Who we are
AutoCap (theautocap.cc) is operated by AKASH ASHOKBHAI MANGUKIYA, Satellite Road, Mota Varacha, Surat 394101, Gujarat, India (“we”, “us”). We are the controller of the personal data described in this policy, which means we decide how and why it is used.
For anything about your data, email support@theautocap.cc. You can also write to us at the address above.
This policy covers our website, the editor and the emails we send. It doesn’t cover other companies’ sites and services, such as Google’s sign-in page or our payment processor’s checkout.
What we collect
Your account
- Your email address, and your name if you give it to us.
- Your password, which our authentication provider stores in hashed form. We never see it.
- Sign-in records, such as when you signed up and when you last signed in.
- If you choose “Continue with Google”, Google shares your name, email address and profile picture link with us, as your Google account settings allow.
Your projects and usage
- Project details: the project name, the original file name, the clip’s length and language, your transcript with word timings, and your caption style and settings.
- Plan and usage: your plan and its dates, the transcription minutes you’ve used, and a record of each export (its length, resolution and whether it had a watermark).
Audio you transcribe
The audio track of a clip you choose to transcribe. See Your video and audio.
Payments
- What you bought, the amount, currency, status and date, and the order and payment references our payment processor gives us.
- If a checkout fails, where and why it failed, with your email address, so we can fix the problem.
- We don’t receive or store your full card number.
Approximate location
- When you transcribe while signed in, our hosting provider tells us the country, region and city the request came from, based on your IP address. We keep only the latest reading on your account — not a history — and we don’t store the IP address or precise coordinates with it.
- When you visit the site, your country is saved in a cookie in your browser (
ac_country) so we can show prices in your currency and know whether to ask for cookie consent.
Messages you send us
Your name, email address, topic and message when you use the contact form, and anything you send us by email. If you’re signed in when you use the form, the message is linked to your account. The form uses your IP address briefly, in memory, to limit spam; it isn’t saved with your message.
Technical and diagnostic data
- If importing or exporting a video fails, or a page crashes, your browser may send us an error report: the error message, technical details about the video (such as its size, length and resolution — never the file name), and details about your device and browser (such as the browser version, operating system and device memory). This can happen when you’re signed out.
- Our hosting provider keeps standard request logs, which include IP addresses, for security and troubleshooting.
Analytics
Only when analytics is allowed (see Cookies and analytics): the pages you visit, how you arrived, your approximate location, device and browser details, and a random identifier stored in a cookie. Google Analytics collects this for us. We don’t link it to your account.
Email preferences
Whether you’ve unsubscribed from product news, and a random token that makes the unsubscribe link work.
Your video and audio
- Your video file isn’t uploaded to us. It stays in your browser’s storage on the device you used, so you can reopen and export the project there. On another device, you’ll be asked to add the file again.
- To make captions, the editor extracts the audio track in your browser and sends only the audio to our servers. Our servers pass it to a speech-recognition provider: ElevenLabs is our main provider, and if it’s unavailable, English audio may be sent to Sarvam AI instead. They return the words and their timings.
- Audio from shorter clips is sent directly with the request and isn’t saved by us. Audio from longer clips is first uploaded to our file storage so our server can read it, and we delete it as soon as it has been read. If an upload is abandoned before transcription starts, the file can remain in storage until it is removed. We don’t use it for anything else.
- After a transcription, we keep a copy of the result for about an hour, so that a dropped connection can be retried without using your minutes twice. Older copies are then deleted.
- Rendering captions and exporting your video happen entirely in your browser.
- Deleting a project removes its transcript and settings from our database and its video from your browser’s storage.
- We don’t use your videos, audio or transcripts to train AI models, and we don’t publish or sell them.
