Privacy Policy

01Who handles your data

The product operator identified below is responsible for the site, extension and account data. If Waffo acts as Merchant of Record for an eligible transaction, it is the seller to the buyer for that sale.

Product operator: subtitle.im · Privacy email: support@subtitle.im

02Data we process and why

The extension reads video frames locally and stores caption preferences, rules, and the free allowance. If you choose email sign-in, the account service processes your email and session; if you buy Pro, it separately processes order and license records.

03Legal basis and necessity

Where applicable law requires a legal basis, local free allowance records are used to provide the free features you request. If you choose email sign-in, email verification and session records support account connection. If you buy Pro, order and license records support paid access. Necessary security logs help prevent abuse and protect the service; legally required transaction records help us meet legal obligations. Free use does not require an email address. If we later offer optional marketing or other processing that requires consent, we will explain it separately and obtain any required consent first.

04Local storage and cookies

The extension stores caption preferences, rules, and the free allowance locally; clearing its data may reset the allowance. If you choose to connect an account, it also stores a device session token.

05Payments and Waffo

We plan to use Waffo Pancake hosted checkout. If an approved transaction qualifies for its Merchant of Record service, Waffo handles the sale, applicable tax, receipt or invoice, refunds and chargebacks; subtitle.im handles the product and access. We would send account ID, email, chosen plan and order identifiers to create checkout. Card details entered on Waffo's page are handled by Waffo and its payment partners, not a subtitle.im form. Checkout results return to us for order and license updates. Only test products exist now; live checkout and MoR approval are pending. The live checkout and receipt will identify the actual seller and terms.

06Providers and transfers

The planned production setup uses Cloudflare for the site, API and database, Resend for one-time email and Waffo Pancake for hosted checkout. Each would receive data needed for its role. Some pages may request Unsplash images directly from your browser. Providers may process data outside your region; we will check deployment regions and transfer arrangements before launch. We do not sell personal information or share account data with unrelated parties except as needed for service, law or safety.

Cloudflare · Resend · Waffo

07Retention and security

Links and connection requests expire after 15 minutes; website and device sessions can last up to 90 days and end on logout or revocation. Account, allowance, order, payment-event and audit records may be retained for recovery, disputes, abuse prevention and legal duties. Exact production retention and backup deletion periods are not finalized and will be published before payments start. The design uses hashed one-time credentials, limited sessions, signed payment callbacks and hosted checkout. No transmission or storage is perfectly secure; material incidents will be notified as required.

08Your choices and requests

Local features that do not need an account can be used without connecting email; allowances and Pro access need account data. You can clear extension data or sign out. Through the email listed on this page, you may request access, correction, export or deletion of data tied to your email. We verify identity and follow applicable law; some order, dispute or security records may need to remain. Deleting account data may prevent license recovery or allowance checks. Waffo handles card, payment and tax data collected directly at checkout; contact its checkout support for those requests, receipts and refunds.

Depending on applicable law and the basis for processing, you may also have rights to withdraw consent, restrict or object to processing, receive portable data and complain to a supervisory authority. Withdrawal does not affect earlier lawful processing. We will verify your identity and explain any records we must retain by law.

FAQs

09Children

The product is not specifically intended for minors. They should use it with guardian consent and guidance. Report data we should not hold through the published privacy contact.

10Policy changes

We show the update date here. We will revise this policy before enabling new payment or email services, changing data uses or making other material changes, and notify users on the site or by email where appropriate.

Terms of Service