Privacy Policy

This policy explains what we collect, why, and what we do with it. The most important thing to understand is the difference between our website and the plugin: the website uses ordinary analytics, and the plugin sends us nothing at all.

1. Who is responsible for your data

1.1 Subtitl is built and sold by Utkarsh Singh, an individual carrying on business as a sole proprietor from Muzaffarnagar, Uttar Pradesh, India. Subtitl is not a registered company.

1.2 For anything in this policy, contact support@subtitl.ai. We aim to respond within 2 business days.

2. The short version

• The plugin sends us nothing. Transcription runs entirely on your own computer. Your audio, video and projects are never uploaded — not to us, not to anyone. There is no telemetry, no usage tracking and no cloud processing step in the plugin.
• The website is a normal website. It uses analytics tools that record how visitors navigate the pages, described in section 5.
• Your account holds the minimum. Your name, email, licence, which devices it is activated on, and when each of those devices last checked in.
• We do not sell your data to anyone, ever, and we do not use it for advertising.

3. What the plugin does and does not do

3.1 Subtitl transcribes speech on your own machine. This is an architectural fact about how the Software is built, not a policy promise: there is no upload step for your media in the plugin, so there is nothing for us to intercept, store or hand over.

3.2 We therefore never receive, and cannot access:

• your audio or video files;
• your editing projects or timelines;
• the transcripts or captions the Software produces;
• any content of your work.

3.3 The plugin and the Subtitl Manager application do contact our servers for two narrow purposes: to activate or verify your licence, and to check for updates. Those requests carry your licence key, a device identifier and the device name described in section 4.3, so that we can tell whether a licence is valid, how many devices it is active on, and which is which when you look at the list on your account page. They do not carry your media.

4. What we collect

4.1 Account data. When you create an account we collect your name and email address. If you sign in with Google, we receive your name and email address from Google — we never receive your Google password. If you sign in with an email and password, our authentication provider stores the password in hashed form; we cannot read it.

4.2 Purchase and licence data. When you buy, we record your licence key, which plan you bought, the date, and the devices your licence is activated on. Payment card and UPI details are entered directly with our payment gateway — we never see or store them.

4.3 Device activation records. A Licence covers a set number of Devices, so we keep one record per Device that has been activated on your Licence. Each record holds a device identifier, a device name derived automatically from the computer itself (for example “MacBook Air · macOS”) rather than typed in by you, the date and time it was activated, and the date and time the Software on it last checked in with us. That last item updates periodically while you use the Software, so it reflects roughly when a Device was last active — not what you did on it. We keep these records to enforce the Device limit you purchased, to show you which Devices are using your Licence, and to let you sign one out to free a slot. All of them are visible to you on your account page, and signing a Device out removes its record.

4.4 Support correspondence. If you email us, we keep that correspondence so we can help you and refer back to it.

4.5 Website analytics data. As described in section 5.

4.5 We do not knowingly collect data from anyone under 18. If you believe a child has given us data, write to us and we will delete it.

5. Website analytics

5.1 The website uses Microsoft Clarity, an analytics tool provided by Microsoft Corporation. Clarity records how visitors interact with the pages, which can include mouse movement, clicks, scrolling, and session recordings and heatmaps built from that behaviour, together with technical information such as browser type, device type, approximate region and referring page.

5.2 We use this only to understand how the website is used and to improve it — for example, to see which parts of a page people never reach. We do not use it to build advertising profiles, and we do not sell this data.

5.3 Clarity operates on the website only. It is not present in the plugin or in the Subtitl Manager application.

5.4 Microsoft processes this data as described in the Microsoft Privacy Statement. You can opt out of most such tracking using your browser's "Do Not Track" or equivalent privacy settings, or by using a browser extension that blocks analytics scripts.

5.5 The website also uses Cloudflare Web Analytics, provided by Cloudflare, Inc., which serves the website. It counts page views and reports aggregate information such as the pages visited, referring site, country, browser and device type, and page-load performance. Unlike Clarity it does not record sessions, does not track mouse movement or clicks, and does not set cookies or use browser storage to identify or follow a visitor between visits. We use it only to see traffic levels and how quickly pages load.

5.6 We do not run advertising networks, retargeting pixels, or third-party ad cookies on this website.

6. Why we are allowed to use your data

We process your data because it is necessary to perform our contract with you (creating your account, issuing and verifying your licence, providing support), because we have a legitimate interest in understanding and improving our website and in preventing licence abuse and fraud, and because we sometimes have legal obligations, such as keeping records of transactions.

7. Who we share it with

7.1 We share the minimum necessary with service providers who help us run the business:

• Our authentication and database provider, which stores your account and licence records.
• Our payment gateway, which processes your payment. It receives what it needs to take the payment; we receive back only the confirmation and reference.
• Microsoft Clarity and Cloudflare Web Analytics, for website analytics as described above.
• Our hosting and content delivery providers, which serve the website and the installer downloads.

7.2 We may disclose data if we are required to by law, or to establish, exercise or defend a legal claim.

7.3 We do not sell, rent or trade your personal data.

7.4 Some of these providers operate outside India. Where data is transferred outside India, we rely on the provider's own contractual safeguards for that transfer.

8. How long we keep it

8.1 We keep your account and licence records for as long as your account exists, because a perpetual licence has to remain verifiable for as long as you hold it.

8.2 If you ask us to delete your account, we remove your account data within 30 days of the request. After that period it is removed from our active systems.

8.3 We may keep a minimal transaction record beyond that period where we are legally required to — for example for tax or accounting purposes — and we keep only what the law requires.

8.4 Website analytics data is retained according to Microsoft Clarity's own retention schedule.

9. Your rights

9.1 You can ask us to:

• access the personal data we hold about you;
• correct it if it is wrong — you can also edit your name yourself on your account page;
• delete your account and the data associated with it (see section 8.2);
• withdraw consent where we relied on consent; and
• complain if you think we have handled your data badly.

9.2 To exercise any of these, email support@subtitl.ai from the address on your account. We aim to respond within 2 business days and to complete the request promptly after that.

9.3 Deleting your account ends your ability to activate or move your licence, because licence verification depends on the account. Please be sure before you ask.

10. Security

10.1 Account passwords are stored hashed by our authentication provider. Traffic between your browser and our servers is encrypted in transit using HTTPS.

10.2 No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal data, we will act promptly and notify you where we are required to do so.

10.3 The strongest privacy protection here is structural rather than procedural: because your media never leaves your computer, a breach of our systems cannot expose your footage or your projects. There is nothing of that kind for us to lose.

11. Cookies and local storage

11.1 We use browser storage to keep you signed in between visits. This is necessary for the website to work as a signed-in experience.

11.2 Microsoft Clarity sets its own cookies or storage entries to recognise a returning session, as described in section 5. Cloudflare Web Analytics, also described there, sets no cookies and uses no browser storage.

11.3 We do not use advertising cookies.

12. Changes to this policy

We may update this policy. The "Last updated" date at the top shows when it last changed. If a change materially affects how we handle your data, we will take reasonable steps to tell you before it takes effect.

13. Contact

Utkarsh Singh (sole proprietor), trading as Subtitl
Muzaffarnagar, Uttar Pradesh, India
Email: support@subtitl.ai — we aim to respond within 2 business days.

Full contact details are on our Contact page.