This privacy policy explains what personal data SubtitleBee ("SubtitleBee", "we", "us") collects when you visit subtitlebee.com or use the SubtitleBee web application, why we collect it, who we share it with, how long we keep it and which rights you have over it. It applies to the website, the web app and any SubtitleBee integration you authorise, such as signing in with Google or Facebook. SubtitleBee is operated in compliance with the EU General Data Protection Regulation (GDPR).
If you have any question about this policy or about your data, please contact us or email [email protected].
When you sign up with an email address we collect your email address and a password. The password is stored only as a salted, one-way hash and can never be read back. You may optionally add a display name and other profile details in your account settings.
SubtitleBee offers "Sign in with Google" through Google Identity Services. When you choose this option, Google sends us a signed identity token. From that token we read and store only your Google account email address, which becomes the identifier of your SubtitleBee account and is used to log you in. We do not read or store your Google name, profile picture or any other profile field.
We do not request access to your Gmail, Google Drive, YouTube, Contacts, Calendar or any other Google service. We never receive your Google password. We do not use Google user data for advertising, we do not sell it, and we do not share it with any third party except the service providers listed in section 3 that we need to run the login itself. Google data is used solely to create, authenticate and display your SubtitleBee account and for no other purpose. You can revoke SubtitleBee's access at any time from your Google account permissions page; revoking access does not delete your SubtitleBee account, see section 6 for deletion.
SubtitleBee's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
If you sign in with Facebook we receive your email address from Facebook and use it in the same way as described for Google above. We never receive your Facebook password and do not post on your behalf.
To provide the service we store the audio and video files you upload or import by URL, the subtitles, captions and translations generated from them, and any edits, styles or export settings you apply. This content may contain personal data (for example, voices or faces of people in the video); you are responsible for having the right to process it.
Subscriptions and one-time purchases are processed by our payment providers, Paddle and Stripe. They collect your name, billing address, country, VAT number and payment method directly. We never see or store your full card number; we only receive a transaction reference, the plan purchased, the amount, the currency and the billing country so that we can activate your plan and issue invoices.
When you use the website or app we automatically collect technical and usage data: your IP address and approximate country derived from it, browser and device type, operating system, language, referring page, the pages and features you use, timestamps, and error diagnostics. Server access logs containing IP addresses are kept for security and troubleshooting. If an error occurs while you use the app, an error report containing the technical context of the error and, if you are logged in, your account email address is sent to our error-monitoring provider so that we can fix it.
If you contact us we keep the correspondence, including your email address and any information you include. If you subscribe to our newsletter we keep your email address and your opens and clicks so that we can measure and improve our emails.
Beyond the automatically collected technical data and cookies described in sections 1.6 and 5, we do not collect personal information from visitors who only browse the website.
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Create your account, log you in (including via Google or Facebook) and keep your session active | Email, hashed password, email received from Google or Facebook, cookies | Performance of a contract (art. 6(1)(b)) |
| Transcribe, subtitle and translate your media and let you edit, style and export the result | Uploaded media, generated subtitles and translations, editor settings | Performance of a contract (art. 6(1)(b)) |
| Take payments, activate plans, issue invoices, prevent fraud and comply with tax law | Transaction references, plan, amount, billing country | Contract (art. 6(1)(b)) and legal obligation (art. 6(1)(c)) |
| Send transactional emails: account confirmation, password reset, processing finished, billing notices | Email address, account activity | Performance of a contract (art. 6(1)(b)) |
| Send product news, tips and promotional offers | Email address, plan, product usage | Consent (art. 6(1)(a)) or legitimate interest for existing customers; you can unsubscribe at any time from your profile settings or from the link in every email |
| Respond to support requests | Your messages and account details | Legitimate interest (art. 6(1)(f)) |
| Detect abuse, spam sign-ups and security incidents, and keep the service reliable | IP address, email address, technical logs | Legitimate interest (art. 6(1)(f)) |
| Measure and improve the website and app (aggregated analytics) | Cookies, pseudonymous identifiers, pages visited, device data | Consent (art. 6(1)(a)) via the cookie banner for Google tags; legitimate interest (art. 6(1)(f)) for the Facebook pixel, with the opt-out described in section 5 |
| Show localised prices and content | Approximate location (country, postal code) derived from IP address | Legitimate interest (art. 6(1)(f)) |
We do not use your data for automated decision-making that produces legal or similarly significant effects, and we do not use your uploaded media, subtitles or Google user data to train machine-learning models or for advertising.
