Descript
Descript is an all-in-one audio and video editor that’s as easy to use as a doc. Automatically transcribe your existing media or use Descript’s built-in audio and screen recorder. Edit your recording by editing the transcription (really) to remove ums and ahs and add effects make and share something great. Use this Slack app to see when your teammates leave feedback on projects.
Permissions
Descript will be able to view:
Descript will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Descript
Company headquarters location
United States
Terms of service
Privacy & data governance
Data retention policy
See https://www.descript.com/security and https://www.descript.com/privacy for more details
* Your Project Information is confidential, even from Descript.
* If you delete your data from Descript, we permanently delete it from our servers.
* Descript has undergone a Service Organization Controls audit (SOC 2 Type 2).
How does Descript use my data?
Descript stores your Project Information — which includes the files you upload to Descript, the transcripts of those files, and other metadata included inside a Project — on our servers. This allows us to offer you features such as live collaboration, full version history of your Projects, and access to your Projects from any computer.
We don't use your Project Information for anything other than providing the service we offer — e.g. we don’t sell it; we don’t use it for marketing; we don’t use it for advertising.
Your Project Information is even confidential from us. The exception is if you specifically ask us to look at a Project for the purpose of customer service, or if you explicitly opt-in to sharing Project Information (e.g. the results of your automatic transcriptions) with us for the purpose of improving the quality of the algorithms we use to provide our service.
We use the services of third party suppliers such as Google, Amazon, and Stripe. We list exactly what we share and why at https://www.descript.com/privacy
Your rights
As our user you have a number of rights:
-Right to access: Most of your personal data in Descript is visible from your account page. To access your account, click on the circle with your initials in the top right corner of Descript. If you want a detailed report, send a Subject Access Request to dpo@descript.com.
-Right to be forgotten: When you delete a Project from Descript, we delete it permanently from our servers within 30 days. If you delete your user account, all data associated with your account is permanently deleted.
-Right to be informed: You have the right to know all the personal information we have on you and what we are doing with it — that’s why we wrote this page. If you have additional questions, email us at dpo@descript.com.
-Right to equal services and price: Descript will not increase the price or decrease the quality of the service for any customer who exercises their rights under these regulations.
-Right to withdraw consent: You have the right to withdraw consent for us to process your data. In the section above, we describe the different levels of consent you can agree to and how to give and withdraw consent — for example, you can unsubscribe from some emails, or you can choose to share your transcript data to improve our transcription accuracy. To withdraw your consent completely, simply delete your Descript account.
-Right to portability: You have the right to obtain all of the personal data Descript has on you in a structured and commonly used format. We will gladly prepare this for you at your request. To initiate this request, send us an email at dpo@descript.com.
-Right to correction: Most of your personal data can be modified from your Descript account page. To access your account, click on the circle with your initials in the top right corner of Descript. If you would like us to make any modifications for you, just send us a request at dpo@descript.com.
-Right to object: We only use your personal data for the purpose of providing you with our service. If you think we are not honoring this, send an email describing the issue to dpo@descript.com and we will start an investigation right away.
-Right to stop automated decision-making: Our system doesn't do any automatic profiling to make decisions. If for any reason you believe that we are making automatic decisions and you would like us to stop, email dpo@descript.com describing the issue and we will start an investigation right away.
-Right to stop processing and right to stop third-party transfer
Data archiving and removal policy
As part of your data security rights listed at https://www.descript.com/security, you have the:
-Right to be forgotten: When you delete a Project from Descript, we delete it permanently from our servers within 30 days. If you delete your user account, all data associated with your account is permanently deleted.
-Right to be informed: You have the right to know all the personal information we have on you and what we are doing with it — that’s why we wrote this page. If you have additional questions, email us at dpo@descript.com.
-Right to equal services and price: Descript will not increase the price or decrease the quality of the service for any customer who exercises their rights under these regulations.
-Right to withdraw consent: You have the right to withdraw consent for us to process your data. In the section above, we describe the different levels of consent you can agree to and how to give and withdraw consent — for example, you can unsubscribe from some emails, or you can choose to share your transcript data to improve our transcription accuracy. To withdraw your consent completely, simply delete your Descript account.
-Right to portability: You have the right to obtain all of the personal data Descript has on you in a structured and commonly used format. We will gladly prepare this for you at your request. To initiate this request, send us an email at dpo@descript.com.
-Right to correction: Most of your personal data can be modified from your Descript account page. To access your account, click on the circle with your initials in the top right corner of Descript. If you would like us to make any modifications for you, just send us a request at dpo@descript.com.
-Right to object: We only use your personal data for the purpose of providing you with our service. If you think we are not honoring this, send an email describing the issue to dpo@descript.com and we will start an investigation right away.
-Right to stop automated decision-making: Our system doesn't do any automatic profiling to make decisions. If for any reason you believe that we are making automatic decisions and you would like us to stop, email dpo@descript.com describing the issue and we will start an investigation right away.
-Right to stop processing and right to stop third-party transfer: If you’d like Descript to stop processing your personal data or stop third party transfers, simply delete your Descript account. By doing so, all your data will be permanently deleted.
Data Subject Requests: If you are in the EEA, you have the right to access personal data we hold about you and to ask that your personal data be corrected, erased, or transferred. You may also have the right to object to, or request that we restrict, certain processing. If you would like to exercise any of these rights, you may contact us as indicated at https://www.descript.com/privacy
Questions or Complaints: If you are in the EEA and have a concern about our processing of personal data that we are not able to resolve, you have the right to lodge a complaint with the data privacy authority where you reside. For contact details of your local Data Protection Authority, please see: http://ec.europa.eu/justice/data-protection/article-29/structure/data-protection-authorities/index_en.htm
Data storage policy
Descript stores your Project Information — which includes the files you upload to Descript, the transcripts of those files, and other metadata included inside a Project — on our servers. This allows us to offer you features such as live collaboration, full version history of your Projects, and access to your Projects from any computer.
We don't use your Project Information for anything other than providing the service we offer — e.g. we don’t sell it; we don’t use it for marketing; we don’t use it for advertising.
Your Project Information is even confidential from us. The exception is if you specifically ask us to look at a Project for the purpose of customer service, or if you explicitly opt-in to sharing Project Information (e.g. the results of your automatic transcriptions) with us for the purpose of improving the quality of the algorithms we use to provide our service.
We use the services of third party suppliers such as Google, Amazon, and Stripe. We list exactly what we share and why at https://www.descript.com/privacy
App/service has sub-processors
yes
Guidelines for sub-processors
Certifications & compliance
Data deletion request procedure
Descript will handle data deletion requests per our policy located at https://www.descript.com/security
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Supports Single Sign On (SSO) with the following providers
SSO is available for enterprise customers, read more at: https://help.descript.com/hc/en-us/articles/360059791672-Enterprise-Single-Sign-On-SSO-
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
no
Contact for security issues
support@descript.com
Has a vulnerability disclosure program
no
Vulnerability disclosure program URL
Vulnerability disclosure program covers Slack app
yes
Has a bug bounty program
no
Requires third party authorization/connections
no
Uses token rotation
yes