Privacy Notice

Last updated: July 28, 2026

This Privacy Notice explains how Albert Yegon ("we", "us", "our"), trading as CaptionCraft, collects and processes personal data when you use the CaptionCraft application and website (the "Service"). Albert Yegon is the data controller for the personal data described here.

1. Personal data we collect

• Account data: email address, authentication identifiers, and password hash (when you sign up).
• Profile data: display name and avatar you choose to provide.
• Content you upload: video files, audio, transcripts, captions, projects, and templates you create.
• Usage data: transcription counts, export counts, feature usage, and product telemetry.
• Device and log data: IP address, browser type, device identifiers, and timestamps of requests.
• Support communications: messages, feedback, and bug reports you send us.

2. Purposes and legal bases

• Provide the Service (account creation, transcription, captioning, exports) — performance of the contract with you.
• Security and fraud prevention — our legitimate interest in protecting the Service and our users.
• Product improvement (aggregate analytics, debugging) — legitimate interest.
• Customer support — performance of the contract and legitimate interest.
• Legal compliance (tax, accounting, lawful requests) — legal obligation.
• Marketing communications (only if you opt in) — your consent, which you may withdraw at any time.

3. Data sharing

We share personal data with the following categories of recipients:

• Service providers / subprocessors: hosting, database, authentication, transcription (AI providers), email delivery, analytics, and customer support tooling.
• Merchant of Record (Paddle): our order process is conducted by our reseller Paddle.com, which acts as Merchant of Record for all purchases, subscription management, payments, invoicing, and sales tax compliance.
• Professional advisers: legal, accounting, and audit professionals where necessary.
• Authorities: where required by law, court order, or to protect our rights.

4. International transfers

Our subprocessors may process your data outside your country of residence, including in the United States and European Economic Area. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

5. Data retention

We retain account and content data for as long as your account is active. If you delete your account, we delete or anonymise associated personal data within 90 days, except where we are required to retain it for legal, tax, or accounting purposes. Server logs are retained for up to 90 days.

6. Your rights

Subject to applicable law, you may have the right to: access, rectify, erase, restrict or object to the processing of your data; receive a portable copy; withdraw consent; and lodge a complaint with your local supervisory authority. To exercise these rights, contact us at [email protected]. We aim to respond within one month.

7. Security

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and least-privilege administration. No system is completely secure; you are responsible for keeping your credentials confidential.

8. Cookies

We use essential cookies and local storage to keep you signed in and to remember preferences. We may use limited analytics cookies to understand product usage. You can manage cookies through your browser settings; disabling essential cookies will prevent the Service from working.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes to this notice

We may update this Privacy Notice from time to time. Material changes will be communicated through the Service or by email.

11. Contact

Albert Yegon, trading as CaptionCraft — [email protected].