Privacy Policy

Last updated: May 2026

What we collect

Reel Video Captions is a browser tool for adding auto-generated captions to short-form videos, with an optional Pro subscription for scheduling and library features. We collect the minimum data needed to provide each feature you use.

• Uploaded video files. The video you upload is sent to our server, transcribed with OpenAI Whisper, and used to render captions.
• Optional email. If you enter an email to receive a thank-you note, we pass it to Resend to send that single message.
• Account data. If you sign up, your email and (optional) display name from Google. If you connect YouTube, your channel ID, title, thumbnail, and a refresh token. If you subscribe, your Stripe customer ID, billing country, and card brand/last-four.
• Product analytics. We use Mixpanel to count anonymous page views and tool interactions so we can prioritize improvements. No personal data is attached.

Video retention

Your uploaded video is processed on our server and deleted immediately after you download the captioned file. We do not keep copies, we do not use your content for training, and we do not share it with anyone. If processing fails, the temporary file is cleaned up within the same request lifecycle.

Transcription

Captions are generated by sending the audio track of your video to the OpenAI Whisper API. OpenAI's data handling is governed by their own policy at openai.com/policies. We do not retain the transcript after the captioned video is returned to you.

Cookies

We use localStorage for Mixpanel's anonymous session identifier. No tracking cookies, no third-party ad pixels, no cross-site profiling.

YouTube account connections

When you choose to schedule videos, we ask you to connect a YouTube channel through Google's OAuth consent screen. With your permission we receive a refresh token for that channel along with the channel's basic metadata (channel ID, title, thumbnail, subscriber/video counts).

We use the refresh token solely to publish videos that you have created and queued in Reel Video Captions, and to read your channel's basic metadata so we can show it back to you in our scheduling interface. We never read or post comments, never delete your videos, and never use the token outside actions you explicitly initiated in our app.

Limited Use. Reel Video Captions's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell or transfer it to third parties, and do not allow humans to read it except (a) with your explicit consent, (b) for security or to comply with applicable law, or (c) where the data is aggregated and anonymized for internal operations.

You can revoke our access at any time from Settings → Connected accounts → Disconnect, or from your Google account at https://myaccount.google.com/permissions. When you disconnect, we delete the refresh token and channel metadata within 24 hours. When you delete your Reel Video Captions account, all associated YouTube data is deleted within 30 days.

Account data

If you create an account (required for scheduling), we store: your email address (from Google sign-in), an optional display name, and your subscription status. Authentication is handled by Supabase Auth; your data is held in Supabase's EU/US infrastructure depending on your region.

Your captioned videos saved to your library are stored in Amazon S3 with a per-user prefix and are accessible only to you. You can delete any clip from the library at any time.

Billing

Payments are processed by Stripe. We do not store or have access to your full card number — Stripe holds it. We retain only your Stripe customer ID, billing country, and the last-four/brand of your card as Stripe surfaces them. If you cancel during the 7-day trial you are not charged. After the trial we charge $8.99 USD/month (or local equivalent) until you cancel.

Refunds. Email us within 30 days of a charge for a full refund — no questions asked.

Data security

We protect sensitive data — including OAuth refresh tokens, account credentials, library videos, and billing identifiers — using the following mechanisms:

• Encryption in transit. All traffic between your browser, our servers, and our third-party processors (Supabase, Stripe, Resend, OpenAI, AWS) is encrypted using TLS 1.2+. The site is served exclusively over HTTPS with HSTS enabled.
• Encryption at rest. OAuth refresh tokens and account records are encrypted at rest in Supabase using AES-256 column-level encryption, and database backups are encrypted with the same standard. Library video files in Amazon S3 are stored in a private bucket accessible only via short-lived signed URLs scoped to the requesting user.
• Access controls. Production data is accessible only to a small number of authorized engineers via SSO with mandatory two-factor authentication. Access is logged and reviewed. We do not allow third parties or contractors access to user data.
• Per-user isolation. Library videos in S3 use a per-user object prefix and row-level security in our database ensures users can only read or modify their own records.
• Secrets management. API keys, OAuth client secrets, and database credentials are stored in a managed secrets vault, never committed to source control, and rotated on a regular schedule.
• Minimization and retention. We collect only the data needed to provide each feature, and we delete OAuth tokens within 24 hours of disconnection and account data within 30 days of deletion (see Account deletion below).
• Incident response. We monitor for unauthorized access and will notify affected users and applicable regulators within 72 hours of confirming a personal-data breach, consistent with GDPR Article 33.

Account deletion

To delete your account, email us at the address in Contact (or use Settings → Delete account once it ships). On request we delete: your profile, library videos and S3 keys, all connected channel data and refresh tokens, and your Stripe customer record. Stripe events are retained for tax/audit purposes for the legally required period.

Your rights

Free-tool users: because we do not store uploaded videos or transcripts, there is nothing to request, export, or delete after your session. If you contacted us by email and want that message removed, email us and we will delete it.

Account holders: you can export your library and request deletion at the email below. If you have not signed in, your free-tool sessions are not retained — there is nothing to delete.

Contact

Questions about privacy? Reach us at hello@reelvideocaptions.com.