Legal
Privacy Policy
Effective date: July 24, 2026
Captionstool ("we", "us", "our") is committed to protecting your personal data and respecting your privacy in accordance with the EU General Data Protection Regulation (GDPR) and applicable Danish law. This policy explains what we collect, why, and what rights you have.
1. Data Controller
The data controller for your personal data is Captionstool. If you have any questions about how we handle your data, please contact us at support@captionstool.com.
2. Data We Collect
We collect only what is necessary to deliver the Service:
Account data
Your email address and (optionally) a display name, collected when you sign in via Supabase Auth. We use this to identify your account and communicate important service updates with you.
Payment metadata
When you subscribe to the Pro plan, Stripe processes your payment card directly. We receive only non-sensitive metadata: your Stripe customer ID, subscription status, and billing period dates. We never see or store your full card number, CVV, or bank details.
Uploaded video content
Videos you upload are processed in a temporary server environment solely to extract audio and generate transcriptions. They are deleted from our servers immediately after processing — we do not retain your video files.
Usage & technical data
Standard server logs may capture your IP address, browser type, and the pages you visit. This data is used only for security monitoring and debugging and is retained for a maximum of 30 days.
3. Legal Basis for Processing
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Providing the Service & managing your account | Performance of a contract (Art. 6(1)(b)) |
| Processing subscription payments via Stripe | Performance of a contract (Art. 6(1)(b)) |
| Security monitoring & abuse prevention | Legitimate interest (Art. 6(1)(f)) |
| Sending service-critical emails (e.g., billing) | Performance of a contract (Art. 6(1)(b)) |
4. Third-Party Processors
We share your data only with the following sub-processors, each bound by GDPR-compliant data processing agreements:
- Supabase — authentication and database (account data). Data is stored in an EU region.
- Stripe — payment processing. Stripe is certified PCI-DSS Level 1 and maintains its own privacy policy at stripe.com/privacy.
- OpenAI (Whisper)— AI transcription of the audio extracted from your video. Audio is sent to OpenAI's API and is subject to OpenAI's API data usage policies (openai.com/policies/api-data-usage).
We do not sell your data to third parties.
5. Data Retention
- Account data is retained as long as your account is active.
- Uploaded videos and extracted audio are deleted immediately after transcription.
- Payment metadata is retained for as long as required by applicable accounting and tax law (typically 5 years).
- Server logs are purged after 30 days.
6. Your Rights
Under the GDPR you have the following rights:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure ("right to be forgotten") — request deletion of your account and all associated personal data.
- Restriction — ask us to restrict processing of your data in certain circumstances.
- Data portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interest.
To exercise any of these rights, email us at support@captionstool.com. We will respond within 30 days. You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) at dt.dk.
7. Cookies
We use only strictly necessary cookies and session tokens required for authentication (set by Supabase). We do not use tracking, analytics, or advertising cookies.
8. Security
All data is transmitted over TLS (HTTPS). Access to production systems is restricted and logged. Passwords are never stored — authentication is handled exclusively via Supabase's secure magic-link or OAuth flow.
9. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or an in-app notice at least 14 days before they take effect.
10. Contact
For any privacy-related questions or requests, contact us at support@captionstool.com.