Legal

PRIVACY POLICY

Last updated: March 11, 2026

1. Data We Collect

We collect: (a) Account information — email address and hashed password when you register. (b) Usage data — videos processed, subtitle styles used, processing times. (c) Technical data — IP address at signup (for abuse prevention), browser type, device type. (d) Video content — temporarily during processing only; deleted immediately after.

2. How We Use Your Data

We use your data to: provide and improve the Service; prevent abuse and enforce our Terms; send transactional emails (account confirmation, password reset); analyze aggregate usage patterns to improve performance. We do not sell your data to third parties.

3. Video Processing

Videos you upload are processed on our secure servers and immediately deleted after processing is complete. We do not store, review, or use your video content for any purpose other than generating subtitles. Transcriptions are also deleted after your session.

4. Third-Party Services

We use the following third-party services: Supabase (database and authentication — EU servers), Groq (AI transcription — US servers, data not retained per their policy), Cloudflare (CDN and DDoS protection), Vercel (frontend hosting — US/EU servers).

5. Cookies

We use only essential cookies required for authentication (Supabase session tokens). We do not use advertising or tracking cookies. You can disable cookies in your browser but this will prevent you from logging in.

6. Data Retention

Account data is retained until you delete your account. Video processing logs are retained for 30 days for debugging purposes. IP addresses collected at signup are retained for 12 months for abuse prevention.

7. Your Rights (GDPR)

If you are in the EU, you have the right to: access your personal data; correct inaccurate data; request deletion of your data; object to processing; data portability. To exercise these rights, contact us at privacy@subspark.net or delete your account from Settings.

8. Data Security

We implement industry-standard security measures including encryption in transit (HTTPS/TLS), encrypted storage, and access controls. However, no method of transmission over the internet is 100% secure.

9. Children

SubSpark is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us immediately.

10. Contact

Data Controller: SubSpark. For privacy inquiries: privacy@subspark.net