Why we use it, and our legal bases
Data protection laws such as the GDPR and UK GDPR require a legal basis for each use of personal data. Here is what we use your data for, and the basis we rely on.
| What we do | Data we use | Legal basis |
|---|---|---|
| Create your account, sign you in and keep it secure | Account details, sign-in records, request logs | Contract — we need it to provide the service you signed up for |
| Transcribe your audio, save your projects and apply your plan’s limits | Audio, projects, plan and usage | Contract |
| Take payments, keep billing records, and handle refunds and chargebacks | Payment records, email address | Contract; legal obligation for tax and accounting records |
| Send account and service emails: email confirmation, password resets, sign-in links, and messages about your plan | Email address, name, plan | Contract; legitimate interests for plan reminders |
| Send product news by email | Email address, name, whether you have a paid plan | Legitimate interests in telling customers about our service, or your consent where the law requires it. You can unsubscribe at any time. |
| Answer your messages and give support | Messages, account details | Legitimate interests in replying to you; contract when it’s about your account |
| Find and fix failures, and keep the service reliable and secure | Diagnostic reports, request logs | Legitimate interests in a service that works and is secure |
| Understand where our customers are, to plan languages and infrastructure | Approximate location | Legitimate interests — we keep only a coarse, latest reading |
| Measure site traffic with Google Analytics | Analytics data | Consent in the EEA, UK and Switzerland, and wherever we can’t tell where you are; elsewhere, legitimate interests, and you can opt out at any time |
| Tell our team about new sign-ups and purchases | Email address, plan | Legitimate interests in running the business |
| Prevent abuse, enforce our terms, and establish or defend legal claims | Account, usage and payment records, request logs | Legitimate interests; legal obligation where one applies |
| Meet legal requirements, such as answering lawful requests from authorities | Whatever the requirement covers | Legal obligation |
Where we rely on legitimate interests, we’ve weighed them against your rights, and you can object (see Your rights). Where we rely on consent, you can withdraw it at any time; that doesn’t affect what happened before you did.
If you don’t give us the data an account needs, such as an email address, we can’t provide the service.
International transfers
We’re based in India, so your data is handled from outside the EEA, the UK and Switzerland. The GDPR and UK GDPR still apply to how we handle data about people there. Our providers also process data in other countries, including the United States and, for Sarvam AI, India. These countries may not have data protection laws equivalent to yours.
When personal data from the EEA, UK or Switzerland goes to a provider in another country, we rely on a recognized safeguard: an adequacy decision where one applies (for example, for US companies certified under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions), or the European Commission’s Standard Contractual Clauses — with the UK International Data Transfer Addendum for UK data — as included in the provider’s data processing terms. To ask which safeguard applies to a particular provider, email support@theautocap.cc.
How long we keep it
- Account and projects: for as long as your account is open. You can delete a project at any time. If you ask us to close your account, we delete it, along with your projects, usage and other records linked to it, within 30 days — except records we must keep, described next.
- Payment records: for as long as tax, accounting and fraud-prevention rules require, which can be several years and can outlast your account. Our payment processor also keeps its own records.
- Audio: not stored when sent directly; deleted as soon as it’s read when it was uploaded to storage (see Your video and audio).
- Transcription retry copies: about an hour.
- Approximate location: replaced each time you transcribe, and deleted with your account.
- Messages and diagnostic reports: for as long as we need them to answer you or fix the problem, and to keep a record of what was reported.
- Request logs: for the limited time our hosting provider keeps them.
- Analytics data: for the retention period set in our Google Analytics account.
- Unsubscribe status: for as long as your account exists, so we don’t send you product news again.
- Cookies and browser storage: as listed in our Cookie Policy.
Your rights
If you’re in the EEA, the UK or Switzerland — and in many other places — you have the right to:
- Access the personal data we hold about you and get a copy of it.
- Correct data that’s wrong or incomplete.
- Delete your data.
- Restrict how we use it in certain situations.
- Data portability: receive the data you gave us in a machine-readable format, or have it sent to another company.
- Object to uses based on legitimate interests, and to direct marketing at any time.
- Withdraw consent at any time, where we rely on it.
Some of this you can do yourself: edit or delete projects in the editor, unsubscribe with the link in any product news email, and change analytics in Cookie settings. For anything else, email support@theautocap.cc from the address on your account. We may need to confirm it’s you before we act.
We aim to respond within 7 business days, and always within one month. For complex requests we may extend that by up to two more months, and we’ll tell you if we do. Requests are free, unless one is clearly unfounded or excessive.
US residents: see also US state privacy rights.
Complaints
If you have a concern, please contact us first so we can try to put it right. You also have the right to complain to a data protection authority:
- EU and EEA: the supervisory authority in the country where you live or work, or where you think the problem happened. The European Data Protection Board keeps a list of authorities.
