This Privacy Policy explains what data captionrich (“we”, “us”) collects when you use captionrich.com and how we use it. We've kept it short and specific to what the product actually does.
1. Data we collect
Account information
When you sign in with Google, we receive your email address, name, and profile image from Google. We store this so we can identify your account and load your projects.
Usage data
We track the number of videos you've processed in the current billing period, how much of your plan's monthly AI allowance you've used, your subscription tier, and timestamps for account activity. This is required to enforce plan quotas.
Billing data
Payments are processed by Polar (polar.sh). We do not see or store your card details. We receive an external customer ID, your subscription status, and renewal/cancellation events from Polar so we can provision access correctly.
Your videos
Editing happens in your browser — uploading, transcribing, styling, and exporting all run locally on your device. Audio extracted from your video is sent to our transcription provider (see Section 3) only for the purpose of generating captions, then discarded.
When you save a project, the source video and the assets it uses (B-roll, music, and images) are uploaded to and stored in Cloudflare R2 under your account, so you can resume your work later or open the same project on a different device. We keep your 5 most recently saved projects; saving a new project beyond that limit automatically deletes the oldest one's files. You can delete a saved project at any time, and deleting your account removes all of them.
Local browser storage
We use your browser's local storage to remember small conveniences like recent colors and recent translation languages. No personally identifying information is stored locally.
2. How we use your data
- To authenticate you and load your projects.
- To store and re-load projects you choose to save to the cloud.
- To enforce plan quotas (videos per month, video length, and your monthly AI allowance).
- To process subscription payments and respond to billing events.
- To send transactional emails (welcome, payment failure, cancellation receipts).
- To respond to support requests when you email us or use the in-app contact form.
We do not sell your data. We do not run advertising trackers on the site.
3. Third-party services
We rely on the following processors to run the service. Each handles only the data needed for its specific role:
- Cloudflare — hosting, database (D1) for accounts, usage, and subscription state, and object storage (R2) for projects you save to the cloud.
- Google — sign-in (OAuth), and on-device face-detection models (MediaPipe) loaded from a CDN for smart caption placement; the detection runs in your browser and your video is not sent to Google.
- Polar — payments, subscriptions, and the customer billing portal.
- Deepgram — primary speech-to-text transcription. Audio is sent for transcription and not retained for training.
- Groq — fallback transcription and a fallback provider for AI editing features.
- DeepSeek — the AI editing features (e.g. smart scenes, auto B-roll, emoji, motion graphics, remove bad takes, clips, and translation), only when you trigger them. Free-plan accounts don't use AI features.
- Resend — transactional email delivery.
- Pexels, Pixabay, and GIPHY — stock video, image, and GIF search for B-roll. Searches are proxied through our servers; these providers don't receive your account or videos.
4. Cookies
We use a small number of essential cookies to keep you signed in and to remember your session. We do not use third-party advertising or tracking cookies.
5. Data retention
Account, subscription, and usage records are retained for as long as your account is active. Cloud-saved projects are kept until you delete them or until they're evicted by the 5-project limit (oldest first). If you delete your account, we delete your account record and the related data linked to it from our database, and we wipe all of your saved videos and assets from Cloudflare R2. Account deletion isn't available while you have an active paid subscription — cancel it first, then delete. Aggregate, non-identifying billing records may be retained as required for accounting and tax purposes.
6. International data transfers
The processors above operate in the United States, the EU, and other regions, so your data may be processed outside the country where you live. Where personal data is transferred internationally, we rely on providers that offer appropriate safeguards (such as Standard Contractual Clauses).
7. Security
We protect your data with encryption in transit, scoped access controls, and reputable infrastructure providers. No online service can be completely secure, but we work to keep your account and any cloud-saved projects safe, and we'll notify affected users of a breach where the law requires it.
8. Your rights
You can request a copy of your data, ask us to correct it, or request deletion at any time by emailing [email protected]. If you're in the EU/UK, you also have the rights afforded to you under GDPR / UK GDPR, including the right to lodge a complaint with your local data protection authority.
9. Children
captionrich is not intended for children under 13 (or 16 in the EU). We do not knowingly collect data from children.
10. Changes to this policy
If we make material changes to this policy, we'll update the effective date at the top of the page and, where appropriate, notify you by email.
11. Contact
Questions about this policy? Email [email protected].