Privacy Policy

• Your source video is processed on your own device and is never uploaded to us.
• Only a compact, speech-optimised audio track is sent for recognition and, if you ask for it, translation.
• That prepared audio is deleted after 7 days, so a failed generation can be retried without a re-upload.
• Transcripts and captions live as long as the project does, and are deleted with it.
• We do not sell personal data and we do not use your content to train foundation models.
• You can export or delete your data at any time by writing to captionforgehelp@gmail.com.

CaptionFy is the controller of the personal data described here. Contact us about anything in this policy, or to exercise your rights, at captionforgehelp@gmail.com. The same address reaches our grievance contact for users in India.

• Account data: email address, authentication identifiers, password hash held by our authentication provider, sign-in timestamps, and — if you sign in with Google — the basic profile that provider returns.
• Plan and billing metadata: plan, billing interval, subscription status, period dates, credit balance and credit history. Card and bank details are entered on our payment provider's pages and are never seen or stored by us.
• Prepared audio: a compact mono audio track derived from your media on your device, used only to produce timings and text.
• Project data: project titles, transcripts, caption segments, word timings, style and layout choices, language settings and export settings.
• Support messages you send us, including anything you attach to them.
• Technical and usage data: IP address, approximate region derived from it, browser and device type, pages and features used, generation and export events, error reports and performance traces.
• Referral and campaign data: a referral or campaign code stored in your browser and, once you sign up, linked to your account so credits can be granted correctly.

• Your source video file. It stays in your browser's private storage on your device; captioning and export run locally, and only the prepared audio is transmitted.
• Card numbers, CVV, UPI credentials or bank credentials.
• Special-category data. Please do not send us health, biometric, financial-account or government-ID information.

• To provide the Service — creating your account, generating captions, storing your projects, producing exports: performance of our contract with you.
• To take payment, grant credits, prevent duplicate or fraudulent credit grants and keep tax records: contract and legal obligation.
• To keep the Service secure, detect abuse, rate-limit and investigate incidents: legitimate interests and legal obligation.
• To fix bugs, measure performance and improve features using aggregated or de-identified usage data: legitimate interests.
• To send service and billing notices: contract. To send optional product updates: consent, which you can withdraw at any time.

We rely on a small number of processors, each acting on our instructions under a data processing agreement, and each receiving only what their function needs:

• Cloud hosting, database, storage and authentication — accounts, projects, transcripts and prepared audio.
• Speech recognition and translation — the prepared audio and resulting text only.
• Payments — your email and billing details, handled by the provider as its own controller for compliance purposes.
• Email delivery — your email address and the message content.
• Content delivery, fonts and error monitoring — technical request data.

We do not sell personal data, do not share it with data brokers, and do not permit our processors to use your content to train their own foundation models. We may disclose data where legally required, to protect our rights or users' safety, or as part of a merger or acquisition, in which case this policy continues to apply until replaced.

We operate from India and our processors operate globally, so your data may be processed in countries other than yours, including the United States and the European Union. Where required, transfers rely on appropriate safeguards such as standard contractual clauses or an adequacy decision.

• Prepared audio: deleted 7 days after upload, so a failed generation can be retried without re-uploading.
• Transcripts, caption segments and project settings: kept while the project exists; deleted when you delete the project.
• Account, plan and credit records: kept while your account is open, then deleted within 30 days of account deletion, except records we must keep for tax, accounting or fraud-prevention purposes.
• Security and access logs: typically up to 90 days.
• Backups: routine encrypted backups may retain deleted data for a short additional period before rotating out.

We use encryption in transit, encryption at rest with our cloud provider, row-level access rules so users can only reach their own records, signed short-lived links for audio access, least-privilege service credentials, and rate limiting on sensitive operations. Keeping your source video on your device is itself a privacy measure.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, and you are responsible for the security of your own device, browser and credentials. If a breach affects your personal data, we will notify you and any regulator as required by applicable law and without undue delay.

Depending on where you live, you may have the right to access, correct, export, delete or restrict processing of your personal data, to object to processing based on legitimate interests, to withdraw consent, and to complain to your data-protection authority. Write to captionforgehelp@gmail.com from your account email and we will respond within 30 days, or sooner where the law requires. We may ask you to verify your identity before acting, and we may decline a request where the law allows, explaining why.

Deleting your account deletes your projects, transcripts and prepared audio. Deletion is permanent and cannot be reversed, and it does not entitle you to any refund.

The Service is not intended for children under 13, or under the age of digital consent in your country if that is higher. We do not knowingly collect their data. If you believe a child has created an account, write to captionforgehelp@gmail.com and we will remove it.

We use only what the Service needs: a session cookie or token to keep you signed in, local storage for your editor preferences and for the on-device video vault, and a referral or campaign code stored for a limited period so a signup is credited correctly. We do not run third-party advertising or cross-site tracking cookies. Clearing your browser storage signs you out and removes any videos held on your device.

We update this policy when the Service, our processors or the law change. The current version and its effective date are always on this page, and material changes will be notified by email or in the app where reasonably practicable. Continued use after a change takes effect means you accept the updated policy.

CaptionFy, Hyderabad, Telangana, India — captionforgehelp@gmail.com. We acknowledge privacy requests and grievances within 7 working days and aim to resolve them within 30 days.