Privacy Policy

Information We Collect

We collect the minimum information necessary to provide the Service. This includes:

Account information: When you create an account, we collect your name, email address, and chosen plan type. If you sign up with Google OAuth, we receive your name and email from Google.

Payment information: Payment processing is handled by Stripe. We do not store your credit card number, CVV, or full payment details on our servers. We retain a record of your plan type, billing status, and transaction history for billing purposes.

Usage data: We collect information about how you use the Service, including the number of exports generated, timestamps of activity, and feature interactions. This helps us improve the product and troubleshoot issues.

Communications: If you contact us by email, we retain those communications to respond to your inquiry and improve our support.

Audio & Video Data

Generated caption files (SRT/VTT) are available for download immediately after generation and are retained for up to 24 hours to allow recovery in case of connection issues. They are permanently deleted after that window.

We do not use your uploaded content to train AI models or for any purpose other than generating your requested caption file.

How We Use Your Information

We use the information we collect to:

• —Provide, operate, and maintain the Service
• —Process payments and manage your account and credit balance
• —Send transactional emails such as receipts, account confirmations, and billing notices
• —Respond to your support requests and communications
• —Monitor and analyze usage patterns to improve the Service
• —Detect and prevent fraud, abuse, or unauthorized access
• —Comply with legal obligations

We do not use your information for targeted advertising or behavioral profiling.

Sharing Your Information

We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

• —Service providers: We share information with trusted third-party vendors who help us operate the Service (see Third-Party Services below). These providers are contractually obligated to protect your data and may only use it to provide services to us.
• —Legal requirements: We may disclose your information if required by law, subpoena, or legal process, or when we believe disclosure is necessary to protect our rights or the safety of others.
• —Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred as part of that transaction. We will notify you of any such change.

Third-Party Services

We use the following third-party services to operate DeliverCC:

• —Supabase — User authentication and account database. Your account information (name, email, plan type, credit balance) is stored in a Supabase-hosted database.
• —Stripe — Payment processing. Stripe handles all payment card data. Their privacy policy governs the use of payment information.
• —Anthropic— AI processing for caption generation. Uploaded content is transmitted to Anthropic's API for processing. Anthropic's privacy policy governs data handling on their end. Content is not retained for model training.
• —Vercel— Application hosting and infrastructure. Your requests are served through Vercel's infrastructure.

We encourage you to review the privacy policies of these third-party providers for more information on how they handle data.

Data Security

We implement industry-standard security measures to protect your information, including:

• —HTTPS encryption for all data in transit
• —Secure, isolated database access with row-level security
• —API keys and secrets stored as server-side environment variables, never exposed to the browser
• —Payment data handled exclusively by PCI-compliant Stripe infrastructure

No method of transmission over the internet or method of electronic storage is 100% secure. While we implement commercially reasonable security measures, we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

Data Retention

Audio and video files: Deleted immediately after processing. We do not retain your uploaded audio or video content at any point.

Generated caption files: Retained for up to 24 hours after generation to allow recovery in case of connection issues or accidental page closure, then permanently deleted. You can download your file at any time during this window.

Account data: Retained for the duration of your account. If you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law (such as transaction records for tax purposes, which are retained for 7 years).

Usage logs: Retained for up to 12 months for operational and security purposes, then deleted or anonymized.

Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• —Access: Request a copy of the personal information we hold about you
• —Correction: Request correction of inaccurate or incomplete information
• —Deletion: Request deletion of your personal information, subject to legal retention requirements
• —Portability: Request your data in a portable format
• —Objection: Object to certain types of processing

To exercise any of these rights, contact us at hello@delivercc.io. We will respond within 30 days. We may need to verify your identity before fulfilling your request.

If you are located in the European Economic Area (EEA) or United Kingdom, you may have additional rights under GDPR. If you are a California resident, you may have additional rights under the CCPA.

Cookies

We use minimal cookies necessary to operate the Service, including authentication session cookies that keep you logged in. We do not use advertising cookies, tracking pixels, or third-party behavioral tracking.

You can configure your browser to refuse cookies, but this may prevent you from using certain features of the Service that require authentication.

Children's Privacy

DeliverCC is not directed at children under the age of 18. We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected personal information from a child under 18 without parental consent, we will delete that information promptly. If you believe we have inadvertently collected such information, please contact us at hello@delivercc.io.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the "Last Updated" date at the top of this page.

Your continued use of the Service after any changes indicates your acceptance of the updated policy. If you do not agree with changes to this policy, you should stop using the Service and delete your account.