- United Kingdom: the Information Commissioner’s Office (ICO).
- Switzerland: the Federal Data Protection and Information Commissioner (FDPIC).
India
Under India’s Information Technology Act, 2000 and the rules made under it, our Grievance Officer is AKASH ASHOKBHAI MANGUKIYA, Satellite Road, Mota Varacha, Surat 394101, Gujarat, India, support@theautocap.cc. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.
US state privacy rights
This section applies to residents of US states with consumer privacy laws, such as California (the CCPA, as amended by the CPRA), Colorado, Connecticut, Virginia, Texas and Oregon, to the extent those laws apply to us. It adds to the rest of this policy.
What we collect, where it comes from, and who receives it
In the past 12 months we have collected these categories of personal information:
| Category | Examples | Disclosed for business purposes to |
|---|---|---|
| Identifiers | Name, email address, account ID, IP address, analytics cookie ID | Hosting, database, email, analytics and payment providers |
| Customer records and commercial information | Plan, purchases, payment references | Database and payment providers |
| Internet or other electronic network activity | Pages visited, feature usage, error reports | Hosting, database and analytics providers |
| Approximate geolocation (not precise) | Country, region and city | Hosting and database providers |
| Audio information | Audio from clips you choose to transcribe | Speech-recognition providers |
| Sensitive personal information: account login | Email address with password | Authentication provider |
| Messages | What you send us through the contact form or by email | Database provider |
We collect it from you, from your browser or device, from Google if you sign in with Google, from our payment processor, and from our service providers. We use it for the purposes in Why we use it, and keep it as described in How long we keep it.
No selling or sharing
We do not sell or share personal information, and we don’t use it for cross-context behavioral advertising — ads targeted at you based on your activity across other companies’ sites. We don’t knowingly sell or share the personal information of anyone under 16. We use sensitive personal information, such as your login details, only to provide the service and keep it secure, and not to infer things about you.
Your rights
- Know and access: the categories and specific pieces of personal information we’ve collected about you, where it came from, why we collected it, and who we disclosed it to.
- Delete personal information we collected from you.
- Correct inaccurate personal information.
- Limit the use of sensitive personal information. We already use it only for purposes the law permits, but you can still ask.
- Opt out of the sale or sharing of personal information, targeted advertising and profiling. We don’t do any of these, but you can still ask.
- No discrimination: we won’t deny you the service, charge you a different price or give you a lower quality of service for using these rights.
How to make a request
Email support@theautocap.cc with “Privacy request” in the subject, from the email address on your account if you have one. We’ll confirm your identity by checking that you control that address, and may ask for more information if we need it. You can use an authorized agent; we’ll ask for proof that you gave them permission. We’ll respond within 45 days, and if we need up to 45 more, we’ll tell you why.
If we decline your request, you can appeal by replying to our decision. If you’re not satisfied with the outcome of your appeal, you can contact your state attorney general.
Global Privacy Control
We honor the Global Privacy Control (GPC) signal. When your browser sends it, we treat it as a request to opt out and don’t load Google Analytics in that browser, unless you switch analytics on yourself in Cookie settings.
Automated decision-making
We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects. Speech recognition is automated, but it only turns your audio into text for you to review. Plan limits, such as monthly minutes, are applied automatically according to the plan you chose.
Children
AutoCap isn’t directed at children under 16, and we don’t knowingly collect their personal data. If you believe a child under 16 has given us personal data, email support@theautocap.cc and we’ll delete it.
Security
We use encrypted connections (HTTPS), database access rules that limit each account to its own data, and restricted server-side access to sensitive records. No service can promise perfect security. If a breach affects your personal data, we’ll notify you and the relevant authorities when the law requires it.
Changes to this policy
When we change this policy, we update the date at the top. If a change is significant, we’ll tell account holders by email or in the app at least 14 days before it takes effect, unless it has to happen sooner for legal or security reasons. If a change affects cookies or analytics, we’ll ask for your choice again where consent is required.
Contact us
AKASH ASHOKBHAI MANGUKIYA
Satellite Road, Mota Varacha, Surat 394101, Gujarat, India
support@theautocap.cc