Privacy Policy

Your video stays on your device

Videos are opened, edited and exported in your browser. We never upload your video. Only a compressed copy of the audio is sent for speech recognition, and only when you ask for captions.

What we collect and why

• Account: when you sign in with Google, we receive your email address, name and profile picture. We use them to run your account and to contact you about it.
• Subscription: payments are handled by Polar. Polar receives your email, name and account ID so it can create your customer record, and it keeps your payment details. We never see your card number. We store which plan you are on.
• Audio: when you generate captions, the audio is sent to our storage for a short time, then to the speech recognition provider (see below). We delete our copy as soon as the job starts. We do not store transcripts of your audio on our servers.
• Caption text: when you use translation or AI Magic, the caption text is sent to an AI provider to produce the result. We do not store it.
• Usage records: how many minutes of speech and how many characters of AI work were used, and when. We link them to your account, or for visitors without an account, to a one-way hash of the network address, so we can enforce plan limits and prevent abuse. We also keep short-lived request counters for the same purpose.
• Saved templates: the caption styles you save to your account.
• Feedback: if you send feedback, we keep your message, the topic, the reply email if you give one, and your browser type.
• Emails to us: if you write to support, for example for a refund, we keep the correspondence and your email address so we can help you and have a record of what was agreed.
• Server logs: our hosting and database providers record technical details of requests, such as network address and browser type, for security and operation.

Why we may use your data (legal bases)

Where the law asks us to name a legal basis, these are ours:

• To provide the service you asked for (a contract with you): account, captions, translation, saved templates, subscriptions and refunds.
• Our legitimate interests: keeping the service secure, enforcing plan limits, preventing abuse and fraud, and answering your messages.
• Legal obligations: keeping records the law requires and answering valid legal requests.
• Your consent, for example when you send us feedback. You can withdraw it at any time.

Who receives data

• Supabase: sign-in, our database and temporary audio storage.
• Vercel: hosting the website.
• AssemblyAI: speech recognition. It receives the audio, the chosen language and whether speaker detection is on. We have set it to delete the audio and the transcript automatically after a short time. Deletion normally starts within about a day after processing, and it can take a little longer to finish because it depends on the provider's systems.
• OpenAI: translation and AI Magic. It receives caption text. We ask it not to store the request, but it may keep requests briefly as described in its own policy.
• Polar: payments, taxes and refunds, as the Merchant of Record.
• Google: sign-in, and the font files the site loads from Google Fonts, which means Google sees your network address when a page loads.

These companies may process data in countries other than yours, including the United States. Where the law requires safeguards for such transfers, we rely on those providers' standard contractual clauses or similar mechanisms. We may also disclose data if the law requires it. We do not use your audio or text to train any models. If CaptionPopper is ever sold or merged with another business, we will tell you before your data becomes subject to a different privacy policy.

How long we keep it

• Our copy of your audio: deleted when the job starts.
• Upload permits and request counters: removed within hours.
• Account, subscription status, saved templates and usage records: while your account exists. Usage records of visitors are kept as long as needed to enforce limits and prevent abuse.
• Feedback: as long as needed to answer it and improve the service.
• Payment and tax records are kept by Polar as the law requires. We may keep limited records if the law requires it or to handle a dispute.

Cookies

We use only the cookies needed to keep you signed in. We do not use advertising or analytics cookies.

Your rights

You can ask us to access, correct or delete your data, to restrict or object to its use, or to give you a copy, and you can withdraw consent you gave us. To delete your account, email us from your account address and we will delete your account data and ask Polar to delete your customer record, apart from records we must keep by law. Depending on where you live, you may also complain to your local data protection authority.

We may need to confirm that a request really comes from you, for example by writing back to the email address of your account. We will not treat you differently for using these rights. We reply within 30 days. Email support@captionpopper.com.

Security and breaches

We limit access to the data, keep the database closed to browsers, use encrypted connections, and keep secrets on the server only. No system is perfectly secure. If a breach affects your personal data, we will tell you and the authorities as the law requires.

Children

CaptionPopper is not meant for anyone under 16. If you think a child gave us personal data, write to us and we will delete it.

Changes

If we change this policy in a way that matters to you, we will update the date at the top and tell you through the site or by email.