Privacy Policy

Privacy Policy

1. Introduction

We at Subvideo.ai are committed to protecting your personal data and ensuring transparency in accordance with the General Data Protection Regulation (GDPR).

2. Responsible Entity

Maik Andreß
Pompstraße 10
46045 Oberhausen
Germany
Email: privacy@subvideo.ai

3. What Data We Collect

  • Name and email during registration
  • Hashed login credentials
  • Uploaded media files and metadata
  • IP address, browser, technical data

4. Purpose and Legal Basis

  • Account management (Art. 6(1)(b) GDPR)
  • Processing of transcription services (Art. 6(1)(b) GDPR)
  • Platform integrity and abuse prevention (Art. 6(1)(f) GDPR)

5. Cookies and Consent

Only technically required cookies are used. When tracking or analytics tools are used, we will ask for your consent via a cookie banner.

6. Data Protection Measures

  • SSL encryption
  • Bcrypt hashed passwords
  • ISO-certified hosting
  • Regular backups

7. Data Processors and Third Parties

We may share data with:

  • Hosting providers
  • Payment providers under AV agreements

8. Stripe and PayPal

We use these providers for payment processing. Data is handled according to their privacy policies:

9. Transcription File Retention

Files are retained for up to 30 days after processing or until deleted by the user via the dashboard.

10. Server Log Files

Includes IP, browser, OS and timestamp. Used for diagnostics. Automatically deleted after 30 days.

11. Children's Privacy

Use is not permitted for individuals under 16. Data from minors will be deleted immediately upon detection.

12. Contact and Support

When contacting us (e.g., via email or contact form), your inquiry and contact details are stored for processing purposes. (Art. 6(1)(b) and (f) GDPR)

13. Newsletter and Marketing

We may send information about updates and features with your consent (Art. 6(1)(a) GDPR). Unsubscribe anytime.

14. Google Fonts and External Resources

Google Fonts and CDN resources may collect IP data. We strive to replace these with self-hosted files.

15. Web Analytics and Tracking

We use web analytics tools for improvement and monitoring. Data is processed based on legitimate interest (Art. 6(1)(f) GDPR) and only after user consent if required.

16. AV Contract

With all service providers who process data on our behalf (e.g., hosting or email delivery), we maintain legally binding Data Processing Agreements (AV contracts).

17. Your Rights

  • Access (Art. 15 GDPR)
  • Correction (Art. 16 GDPR)
  • Deletion (Art. 17 GDPR)
  • Restriction (Art. 18 GDPR)
  • Objection (Art. 21 GDPR)
  • Portability (Art. 20 GDPR)
  • Withdraw consent (Art. 7(3) GDPR)
  • File a complaint (Art. 77 GDPR)

18. Changes

We may change this policy to reflect updates. Users will be informed via email or dashboard.