We do not sell, rent or trade your personal data. We share it only with the service providers below, which process it on our behalf and under our instructions, and only to the extent needed for the purpose indicated:
Each provider is bound by a data processing agreement or equivalent terms, may use the data only to provide its service to us, and applies its own security measures. We may also disclose personal data when required by law, to enforce our Terms and Conditions, to protect the rights, property or safety of SubtitleBee, our users or others, or in connection with a merger, acquisition or sale of assets, in which case you will be notified.
Your uploaded videos and their subtitles are never published, shared or made available to other users or third parties, other than the processors above that we need to produce the subtitles.
Our servers are located in the European Union. Some of the providers listed in section 3 are established in the United States or process data there. Where personal data leaves the European Economic Area we rely on the European Commission's Standard Contractual Clauses, on the EU-US Data Privacy Framework where the provider is certified, or on another safeguard permitted by the GDPR.
Cookies are small files placed on your device by your browser. We use:
You can change your choice for Google tags at any time from the cookie banner or by deleting cookies in your browser. Blocking strictly necessary cookies will prevent you from logging in.
Data no longer needed is deleted or irreversibly anonymised.
Under the GDPR and similar laws you have the right to:
To exercise any of these rights, contact us or email [email protected] from the address linked to your account. We answer within 30 days. We may ask you to verify your identity before acting on a request. Exercising your rights is free of charge.
To delete your account and all associated data, including data obtained from Google or Facebook, you can also delete your projects from your dashboard and then send us a deletion request through the same channels; we will confirm by email once it is completed.
All traffic between your browser and SubtitleBee is encrypted with TLS (HTTPS). Uploaded media and generated files are stored encrypted at rest. Passwords are stored as salted one-way hashes and are never reversible. Access to production systems is limited to a small number of staff who need it to operate the service, is protected by strong authentication and is logged. We scan our systems regularly for vulnerabilities and malware, keep them updated, and keep backups to prevent data loss. No method of transmission or storage is completely secure; if we become aware of a breach affecting your personal data we will notify you and the competent authority as required by law.
The videos you upload remain yours. It is your responsibility to ensure you own the rights to use, edit and caption them. We do not claim any ownership of your content, we do not publish, sell or exchange it, and we only host and process it to provide the service to you. The automatically generated subtitles and captions are provided to you for use with the videos from which they were created. You can delete any video and its subtitles from your dashboard at any time.
SubtitleBee is not directed at children. You must be at least 16 years old (or the age of digital consent in your country) to create an account. We do not knowingly collect personal data from children under that age, and we comply with the US Children's Online Privacy Protection Act (COPPA). If you believe a child has provided us with personal data, please contact us and we will delete it.
Our website may link to third-party sites and services. They have their own privacy policies and we are not responsible for their content or practices. We encourage you to read their policies before providing them with any personal data.
This policy covers personal data collected through subtitlebee.com and the SubtitleBee web application, including sign-in integrations with Google and Facebook. It does not apply to information collected offline or through channels not operated by SubtitleBee.
Please also read our Terms and Conditions, which contain the terms of use, disclaimers and limitations of liability governing the use of our website and service.
If we change this privacy policy we will publish the new version on this page. For material changes we will also notify registered users by email or with a notice in the app before the change takes effect.
Data controller: SubtitleBee. For any privacy question or request, use our contact form or email [email protected].