Privacy Policy

In short:

• Your video never leaves your device. Uploading, editing, rendering, and export all happen locally in your browser.
• Only the audio is sent for transcription. Your browser extracts the audio from your clip and sends only that audio to our transcription provider to generate the captions.
• We don't use advertising, marketing, or third-party analytics trackers. The only cookies we set are the essential ones that keep you signed in.
• We never store your video, your audio, or your caption text on our servers.
• We don't sell your personal data. Ever.

ReelCaption is operated by Adrian Szablowski, acting as the data controller for the personal data described in this policy. If you have any questions or want to exercise your rights, contact us at adrian.szablowski.kontakt@gmail.com.

Account information

You sign in with Google. We receive and store the basic profile information Google shares with us — your name, email address, profile picture, and a Google account identifier — together with the OAuth tokens needed to keep you signed in. We never receive your Google password.

Your videos and audio

Your video file is processed entirely in your browser and is never uploaded to us. To create captions, your browser extracts the audio track and sends only that audio to our server, which forwards it to our transcription provider (Groq) to produce word-level text. We do not retain the audio or the resulting caption text: the transcript is returned to your browser, and the audio is discarded after processing.

Billing information

Payments are handled by Stripe. When you subscribe, Stripe collects and processes your payment details directly — we never see or store your full card number. We store a Stripe customer identifier and your subscription details (plan, status, and billing period) so we can give you access to the features you pay for.

Usage data

To enforce plan limits and free-tier quotas, we record technical usage metadata: the number of audio-seconds processed, a computed processing cost, your plan, and the billing period. This metadata contains no caption content and nothing about what your videos are about.

Technical and log data

Like any web service, our hosting infrastructure processes basic technical data such as IP address, browser type, and request timestamps in server logs. We use this only to operate the service securely, prevent abuse, and diagnose problems.

We use a small number of strictly necessary cookies to sign you in and keep your session secure (for example, your authentication session token and a cross-site request forgery, or CSRF, token). We do not use advertising, marketing, profiling, or third-party analytics cookies. Because we only set essential cookies, no separate cookie-consent banner is required to use ReelCaption.

Under the GDPR we must have a legal basis for each purpose. Ours are:

• Providing the service — creating your account, generating captions, and letting you edit and export them. Legal basis: performance of our contract with you.
• Billing and subscriptions — processing payments and managing your plan. Legal basis: performance of our contract and compliance with our legal (accounting) obligations.
• Enforcing limits and preventing abuse — applying free-tier and plan quotas and protecting the service from misuse. Legal basis: our legitimate interests in running a sustainable, secure service.
• Security and troubleshooting — keeping the service available and diagnosing issues. Legal basis: our legitimate interests.
• Legal compliance — responding to lawful requests and meeting our obligations. Legal basis: compliance with a legal obligation.

We do not sell your personal data and we do not share it for advertising. We rely on a small number of trusted service providers (sub-processors) who process data on our behalf, only as needed to run ReelCaption:

• Google — authentication (Google Sign-In).
• Groq — speech-to-text transcription of the audio you submit.
• Stripe — payment processing and subscription management.
• Railway — application hosting and our managed PostgreSQL database.

Each provider processes data under its own terms and security commitments. We may also disclose data if required by law or to protect our rights and the safety of our users.

Some of our providers (including Google, Groq, and Stripe) are based in the United States, so your data may be processed outside the European Economic Area (EEA). Where that happens, the transfer is covered by appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an adequacy decision.

• Account data is kept for as long as your account exists. When you delete your account, we delete the personal data associated with it.
• Billing and usage records may be retained longer where we are legally required to keep them, for example for tax and accounting purposes.
• Audio submitted for transcription is not retained after the transcript is generated.
• Server logs are kept only for a short period for security and operational purposes.

You have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (the 'right to be forgotten').
• Restrict or object to certain processing.
• Receive your data in a portable format (data portability).
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email us at adrian.szablowski.kontakt@gmail.com. You also have the right to lodge a complaint with your local data protection authority. In Poland, this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO).

We use industry-standard measures to protect your data, including encryption in transit (HTTPS), access controls, and reputable infrastructure providers. No method of transmission or storage is ever completely secure, but collecting as little as possible is our first line of defense.

You are responsible for the videos and audio you caption with ReelCaption and for holding the rights necessary to process that content. Please do not submit content you are not allowed to use.

ReelCaption is not directed to children. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the 'Effective date' at the top of this page, and for significant changes we will take reasonable steps to make the update clear. Your continued use of ReelCaption after an update means you accept the revised policy.

Questions about this policy or your data? Email Adrian Szablowski at adrian.szablowski.kontakt@gmail.com.

This Privacy Policy is governed by the laws of Poland and the European Union.