Effective 30 September 2026
Privacy Policy
In short
- Speech recognition runs in your browser, on your own device. We do not send your audio to a third-party speech service.
- We store your account, your projects (captions, full word-level transcripts and settings) and your exports so the studio works across devices. Your video files stay on your device — only their file name, size, length and format are stored with your project. The one exception is a transparent-overlay export you send to the desktop Companion app: that video passes through our storage so the Companion can render it.
- We do not sell personal data, and do not train AI models on your videos or transcripts.
- If advertising is enabled on the site, Google and other third-party vendors may use cookies to serve ads based on your prior visits — section 8 explains this and how to opt out. No ads run inside the editor, and advertising never touches your videos or transcripts.
1. What we collect
- Account data: email address, name, password (stored only as a secure hash by our authentication provider) or your Google sign-in identity, and profile picture if your sign-in provider supplies one.
- Your content: the videos you add (the files stay on your device; only their file name, size, length and format are stored with your project — except a video you send to a Companion export, which passes through our storage for that job), transcripts, captions, styles, saved looks, brand colours and fonts, and the files you export.
- Companion data: for each computer you pair: its name, operating system, app version and capabilities (such as available disk space and installed speech models), and when it was last online. Pairing tokens are stored only as a secure hash.
- Usage data: how much you upload, transcribe and render (to apply plan limits), job status and error logs, and basic request logs (IP address, browser, time) kept by our hosting provider for security and debugging.
- Messages: anything you send us by email.
2. Why we use it
- To provide the service: store and show your projects, transcribe and render when you ask, keep your edits in sync (performance of our contract with you).
- To keep it secure and working: detect abuse, prevent fraud, rate-limit, debug (legitimate interests).
- To apply usage limits (contract).
- To contact you about your account and important changes (contract; legitimate interests). Product newsletters only with your consent, with an unsubscribe link in every one.
3. On-device processing
By default, everything runs in your browser: speech recognition, editing and MP4 rendering happen on your device, and your video file is never uploaded. Only the file’s name, size, length and format are sent to our servers and stored with your project. The optional desktop Companion app is the exception. For a transparent overlay export, the Companion downloads your video from our storage to your computer, renders the export locally, and uploads the result back to your account. The rendering never sends your video or audio anywhere else. The Companion keeps a local cache of videos it has processed, which you can clear by deleting its cache folder.
AI features
Some features send text you choose to our AI provider, Groq (see the Subprocessors page). Growth Coach sends the question you ask, the last few turns of that chat, and a summary of your own Growth Studio data — your post titles and their views, reach, likes, comments, shares and saves, and the names, handles and notes of competitors you track. The Create tools send the prompt text you write, and Clipper highlights send transcript text from your video. No audio or video is ever sent to Groq, and we do not train AI models on anything you send.
4. Transcription
Speech recognition runs in your browser with a speech model downloaded once to your device. The audio of your video is processed there and is not sent to a third-party speech service.
6. International transfers
Our providers may store or process data outside your country, including in India (database and file storage) and the United States (website hosting and AI processing). Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses.
7. How long we keep it
- Projects and captions: until you delete them or close your account.
- Exports: kept for 7 to 60 days depending on your plan (see Pricing), then deleted automatically.
- Deleted projects: removed from storage within 30 days, including backups.
- Account data: until you close your account, then deleted within 30 days, except records we must keep by law (for example invoices).
- Security and request logs: typically up to 30 days.
8. Advertising
We may show advertising on this website, served by Google AdSense. This section applies whenever advertising is enabled; while it is not enabled, no advertising cookies are set and no ad requests are made.
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites.
- Google’s use of advertising cookies enables it and its partners to serve ads based on your visits to this site and/or other sites on the Internet.
- You can opt out of personalised advertising by visiting Google Ads Settings, or opt out of many third-party vendors’ cookies at aboutads.info. Opting out does not remove ads; it makes them non-personalised.
- Where the law requires it (for example in the EEA and the UK), personalised ads are only served after a consent choice through a Google-certified consent management platform.
- Advertising is separate from the product: it never uses your videos, audio, transcripts or projects, and ads are not shown inside the editor or your account pages.
9. Your rights and choices
Depending on where you live (including under India’s Digital Personal Data Protection Act, the GDPR and US state privacy laws) you can ask to access, correct, download or delete your personal data, object to or restrict some processing, withdraw consent, and nominate someone to exercise your rights. Email work.techhacksai@gmail.com; we reply within 30 days. You can also complain to your local data protection authority.
You can edit your name in Settings, delete projects in the studio, revoke paired computers in Settings, and ask us to delete your account.
10. Security
Data is encrypted in transit (HTTPS) and at rest by our storage providers. Each account’s data is isolated with database row-level security, files are private and served only through short-lived signed links, and Companion tokens are hashed and revocable. No system is perfectly secure; if a breach affects you we will notify you and the authorities as the law requires.
11. Children
Captionit is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.
13. Changes
We will update this policy as the service changes and tell you about material changes by email or in the app before they apply. The effective date at the top shows the current version.
14. Contact and grievance officer
Privacy questions and requests: work.techhacksai@gmail.com. Parvez Achhan Ali Siddiqui, an individual (sole proprietor) trading as Captionit, India.
Questions about this document? Write to work.techhacksai@gmail.com. Parvez Achhan Ali Siddiqui, an individual (sole proprietor) trading as Captionit, India.