Privacy Policy

1. Who We Are

PolySub, established in Sweden, is the controller of personal data processed in connection with the Service, unless otherwise stated.

If you have questions about this Privacy Policy or our handling of personal data, you can contact us at support@polysub.app.

2. What Data We Collect

We may collect and process the following categories of personal data:

• Account information, such as your name, email address, login details, and account preferences.
• Payment information, such as billing-related data and transaction records, although payment card details are handled by third-party payment providers rather than by us directly.
• Uploaded content, including video files and related files you submit through the Service.
• Generated output, including VTT subtitle files and video files with burned-in subtitles.
• Usage data, such as log data, timestamps, IP address, browser type, device information, and interactions with the Service.
• Communication data, such as messages you send to us for support or other inquiries.

If uploaded video files contain identifiable persons, voices, names, or other personal data, that information may also be processed as part of providing the Service.

3. How We Use Personal Data

We use personal data to:

• provide, operate, maintain, and improve the Service;
• process uploaded video files and generate subtitle output;
• create and manage user accounts;
• process payments and maintain transaction records;
• provide customer support;
• monitor performance, security, and abuse of the Service;
• comply with legal obligations;
• enforce our Terms of Service and protect our rights.

We do not use your uploaded files to claim ownership over your content.

4. Legal Bases for Processing

Where the GDPR applies, we process personal data on one or more of the following legal bases:

• performance of a contract, when processing is necessary to provide the Service to you;
• legitimate interests, such as maintaining security, preventing abuse, improving the Service, and handling support requests;
• compliance with legal obligations;
• consent, where required by law.

If you upload content containing personal data of other individuals, you are responsible for ensuring that you have a valid legal basis for doing so.

5. Uploaded Files and Generated Output

When you upload a video file, we process that file in order to generate subtitle output through the Service.

The Service generates output in the form of:

• a VTT subtitle file; and
• a video file with burned-in subtitles, if that option is selected.

Uploaded files and generated output may be stored for a limited period so that we can provide the Service, support downloads, troubleshoot issues, and maintain system reliability.

You are responsible for downloading and keeping your own copies of output files.

6. Sharing of Personal Data and Service Providers

We may share personal data with:

• hosting and cloud infrastructure providers;
• payment processors;
• authentication, analytics, monitoring, and support providers;
• service providers that help us operate the Service;
• public authorities or other parties where required by law or necessary to protect rights, safety, or security.

Specifically, we use the following third-party service providers to operate the Service:

• Firebase (Google): For user authentication, account management, and real-time database services. Personal data such as your email, authentication tokens, and account preferences are processed by Firebase.
• Stripe: For payment processing. Payment-related data, including billing addresses and transaction records, are processed by Stripe. We do not store payment card information directly.
• Google Cloud Storage (GCS): For storing uploaded video files and generated output. Your uploaded content and subtitle output are stored in GCS infrastructure.

Each service provider has its own privacy policy and data handling practices. We encourage you to review their policies at:

• Firebase: firebase.google.com/support/privacy
• Stripe: stripe.com/privacy
• Google Cloud: cloud.google.com/privacy

We do not sell your personal data.

7. International Transfers

Personal data may be processed in countries outside Sweden or the European Economic Area if we use service providers located there.

Where required by law, we will take appropriate safeguards for such transfers, such as standard contractual clauses or other approved transfer mechanisms.

8. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, including to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements.

Uploaded video files and generated output may be deleted after a limited retention period or after account deletion, subject to backups, legal requirements, and operational needs.

9. Security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your Rights

If the GDPR or similar law applies to you, you may have the right to:

• access your personal data;
• request correction of inaccurate data;
• request deletion of your data;
• object to certain processing;
• request restriction of processing;
• request data portability;
• withdraw consent where processing is based on consent;
• lodge a complaint with a supervisory authority.

In Sweden, the supervisory authority is Integritetsskyddsmyndigheten (IMY).

You can exercise your rights by contacting us at support@polysub.app.

11. Children

The Service is not intended for children, and we do not knowingly collect personal data from children in violation of applicable law.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we will post the updated version on the website.