Privacy Policy

The minimum required to run the service: your email (for account access), your project metadata (titles, edit history, caption style preferences), and aggregate usage stats so we can improve features.

We don't collect: your real name unless you give it to us, your IP address for tracking purposes, or any data from videos you don't explicitly save.

Videos uploaded to projects you choose to save are stored encrypted on our servers (currently Cloudflare R2). Only you and people you explicitly share the project link with can access them.

If you delete a project, the video is permanently deleted from our storage within 30 days. We don't retain copies for analytics or training.

On the free plan, transcription runs entirely in your browser using local WebAssembly Whisper. Your video never leaves your machine for transcription.

Pro users can opt into server-side transcription for files too large to process locally. In that mode, your video is uploaded over HTTPS, transcribed by Whisper running on our own server (no third-party AI vendors), and deleted from the transcription server within 24 hours.

We use cookies for: keeping you signed in, remembering your editor preferences, and basic analytics. No third-party advertising cookies. You can clear them any time without breaking the app, you'll just need to sign back in.

We don't sell or rent your data to anyone. We share only with the vendors needed to operate the service:

Payment processing (Lemon Squeezy) for billing. Email delivery (Resend) for transactional emails like password resets. Cloudflare R2 for video storage. Each is bound by their own privacy policies and we send them only the minimum data needed.

Account data: kept for as long as your account exists. Delete your account and we delete it within 30 days.

Videos: kept until you delete the project. Server-transcribed copies: deleted within 24 hours of transcription completing.

Under GDPR (EU), CCPA (California), and equivalent laws in other regions, you have the right to access, correct, delete, and export your data. Email support@subedit.app and we'll handle it within 30 days.

HTTPS everywhere. Encrypted-at-rest storage. Strong password requirements. Optional 2FA via authenticator apps. No plain-text password storage on our end.

Subedit is not directed at children under 13. We don't knowingly collect data from anyone under 13. If you believe we have, email us and we'll delete it.

Privacy questions or requests: privacy@subedit.app.