Call Scribe processes voice recordings, transcripts, provider credentials, and Discord identifiers. Please do not report vulnerabilities in a public issue.

Use GitHub's private vulnerability reporting for this repository. Include the affected revision, impact, reproduction steps, and any suggested mitigation. Do not include real recordings, transcripts, credentials, or other personal data in a report.

Only the latest revision of the default branch receives security fixes. Operators are responsible for access controls, participant consent, retention, and deletion policies for their deployments.