Descript — privacy & data policy

Provider: Descript. PromptPrivacy score: 54/100. Last verified August 26, 2026.

What happens to your data?

Descript collects user profile information, usage metrics, and uploaded audio, video, and image files to provide editing, transcription, voice cloning, and avatar services. Project contents are treated confidentially and are not reviewed by humans without consent or legal obligation, though they may be processed to train models unless opted out. Information is also shared with third-party service providers, analytics vendors, and marketing partners.

Does it train on your data?

Descript uses personal data and projects to personalize and improve services, conduct research, and train artificial intelligence models by default. Users can opt out of having project data used for improvements via settings. Data from AI Speakers used for research datasets is disassociated from user accounts. Data obtained through Google Workspace integrations is explicitly excluded from AI model training.

Can you opt out?

Yes. Users can opt out of having their projects used to improve Descript services by turning off the 'Share Data with Descript' setting. Users can also opt out of promotional emails and targeted advertising, and can request account or data deletion.

Data retention

Descript stores personal information for as long as necessary to fulfill the purposes for which it was collected and for legitimate business or compliance needs. Biometric voiceprints and facial geometry data generated for AI features are retained until their purpose is fulfilled or for up to three years after you last accessed your account.

Encryption & security

The policy mentions that Descript takes 'reasonable measures' to protect data against loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. However, it does not specify technical details such as TLS, encryption at rest, or external security certifications.

Is it safe for work?

Descript provides confidentiality protections for project data and restricts human access under normal circumstances. However, because project data may be used for service improvement and AI training by default, business users should disable the 'Share Data with Descript' setting before uploading sensitive workplace assets. Note that the policy does not detail specific enterprise security certifications.

Source policy: https://www.descript.com/privacy