Stripe, a PCI-compliant payment processor (see Section 5). We separately maintain an internal ledger recording your credit purchases and usage-based debits.

2.4 Usage and technical data. Which AI model was used to process each job, audio/video duration, token counts consumed by AI features (summarization, chat, search), timestamps of activity, and IP addresses. IP addresses are collected and used for security purposes only — specifically, rate-limiting abuse of login and registration endpoints and verifying CAPTCHA challenges — and are not used for tracking, profiling, or advertising purposes.

2.5 Sensitive or third-party content. Because the Service is designed to transcribe conversations, your uploaded or recorded audio/video may contain the voice, likeness, and statements of people other than you (for example, other participants in a meeting or call). We process this content on your instructions as your processor; responsibility for obtaining any consent required to record those individuals, or to process any special-category data such content may contain, rests with you as described in our Terms of Service, Section 5.3. Where you use the Service's speaker-diarization feature, the Service analyzes voice characteristics to distinguish speakers, which may itself constitute biometric data under applicable law (see Terms of Service, Section 5.3(c), for the corresponding warranty you provide).

We do not knowingly collect any special category of data (such as health, biometric identification, or similarly sensitive data as defined under applicable law) except to the extent such data may incidentally appear within the content of a recording or transcript you choose to submit to the Service.

3. How and Why We Use Your Data

We use the data described above to:

• create and administer your account, and authenticate your logins;
• provide the core functionality of the Service: transcribing your audio/video, generating summaries, powering AI chat and cross-recording search, and storing and displaying your content back to you;
• automatically generate and store vector embeddings of your completed transcripts (via the embedding provider described in Section 5) to power "Ask your library" cross-recording search — this indexing happens automatically as soon as a transcription completes, for every recording, regardless of whether you have ever used or intend to use the cross-recording search feature;
• process payments, maintain your billing ledger, and enforce the usage limits associated with your account tier;
• detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Service (including rate-limiting and CAPTCHA verification);
• send you transactional communications, such as account verification emails, security notices, and service-related notifications; and
• comply with our legal obligations.

We do not use your data for behavioral advertising, do not sell your personal data, and do not share your content with any party for that party's own marketing purposes.

4. Legal Basis for Processing

Where the EU General Data Protection Regulation ("GDPR") or a similar data-protection law applies to you, we rely on the following legal bases:

• Performance of a contract — processing your account, content, and billing data as necessary to provide the Service you have signed up for (Sections 2.1–2.3), including transmitting your audio or transcript text to the transcription and AI providers required to generate the output you requested, and generating cross-recording search embeddings as described in Section 3.
• Legitimate interests — processing IP addresses and technical/usage data for security, fraud prevention, and abuse mitigation (Section 2.4), and maintaining service-level records for supervision and support. We consider these interests to be balanced against your rights, since this processing is narrowly scoped to security and is not used for tracking or advertising.
• Legal obligation — processing and retaining data as necessary to comply with tax, accounting, or other legal requirements applicable to Majorum.
• Consent — we do not currently send marketing or promotional communications, and do not otherwise rely on consent as a legal basis for any processing described in this Policy. If this changes in the future, we will update this Policy and obtain your consent where required before doing so.
• Third-party content in your recordings — where a recording or transcript contains the personal data of a person other than you (the account holder), the legal basis for processing that third party's data is determined and must be established by you, as the controller of that content under Section 1 above. Majorum processes that data only as your processor, on your instructions, and does not independently determine a legal basis for third-party personal data embedded in your content.

5. Who We Share Data With (Sub-Processors)

We share personal data only as necessary to operate the Service, with the following categories of sub-processors:

5.1 Hosting infrastructure — Infomaniak. The Service is hosted on servers operated by Infomaniak, a Swiss company headquartered in Geneva, Switzerland, in data centers located exclusively in Switzerland (Geneva and the canton of Vaud). Infomaniak is ISO/IEC 27001:2022 certified for information security management and is GDPR-compliant, providing a Data Processing Agreement under GDPR Article 28.

5.2 Payment processing — Stripe, Inc. All billing and payment-card data is processed by Stripe. Majorum never receives or stores raw payment card numbers.

5.3 Transcription providers. Depending on configuration, some transcription processing may run on our own Infomaniak-hosted infrastructure in Switzerland using self-hosted models (WhisperX, NVIDIA Parakeet, NVIDIA Canary, or Mistral Voxtral). In practice, however, our production deployment currently runs without dedicated GPU hardware, and self-hosted transcription models are impractically slow in that configuration — so we currently expect to use third-party cloud transcription providers for most or all transcription processing, with the option to add local, Swiss-only processing in the future as our infrastructure evolves. This may change, and we will update this Policy if it does. Our current cloud transcription sub-processor is AssemblyAI, Inc., a United States company. Depending on future configuration, other cloud transcription providers we may use include Deepgram, OpenAI (Whisper API), or a cloud-hosted endpoint of the Voxtral model. Which provider, if any, applies depends on the transcription model selected for your job.

