Privacy Policy
Last updated: 2026-11-12
1. Who we are
OOYET Studio ("we") operates subvo, an AI subtitle tool, at subvo.ooyet.com (the app) and sub.ooyet.com (the marketing site). This policy explains what personal data we handle, why, where it goes, and how long we keep it. Contact: support@ooyet.com.
2. What we collect
- Account: your email address (sign-in is by a one-time email link; there is no password).
- Your content: the videos you upload (including their audio), a caption text file if you upload one, the AI transcript, your edited captions, translations, hook titles and generated title suggestions.
- Your settings: caption presets, the term list you enter, and the font and logo files you upload.
- Works history: for every finished video, a record of its ID, titles, language, duration and date.
- Usage and subscription state: your monthly video count, last-use time, subscription ID and status, the time of your first payment, and whether you have used the one-time refund; plus short-lived counters (daily translation volume, hourly upload-link requests).
- Payment: card details are entered on Stripe's pages and never reach us. We only keep the subscription identifiers and status listed above.
- Technical logs: our hosting providers and the marketing-site server record ordinary request logs (such as IP address, browser and pages requested), which we use for security and traffic statistics.
We do not currently run advertising trackers or third-party analytics scripts, and we do not sell personal data.
3. How we use it
To provide the Service (transcribe, caption, translate, store and deliver your videos); to sign you in; to apply plan limits and prevent abuse; to process payments, cancellations and refunds; to keep the Service secure; and to respond to you.
4. Who processes your data
| Provider | Purpose | What it receives |
|---|---|---|
| Supabase | Database, sign-in (including sending the sign-in email), private file storage | Your email, account and usage records, uploaded videos, outputs, fonts and logos |
| Vercel | Hosts the app and runs processing (including video rendering) | Requests and your content while it is being processed |
| OpenAI | Speech-to-text (Whisper) and text tasks (title suggestions, correction, emphasis, translation) | The audio track of your video (not the picture); the transcript text and your term list |
| Stripe | Payments, invoices, customer portal, refunds | Your payment details and email; we send an account identifier with the subscription |
| Linode (cloud server) | Serves the marketing site | Ordinary web request logs |
| Google Fonts | Web fonts on the marketing site only | Your IP address and browser details when the font files load |
The authentication/database service may also be used by other products we operate. Each provider handles data under its own terms and privacy policy. These providers may be located in other countries, so your data can be transferred internationally.
5. Cookies and local storage
| Name | Where | Purpose | Lifetime |
|---|---|---|---|
| sb-…-auth-token (Supabase) | App | Keeps you signed in | Until you sign out or the session expires |
| subvo_lang | App (cookie) | Remembers your interface language | 1 year |
| subvo_checkout_intent | App (cookie) | Remembers that you chose to subscribe while signing in | 30 minutes |
| subvo_pending_upload | App (session storage) | Prevents being charged twice for one video if a request is retried | Until the tab is closed |
| subvo_lang | Marketing site (local storage) | Remembers your language | Until you clear it |
These are needed to run the Service or remember your choices; we use no advertising or analytics cookies. Stripe's checkout and portal pages set their own cookies.
6. How long we keep it
| Data | Retention |
|---|---|
| Uploaded original video | Replaced by an empty file as soon as the video is burned or rejected. If you upload but never finish, the draft and its video are removed by the daily clean-up once the draft is more than 24 hours old; any leftover in the draft storage is swept after 7 days. |
| Draft transcript and settings for an unfinished video | Deleted when the video is burned; otherwise removed by the daily clean-up after 24 hours. |
| Finished video and its caption files (SRT/VTT/TXT, titles) | About 14 days, then deleted by the daily clean-up. |
| Works history (titles, language, duration, date) | No automatic deletion; kept while your account exists. |
| Presets and term list | Until you change or delete them, or your account is deleted. |
| Custom font and logo files | Until you delete them in Settings (the file is emptied at once and removed by the clean-up), or your account is deleted. |
| Usage and subscription records | No automatic deletion; kept while your account exists. |
| Rate-limit counters | Removed after about two days. |
| Payment records | Kept by Stripe according to its own policy and legal requirements. |
The clean-up runs daily; if a run fails it is retried the next day, so deletion can be delayed. Our providers may keep backups for a limited time under their own practices.
7. Deleting your data and your rights
There is currently no self-service button to delete an account. To have your account and associated data deleted, or to ask for access to, correction or a copy of your data, or to object to its processing, email support@ooyet.com. We will act on requests within a reasonable time, subject to what we must keep by law (for example payment records held by Stripe). You can delete custom fonts and logos yourself in Settings. Depending on where you live you may have further rights under applicable data protection law, and you may complain to your local authority.
8. Security
Files are kept in private storage and handed out only through short-lived signed links (finished videos can be downloaded only by the signed-in account that made them — see the Terms, section 9). Database tables restrict access per user. Traffic uses HTTPS. No system is perfectly secure and we cannot guarantee absolute security.
9. Children
The Service is not directed at children. Do not use it if you are under 13, or under the age required by your local law to consent to this processing. If you believe a child has given us data, contact us and we will delete it.
10. Changes
We may update this policy. The new version is posted on this page with a new "last updated" date; we do not send individual notices.
This English version is the governing version; translations are provided for convenience.