This policy says what VideoCaption at videocaption.io does with your data. The service is run by Yann Kost, Switzerland, who is responsible for that data. Reach us at contact@videocaption.io.
We keep this short and literal. Everything below describes what the software actually does.
1. What we collect, and why
| Data | Why | How long |
|---|---|---|
| Your e-mail address | It is your account: we send the access code to it and tie your credits to it. You can upload and preview before giving it; the address is asked for when you buy credits. | As long as the account exists. |
| A queue without an e-mail address (clips uploaded before you gave one) | So you can see the looks and the transcript on your own clips first. | 48 hours after the last upload, then the clips and the queue are removed. |
| Access codes and sign-in sessions | To let you in without a password. The code is stored as a hash. | A code for one hour; a session for thirty days. |
| The clips you upload | To transcribe and caption them. A copy stays on our server for the trim player and for rendering. | 7 days after the upload, or when you remove the clip from the queue. |
| The transcript (the words and their timings), your trims and the look you chose | To draw the captions and to let you correct the text. | With the clip. |
| The captioned videos | So you can download them. | 48 hours after rendering. |
| Purchases: pack, amount, date and Stripe's reference for the payment | To credit your account and to keep the books. We never receive card numbers. | Ten years, as Swiss bookkeeping law requires. |
| Where you came from: the campaign tags in the link you clicked and the site that sent you, on your first visit | To know which channels bring customers. Kept with the account; nothing follows you to other sites. | As long as the account exists. |
| Server logs: IP address, the page requested, time, browser type | To keep the service secure and find faults. | Thirty days. |
We use cookies to keep you signed in and remember which link first brought you here (the campaign tags and referring site above). We also use Google Analytics to measure visits and how people use the website. Google Analytics uses cookies to distinguish visitors and sessions and reports website-usage statistics to us. See Google's explanation of its cookies. Stripe sets its own cookies on its payment page.
2. Who processes it for us
We run the service on one server in Germany. A few things it cannot do alone, and for those we use providers who work under our instructions:
| Provider | Where | What it does with your data |
|---|---|---|
| Hostinger International Ltd | Cyprus; the server is in Frankfurt am Main, Germany | Hosting of the site, the database, uploaded files and rendered files. |
| Mistral AI | Paris, France | Speech recognition: the sound of each clip is sent to its transcription API and the words come back with their timings. |
| Very Good FFmpeg | verygoodffmpeg.com; the provider names no company or country on its site and says files may be processed outside your own country | Rendering: the trimmed clip and the caption images are sent there, the finished video comes back. Each job runs on a dedicated machine, the files are deleted when the job completes, and the provider states it does not train on, inspect or share the media. |
| Resend, Inc. | United States; mail is sent from its European region (Ireland) | Sending the access code e-mails. Sees your e-mail address and the code. |
| Stripe Payments Europe, Ltd. | Dublin, Ireland | Payment for credit packs. Card details go to Stripe directly and never reach our server. |
Google also processes website-usage data through Google Analytics. See Google's privacy policy for how it handles that data.
Rendering and mail can therefore involve a transfer outside Switzerland and the European Economic Area. Where that is the case, the transfer rests on the provider's standard contractual clauses or, for the United States, on the Swiss–US and EU–US Data Privacy Frameworks where the provider is certified.
Nobody at these providers reviews your clips. We do not sell data, and we do not let anyone use your clips or transcripts to train models.
3. The legal basis
We process your data to provide the service you asked for (the contract), to meet legal duties such as bookkeeping, and, for the server logs, in our legitimate interest of keeping the service safe. Swiss data protection law (the FADP) applies. If you are in the European Economic Area or the United Kingdom, the GDPR applies to you too, and the same reasons hold under it.
4. Your rights
You can ask us at any time what data we hold about you, have it corrected, have it deleted, or receive a copy of it. You can object to processing that rests on our legitimate interest. Write to contact@videocaption.io from the address of your account, and we answer within thirty days. Deleting the account deletes everything except the purchase records we must keep.
If you think we are handling your data wrongly, you can complain to the Swiss Federal Data Protection and Information Commissioner, or, in the EEA, to your own data protection authority.
5. Security
Everything travels over HTTPS. Access codes are stored hashed and expire after an hour. Files are stored on a server only we can reach. Payment data never touches our server.
6. Children
The service is not for people under 18 without a parent or guardian, and we do not knowingly keep data about children.
7. Changes
If we change this policy, the date at the top changes with it. For a change that matters, we tell the addresses with unused credits by e-mail.