5.4 Cloud AI providers (summarization, chat, search, and embedding). Generating summaries, powering chat about a recording, answering "Ask your library" queries, and generating the underlying cross-recording search embeddings (Section 3) requires sending the relevant transcript text (not raw audio) to a large-language-model or embedding-model provider. Our current cloud AI sub-processors for these features are:

• xAI Corp., a United States company; and
• as an alternative or lower-cost option, Hangzhou DeepSeek Artificial Intelligence Basic Technology Research Co., Ltd. ("DeepSeek"), a company organized in the People's Republic of China.

Which of these, if either, is used for a given account or feature depends on the AI provider configuration in effect at the time. The distinction between these two providers matters: xAI is a US company, while DeepSeek is a Chinese company, and transfers to each carry materially different international-transfer risk profiles — see Section 7. Where we operate a model ourselves, no third-party transfer of that text occurs.

5.5 Automatic transcript indexing for cross-recording search. As soon as a transcription job completes, the resulting transcript is automatically broken into chunks and sent to the embedding provider identified in Section 5.4 to generate vector embeddings that power "Ask your library." This happens automatically for every completed recording — it is not limited to the moment you actively submit a search query, and occurs regardless of whether you have ever used the cross-recording search feature. If you do not want a specific recording's transcript embedded for cross-recording search, contact us at pub@majorum.net.

5.6 Transactional email. Account verification emails, security notices, and other service-related notifications are sent through Infomaniak's own mail infrastructure, using a Majorum-operated Infomaniak email account (e.g., ascribe@majorum.net). We do not use a separate third-party transactional-email vendor — transactional email is handled by the same provider, Infomaniak, identified in Section 5.1 as our hosting sub-processor.

5.7 Legal disclosures. We may disclose data if required to do so by law, subpoena, or other legal process, or where we believe in good faith that disclosure is necessary to protect our rights, your safety or the safety of others, investigate fraud, or respond to a government request.

We do not sell your personal data to third parties, and we do not share it with any sub-processor for that sub-processor's own independent marketing purposes.

6. No AI Training on Your Content

We do not use Your Content — your recordings, transcripts, summaries, notes, or chat/search messages — to train, fine-tune, or otherwise improve our own or any third party's general-purpose AI models.

Where we rely on third-party AI providers (Section 5.4) to generate summaries, power chat, or perform search/embedding, we select provider configurations, account tiers, or contractual settings intended to prevent that provider from using your submitted content to train its own models, where such a setting is offered by the provider. This is a commitment about how we configure and select our processing arrangements — it is not an unconditional guarantee about the internal data-handling practices of independent third-party providers such as AssemblyAI, xAI, or DeepSeek, which are outside our direct control. If a provider's terms change in a way that would affect this commitment, we will update this Policy and, where the change is material, take reasonable steps to notify you.

7. International Data Transfers

Our primary hosting infrastructure is located entirely within Switzerland via Infomaniak. Switzerland benefits from a European Commission adequacy decision, meaning that transfers of personal data from the European Union/European Economic Area to Switzerland are recognized as receiving an adequate level of data protection, without the need for Standard Contractual Clauses or other additional transfer safeguards for this specific hop.

Transfers to the United States. Where cloud transcription or cloud AI providers are configured for your account or the platform, your audio and/or transcript text may be transferred to sub-processors located in the United States — currently AssemblyAI (transcription) and xAI (AI/LLM features) (Sections 5.3–5.4). Such transfers are made subject to appropriate safeguards required under applicable data-protection law, such as the EU-US Data Privacy Framework (where the recipient is a certified participant) or Standard Contractual Clauses.

Transfers to China. Where DeepSeek is configured as an alternative AI/LLM provider (Section 5.4), your transcript text may be transferred to Hangzhou DeepSeek Artificial Intelligence Basic Technology Research Co., Ltd., a company organized in the People's Republic of China. This is a materially higher-risk transfer than a transfer to the United States: there is no European Commission adequacy decision for China, and no framework equivalent to the EU-US Data Privacy Framework covers transfers to Chinese entities. A transfer to DeepSeek, where it occurs, relies on Standard Contractual Clauses and such additional safeguards as may be appropriate, and carries a higher degree of regulatory scrutiny and residual risk — including potential access by Chinese authorities under that country's data and cybersecurity laws — than a transfer to a US-based sub-processor. We do not enable DeepSeek by default; it is offered only as a configurable alternative or lower-cost option. If you have questions about which provider is configured for your account or platform, or wish to request that your data not be processed via a China-based provider, contact us at pub@majorum.net.

