Privacy Policy

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address (used for authentication and communication)
• Account credentials and authentication tokens
• Credit balance and transaction history

2.2 Video Content

When you upload videos for processing, we temporarily store:

• Video files you upload
• Generated transcriptions and captions
• Processed video outputs
• Project metadata (timestamps, settings, preferences)

2.3 Payment Information

Payment processing is handled by Stripe. We do not store your credit card information. We only receive confirmation of successful transactions and store:

• Transaction IDs and amounts
• Credit package purchases
• Payment confirmation emails

2.4 Usage Data

We automatically collect:

• Service usage statistics (videos processed, credits used)
• Technical data (browser type, IP address, device information)
• Error logs and performance metrics

3. How We Use Your Information

We use your data to:

• Provide and maintain our video processing services
• Process your videos and generate captions using AI
• Manage your account and credit balance
• Process payments and send transaction confirmations
• Send important service updates and notifications
• Improve our services and develop new features
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Data Storage and Retention

4.1 Video Files

Uploaded videos and processed outputs are stored in our database. Projects are automatically deleted after 30 days of inactivity. You can manually delete projects and videos at any time from your workspace.

4.2 Account Data

Your account information and transaction history are retained as long as your account is active. If you delete your account, we retain minimal data required for legal and accounting purposes (transaction records) for up to 7 years.

4.3 Temporary Files

Temporary processing files are automatically deleted after 24 hours.

5. Third-Party Services

5.1 AI Processing

We use Replicate API with OpenAI's Whisper model to transcribe your videos. Video audio is sent to these services for processing. Replicate's privacy policy applies to this processing.

5.2 Payment Processing

Stripe processes all payments. Your payment information is handled directly by Stripe and subject to their privacy policy. We never have access to your full credit card details.

5.3 Email Service

We use Resend for sending transactional emails (OTP codes, purchase confirmations). Your email address is shared with this service provider.

5.4 Analytics

We use Umami for privacy-focused website analytics. Umami does not use cookies, does not collect personal data, and does not track users across websites. All data is anonymized and aggregated.

6. Data Security

We implement appropriate security measures including:

• Encryption of data in transit using HTTPS/TLS
• JWT-based authentication for secure access
• OTP (One-Time Password) for passwordless login
• Regular security updates and monitoring
• Secure database storage with access controls

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a structured format
• Opt-out of marketing communications (we currently send none)
• Object to data processing for specific purposes
• Withdraw consent at any time

To exercise these rights, please contact us through the contact information provided below.

8. Cookies and Analytics

We use essential cookies to maintain your login session and preferences. Session data is stored in your browser's local storage.

8.1 Privacy-Focused Analytics

We use Umami, a privacy-focused analytics service, to understand how our service is used. Umami is designed with privacy in mind:

• No cookies are used for tracking
• No personal data is collected
• IP addresses are not stored
• Data is not shared with third parties
• Fully GDPR compliant

We collect anonymous usage data such as page views, referral sources, browser type, and general geographic location (country level only). This helps us improve our service without compromising your privacy.

9. Children's Privacy

Our service is not intended for users under 13 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

10. International Data Transfers

Your data may be processed in countries outside your country of residence. We ensure appropriate safeguards are in place when transferring data internationally.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or through a notice on our service. Your continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this privacy policy or our data practices, please contact us at:

Email: info@snippetforge.com

13. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), our legal basis for processing includes:

• Contractual necessity: Processing required to provide our services
• Consent: Where you have given explicit consent
• Legitimate interests: Improving our service, fraud prevention
• Legal obligations: Compliance with applicable laws