Privacy Policy

Scope

This policy explains how VLTMS Ltd collects and uses personal data when you use Subvo.

Data We Collect

• Uploaded videos, preview audio, transcripts, captions, and rendered files
• File metadata such as filename, file size, file type, and duration where applicable
• Job IDs, upload IDs, job tokens, and recovery tokens used to continue product flows
• Payment checkout state used to reconnect the user to an in-progress payment flow
• Caption style, grouping, platform preview, and sound preferences saved in the browser
• Transaction and billing metadata from Stripe, but not your full card number
• Optional PostHog analytics data, including page paths, aggregate product events, normalized campaign attribution, browser and device information, and pseudonymous visitor, session and funnel identifiers, only after consent
• Optional Meta Pixel page-view and advertising measurement data, only after consent

How We Use Data

• Provide caption generation, rendering, and download services
• Process payments, prevent fraud, and keep accounting records
• Support users and resolve technical issues
• Meet legal obligations and enforce platform rules
• With your permission, understand website use and improve Subvo's website, product workflow and services

Legal Bases (GDPR/UK GDPR)

We process personal data under legal bases including performance of contract, legitimate interests and legal obligations. Consent is the basis for the optional PostHog analytics and Meta advertising measurement described below. You may withdraw that consent at any time.

Meta Pixel Advertising Measurement

With your consent, we use Meta Pixel to send PageView events so we can understand how advertising performs. The Pixel does not load before you accept optional tracking, and the payment verification and recovery route does not emit Meta PageView events.

This integration disables automatic configuration and does not send Meta names, email addresses, phone numbers, uploaded filenames, video or caption contents, job or upload identifiers, Stripe identifiers, recovery values, custom funnel events, checkout events or purchase events. Meta may process the page URL and ordinary browser, device and network information, including the IP address used to make the connection.

Withdrawing the optional tracking choice stops future Meta events and expires the first-party Meta cookies named _fbp and _fbc.

Browser-Side Storage

Subvo temporarily stores some product state in your browser so the app can recover uploads, job progress, payment recovery, and preferences. This can include sessionStorage, localStorage, and IndexedDB used for temporary upload recovery.

For local caption previews, Subvo downloads an AI speech-recognition model of approximately 77 MB into your browser. The browser may keep this model in Cache Storage, currently named transformers-cache, so it does not need to be downloaded on every visit. You can remove the cached model through your browser's controls for clearing Subvo site data.

The model files may currently be delivered through Hugging Face and its CDN infrastructure. Your browser connects to that provider, which may process ordinary connection information such as your IP address to deliver the files. This supplies the model for processing in your browser; Subvo does not send your uploaded video or audio to Hugging Face as part of this model delivery.

PostHog Analytics

We use PostHog analytics to understand how visitors use Subvo and to improve our website and services. VLTMS Ltd decides why this analytics is used. PostHog provides the analytics service and acts as a service provider or processor where applicable.

We only enable analytics after you choose to accept it. Rejecting analytics does not prevent you from using essential Subvo functionality. You can withdraw consent through Cookie settings in the footer. Withdrawal stops future collection and removes PostHog storage created by this frontend.

Consented analytics can include page paths without query strings, aggregate events for upload, preview and checkout progress, normalized UTM source, medium, campaign and creative values, browser and device information, and pseudonymous visitor, session and funnel identifiers. An authoritative purchase event may be sent by Subvo's backend through that random funnel identifier. The application does not identify visitors to PostHog, link analytics to an account, or send video contents, captions, email addresses, filenames, recovery links, signed URLs, payment secrets or raw job identifiers as event properties.

The frontend uses PostHog's EU ingestion host. PostHog project settings also affect retention, hosting details and IP-derived information. Contact us if you need current details about those operational settings.

AI Model Training

Subvo does not use uploaded videos or generated caption/output files to train general-purpose AI models unless you explicitly opt in.

Third-Party Processors

We use trusted providers, including:

• Stripe for payments and billing services
• PostHog for optional, consented website and product analytics
• Meta for optional, consented advertising measurement
• Hugging Face and its CDN infrastructure for delivery of browser-side AI speech-recognition model files
• Cloud hosting, storage, and processing infrastructure providers
• Email or support tools if you contact us for help

These providers process data as needed to provide their services. The data involved depends on the service and the choices described in this policy.

Payments

Payments are handled by Stripe. Subvo does not receive or store your full card number.

Data Retention

Subvo applies the following default retention schedule:

• Uploaded source videos: deleted within 7 days of job completion
• The finished MP4 download page is normally available for 14 days after completion
• Generated transcripts, caption files, and rendered outputs: deleted within 30 days of job completion unless a shorter operational window applies
• Browser-side recovery state and temporary draft storage: retained only as needed for the current product flow and cleared by normal expiry or cleanup
• Billing and accounting records: retained as required by applicable tax and accounting law

We may retain specific data longer where required by law, to resolve disputes, or to enforce our legal rights.

International Data Transfers

Subvo serves global users. Data may be processed outside your country, including outside the UK/EEA. International processing is handled under the data-protection requirements that apply to the relevant service. Contact us for current information about a specific provider or transfer.

Your GDPR and UK GDPR Rights

• Right to access personal data
• Right to correction of inaccurate data
• Right to deletion (subject to legal exceptions)
• Right to data portability
• Right to object to certain processing
• Right to complain to a supervisory authority

To exercise rights, email support@subvo.io.