8. Data Retention

We retain your account data and content (recordings, transcripts, summaries, notes, and chat/search history) for as long as your account remains active, until you delete the specific content yourself or request closure of your account. We do not currently apply any automatic time-based expiry or deletion to your data — content persists indefinitely unless and until you take action to delete it, or submit a deletion request as described in Section 9. Billing and transaction ledger records may be retained for a longer period where necessary to comply with tax, accounting, or other legal obligations.

Residual backup copies. After a deletion request has been fulfilled and your content or account has been removed from our active systems, residual copies may persist temporarily in encrypted backups until they are purged in the ordinary course of our backup-rotation cycle (currently expected to be within approximately 90 days, though this figure is an estimate pending confirmation against Infomaniak's actual backup-retention practice). We do not restore individual deleted records from backups except as necessary for disaster recovery of the platform as a whole.

9. Your Privacy Rights

We offer the following rights to all users of the Service, regardless of your location, as a matter of good practice (not only where legally mandated):

• Access — you can request a copy of the personal data we hold about you.
• Rectification — you can request correction of inaccurate or incomplete data (and can directly edit much of your account data, such as your settings and profile, within the Service itself).
• Erasure / deletion — you can request deletion of your account and associated data.
• Portability — you can request an export of your data in a commonly used, machine-readable format.
• Objection — you can object to certain processing of your data, such as processing based on our legitimate interests described in Section 4.

How to exercise these rights: submit your request by email to pub@majorum.net. We currently process these requests manually rather than through an automated self-service tool. We commit to responding to and, where applicable, fulfilling any request to exercise the rights listed above — access, rectification, erasure/deletion, portability, or objection — within one month (30 days) of receipt, consistent with the standard response period contemplated by GDPR Article 12(3). Where a request is particularly complex or we receive a high volume of requests, we may extend this period by a further two months, and will inform you of any such extension and the reason for the delay within the initial one-month period. We may need to verify your identity before acting on a request, to prevent unauthorized deletion or disclosure of your data.

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with a supervisory data-protection authority, you also have the right to lodge a complaint with that authority.

10. Security Measures

We implement the following technical and organizational measures to protect your data:

• passwords are hashed and never stored in plaintext;
• sessions are managed using signed tokens with server-side revocation — if an administrator suspends an account, that account's active sessions are invalidated immediately, not only blocked from future logins;
• login and registration endpoints are rate-limited per IP address to mitigate brute-force and abuse attempts;
• public account registration is protected by Cloudflare Turnstile, a privacy-respecting CAPTCHA alternative (see Section 11 for a cookie caveat regarding Turnstile);
• all data transmitted to and from the Service is encrypted in transit using HTTPS/TLS;
• our hosting infrastructure provider, Infomaniak, holds ISO/IEC 27001:2022 certification for information security management.

Data breach notification. In the event of a security incident that results in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data we process, we will notify affected users and, where required by applicable law, the relevant supervisory or regulatory authorities, without undue delay.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security of your data.

11. Cookies

Marketing website. The aScribe marketing site may set ascribe_cookie_consent and, if you accept, the language-preference cookie ascribe_locale, as described in the Marketing website section above. It does not set authentication or advertising cookies on the marketing site.

Hosted Service. The Service itself sets a single functional cookie: a signed authentication session token, necessary to keep you logged in and to secure your session. We do not use advertising cookies, cross-site tracking cookies, or any similar tracking technology of our own on the Service.

Cloudflare Turnstile caveat. Public account registration is protected by Cloudflare Turnstile (Section 10). Depending on the challenge mode Turnstile selects for a given visitor, Turnstile may set its own cookie(s) as part of its bot-detection function, independent of and in addition to Majorum's own authentication cookie described above. These Turnstile cookies are controlled by Cloudflare, not Majorum; see Cloudflare's own privacy and cookie documentation for details on their purpose and duration.

12. Children's Privacy

The Service is not directed at children and we do not knowingly collect personal data from individuals below the age of majority in their jurisdiction of residence (see our Terms of Service, Section 1.2). If we become aware that we have inadvertently collected personal data from a minor without appropriate consent, we will take steps to delete that data promptly. If you believe a minor has provided us with personal data, contact us at pub@majorum.net.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. We will update the "Last updated" date at the top of this document when we do, and, for material changes, will provide additional notice (such as an email or in-app notice) where appropriate. Your continued use of the Service after a revised Policy takes effect constitutes your acceptance of it.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Majorum Network LLC Registered agent address: 30 N Gould St Ste N, Sheridan, WY 82801, United States (c/o Northwest Registered Agent Service Inc.) Operational address: Condominio San Blas, Avenida Las Amaras N6, La Libertad 05009/01511, El Salvador Email: pub@majorum.net Website: www.majorum.net