Privacy Policy

1) Information We Collect

• Account Information: Name, email address, email verification status, optional profile image, and optional preferences such as your preferred target language. Stripe customer ID (if you purchase or maintain a paid plan) to manage billing.
• Authentication and Sessions: Session tokens and expiration times to keep you signed in; IP address and user agent for security, fraud prevention, abuse detection, localization, and compliance; third‑party auth details (e.g., provider ID, account ID), and where necessary, tokens issued by the provider.
• Content You Provide: Media and data you upload or import (e.g., audio/video files, URLs) and background task inputs and outputs for voice cloning, voice synthesis, and video dubbing.
• Task and Processing Metadata: Task type (voice‑cloning, voice‑synthesis, video‑dubbing), state (queued, active, completed, failed, cancelled), progress, timestamps (created/processed/finished), credit usage, and media metadata such as title, thumbnail URL, duration, source info, and source type.
• Cookies and Similar Technologies: Session cookies to authenticate requests; a locale cookie to remember your language/region preference; other necessary cookies to enable core functionality.
• Usage Data: Log information about how you interact with the Service, including request timing, error logs, and general performance metrics.

We do not intentionally collect sensitive personal information unless you provide it or it is necessary for the Service. Please do not upload unlawful or sensitive data unless strictly necessary and permitted.

2) How We Use Information

• Provide, operate, and maintain the Service (e.g., processing queues, generating outputs).
• Authenticate and secure accounts and sessions; prevent abuse, fraud, and security incidents.
• Process payments and manage subscriptions via Stripe (using your Stripe customer ID).
• Improve and troubleshoot the Service, including quality, performance, and reliability.
• Personalize experiences (e.g., remembering preferred target language).
• Communicate with you about updates, support, and policy changes.
• Comply with legal obligations and enforce our Terms, including copyright policies.

Where required by law, we rely on one or more of the following legal bases: performance of a contract, legitimate interests (e.g., to secure and improve the Service), compliance with legal obligations, and consent (where obtained).

3) How We Share Information

We share information with:

• Service Providers and Subprocessors: Hosting, storage, content delivery, background task processing, databases, logging/monitoring, email, and payment processing (e.g., Stripe). Analytics and advertising measurement are provided by Google LLC through Google Analytics 4 and Google Ads conversion tracking; these are only activated after you accept on the cookie banner. These providers process data on our behalf under appropriate contracts.
• Legal, Safety, and Compliance: Where disclosure is reasonably necessary to comply with law, legal process, or governmental request; to protect the rights, property, or safety of Subformer, our users, or the public; or to enforce our Terms and policies.
• Business Transfers: In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred.

We do not sell your personal information.

4) Third‑Party Platforms (Instagram, TikTok, YouTube)

• When you import media or URLs from third‑party platforms, we process only what you provide and any metadata needed to fulfill your request (e.g., title, thumbnail, duration, source info/type).
• You must comply with the terms and policies of those platforms. We are not affiliated with or endorsed by them.
• Do not circumvent DRM or platform restrictions. You are responsible for having rights to any content you process.

5) Cookies

• Essential: Authentication/session, security, and locale preference.
• Preferences: Remembering language settings and UI preferences.
• Analytics and Advertising Measurement: We use Google Analytics 4 to measure aggregate site usage and Google Ads conversion tracking to evaluate the effectiveness of our advertising. These tools run under Google Consent Mode v2 with region-scoped defaults: visitors in the European Economic Area, the United Kingdom, and Switzerland are denied by default and no analytics or advertising cookies are set until you accept on the cookie banner; visitors elsewhere are granted by default and can opt out via the same banner. In every region you can revisit the choice at any time through the "Cookie preferences" link in the footer. When consent is denied, ad click identifiers are redacted from network requests and no analytics cookies are stored on your device - Google only receives anonymous, cookieless pings for aggregate, modeled analytics. Google may process this data in the United States and other countries; see the Google Privacy Policy for details.

Your Choices: When you first visit the Service, a cookie banner asks you to accept or reject analytics cookies. Your selection is stored in your browser. You can revisit the choice at any time through the "Cookie preferences" link in the site footer, or block cookies for the site through your browser's settings. Disabling essential cookies may break the Service.

6) Data Retention

• Account and Session Data: Retained while your account is active and for a reasonable period thereafter for security, audit, and compliance purposes, unless deletion is requested or required sooner.
• Background Tasks and Outputs: Retained as needed to operate the Service (e.g., task history, outputs, metadata, and credit usage records). You may request deletion where feasible; we may retain certain records to comply with legal obligations and enforce our Terms.
• Billing: Billing and transaction records are retained as required by law.
• Deleted Accounts: When your account is deleted, we retain a one-way hash of your email address to detect attempts to re-register and abuse free-tier limits. No plaintext email is kept. Legal basis: legitimate interest in preventing fraud and abuse. You may request removal of this record by contacting us.

7) Your Rights and Choices

Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. You can:

• Access or update certain profile details in your account settings.
• Request deletion of your account or specific data by contacting us.
• Withdraw consent where we rely on consent.

We will verify requests and respond within required timeframes. Some rights may be limited by applicable law. California (CCPA/CPRA) and other regional rights will be honored where applicable. We do not sell personal information.

8) Security

We implement administrative, technical, and physical safeguards designed to protect personal information. Where passwords are used, we store password representations using industry‑standard hashing. No method of transmission or storage is 100% secure; you use the Service at your own risk.

9) International Data Transfers

We may transfer, store, and process information in countries other than your own. Where required, we use appropriate safeguards (e.g., standard contractual clauses) to protect data during transfers.

10) Children's Privacy

The Service is not directed to children under 13 (or the age of digital consent in your region). If we learn we have collected personal information from a child without appropriate consent, we will take steps to delete it.

11) Changes to this Policy

We may update this Policy from time to time. We will post the updated Policy with a new effective date. Material changes will be highlighted.