This Privacy Policy explains how ZapSubs (operator of www.zapsubs.com) processes personal data when you use our AI subtitle service. It is written to meet transparency requirements under the EU General Data Protection Regulation (GDPR) and related ePrivacy rules for cookies.
1. Controller and contact
Controller: ZapSubs, operator of www.zapsubs.com.
Privacy / data-subject requests:hello@zapsubs.com. We use this address for access, deletion, correction, objection, and other GDPR requests (as well as general product questions).
Account data (optional): email and authentication identifiers when you create an account via Clerk for Pro, saved projects, or signed-in features.
Payment data (Pro): billing details processed by Stripe. We store Stripe customer/subscription identifiers and status in our database; we do not store full card numbers on our servers.
Uploaded media: video or audio you submit for transcription and export. Processing is automated.
Caption and style data: subtitle cues and style settings may live in your browser (local storage). If you are signed in, saved style presets can also be stored in our database linked to your account.
Usage limits: counts of free SRT/VTT downloads per period (linked to your account or guest identity as implemented) to enforce the free allowance.
Feedback: optional thumbs-up/down, multiple-choice answers (for example why you did not upgrade), and free-text comments. If you are signed in, these may be linked to your user id and Pro status. Historical feedback may also include technical fields such as page URL or user agent from older collection paths.
Analytics (only if you accept analytics cookies): product usage events via Google Analytics 4 and Vercel Analytics / Speed Insights — for example pages visited, feature funnel steps, export outcomes, and (when signed in) a Clerk user id used as a GA user identifier. This is not anonymous when you are signed in.
Technical / security data: IP address, user agent, and similar infrastructure logs processed by our hosting (Vercel) and for rate limiting / abuse prevention.
Preferences: language preference cookie (essential/functional).
We do not sell your personal information. We do not currently run Google AdSense or other advertising cookies on the site.
3. Purposes and legal bases (GDPR)
Provide the service (generate captions, export, accounts, Pro features): performance of a contract / steps prior to contract (Art. 6(1)(b)).
Payments and billing: contract (Art. 6(1)(b)) and legal obligations where applicable (Art. 6(1)(c)).
Security, fraud prevention, rate limiting: legitimate interests (Art. 6(1)(f)) in keeping the service reliable and safe.
Product feedback you submit: legitimate interests (Art. 6(1)(f)) in improving ZapSubs; you can skip feedback or ask us to delete comments.
Optional analytics cookies / similar tech: consent (Art. 6(1)(a) and ePrivacy). You can accept or reject analytics in our cookie banner, and change your mind via Cookie settings in the footer.
Essential cookies (language, authentication/session): necessary for the service you request (ePrivacy exception / Art. 6(1)(b) or (f) as applicable).
Consent-choice totals: legitimate interests (Art. 6(1)(f)) in seeing what share of visitors accept or reject analytics. When you press Accept or Reject the first time, we add one to a daily total. We do not store an identifier with that total, we do not set a cookie for it, and we do not send it to Google or Vercel. You can object by emailing us.
4. File processing and retention
When you upload a file, it is sent to our processing infrastructure (including temporary server storage and, for some export paths, Vercel Blob) solely to generate captions or produce an export.
Upload / job temp files: removed after processing completes or fails, as part of the job lifecycle. We do not keep your original media as a lasting library.
Export blobs: temporary export objects are cleaned up on a schedule (typically within about 6 hours). Do not treat a blob URL as permanent storage.
Browser storage: cues and editor state may remain on your device until you clear site data.
Account, subscription, saved styles, download counters, feedback: kept while needed to provide the service, enforce limits, handle billing, or until you request deletion — unless a longer retention is required by law (for example invoices).
Analytics: retained according to Google Analytics / Vercel settings while consent is active; you can withdraw consent anytime.
5. Cookies and similar technologies
We use:
Essential: locale preference; Clerk session cookies when you sign in; Stripe cookies on checkout pages when you pay.
Optional analytics (consent required): Google Analytics 4 and Vercel Analytics / Speed Insights.
Analytics scripts load only after you choose Accept analytics. Defaults are set to deny analytics storage (Google Consent Mode). The first time you press Accept or Reject, we add one to an anonymous daily total of that choice, stored in our database with no identifier. You can reopen the banner anytime: .
Supabase — database for subscriptions, feedback, saved styles, download counters, and related product data (privacy).
Vercel — hosting, edge/network logs, Blob storage for temporary exports; optional Vercel Analytics if you consent (privacy).
Google — Google Analytics 4 if you consent; we may also use Google Search Console as site operators (Search Console is not a visitor-facing tracker on our pages) (privacy).
7. International transfers
Some providers are located in, or process data in, the United States or other countries outside the EEA/UK. Where GDPR applies, transfers rely on appropriate safeguards such as the EU–US Data Privacy Framework (where a provider is certified) and/or Standard Contractual Clauses, as described in each provider's documentation. Contact us if you need more detail about a specific transfer.
8. Your rights
Under the GDPR (where applicable), you may have the right to:
Access your personal data
Rectify inaccurate data
Erase data (“right to be forgotten”)
Restrict or object to certain processing
Data portability
Withdraw consent (for analytics) without affecting prior lawful processing
Email hello@zapsubs.com to exercise these rights. We may need to verify your identity. For account deletion, signing out of Clerk alone may not remove all server-side records — please email us so we can process the request.
9. Children
ZapSubs is not directed at children under 16. If you believe a child has provided us personal data, contact us and we will take appropriate steps.
10. Changes
We may update this Policy from time to time. The “Last updated” date at the top will change when we do. Material changes may also be highlighted in the product or by email if you have an account.