Privacy Policy
Captiofy ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR) and applicable Spanish law.
1. Who we are
The data controller is Captiofy, For any privacy-related queries, contact us at [email protected].
2. Data we collect
We collect data in the following situations:
- Demo request form: name, work email address, company name, and the plan you are interested in.
- Live streaming sessions: audio data from your RTMP stream is processed in real time to generate captions. Audio is not stored after the session ends; only caption transcripts may be retained for quality review if you have explicitly consented.
- Usage data: session duration, streaming hours consumed, browser type, and approximate IP-based location, used for billing and service improvement.
- Cookies and tracking: see our Cookie Policy for full details.
3. Legal basis for processing
- Contract performance — processing your stream to deliver captions is necessary to provide the service you signed up for.
- Legitimate interests — usage analytics and service improvement.
- Consent — marketing communications and optional retention of transcripts. You can withdraw consent at any time.
- Legal obligation — billing records required by Spanish tax law.
4. How we use your data
- To set up, deliver and support the Captiofy service.
- To send you onboarding, billing and service notifications.
- To improve captioning accuracy and translation quality.
- To send marketing or product updates (only with your consent; unsubscribe at any time).
- To comply with legal and financial obligations.
5. Third-party processors
We share data only with processors who are contractually bound to handle it securely and in accordance with GDPR. Current key processors include:
- DeepL GmbH — translation of caption text. DeepL Privacy Policy.
- OpenAI / Whisper infrastructure — speech-to-text transcription. Audio is not used to train external models.
- Stripe — payment processing. We do not store card details.
- Brevo / email provider — transactional and marketing emails.
We do not sell your personal data to any third party.
6. Data retention
- Demo request data: retained for up to 24 months from last contact, or until you request deletion.
- Audio data: not retained beyond the active session.
- Caption transcripts: retained for up to 90 days for quality review, then deleted, unless you opt in to longer retention.
- Billing records: retained for 7 years as required by Spanish tax regulations.
7. International transfers
Some of our processors operate outside the European Economic Area (EEA). In those cases, we ensure adequate safeguards are in place, such as EU Standard Contractual Clauses (SCCs) or the EU–US Data Privacy Framework where applicable.
8. Your rights
Under GDPR, you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data ("right to be forgotten"), subject to legal retention obligations.
- Restrict how we process your data in certain circumstances.
- Data portability — receive your data in a structured, machine-readable format.
- Object to processing based on legitimate interests.
- Withdraw consent at any time where processing is consent-based.
To exercise any of these rights, email [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) or your local supervisory authority.
9. Security
We implement appropriate technical and organisational measures to protect your data, including TLS encryption in transit, access controls, and regular security reviews. No system is completely secure; if you believe your data has been compromised, contact us immediately.
10. Changes to this policy
We may update this policy from time to time. We will notify active customers by email of material changes. The "last updated" date at the top of this page always reflects the current version.
Questions? [email protected]