Plain English summary: Your video never leaves your device. CapFlow Studio processes everything locally in your browser using WebAssembly and WebCodecs. We cannot see your content, we do not store it, and we do not sell your data.
CAPFLOW ("we", "us", "our") is a browser-based AI caption studio operated at capflow.studio as an independent product. For any privacy questions, contact us at support@capflow.studio.
Browser localStorage: Caption style and export preferences are saved to your browser's local storage. This data never leaves your device and is used only to restore your settings on your next visit.
Account information: If you create an account, we store your email address and subscription status (Free, Pro, or Team) in our database via Supabase. This is used solely to authenticate you and manage your access to paid features.
Email address: If you contact us by email, we store your address only to respond to you. We do not add you to mailing lists without your explicit consent.
Anonymous analytics: We may use privacy-respecting analytics (such as Netlify Analytics or Plausible) to count page visits. This data is aggregated and anonymous — no personal identifiers, no stored IP addresses.
Google Fonts: Fonts are loaded from Google Fonts CDN. Google may log your IP address as part of serving the font files. This is governed by Google's Privacy Policy.
Netlify hosting: Netlify logs basic access data (IP address, browser type, timestamp) for security and infrastructure purposes under their own privacy policy.
Supabase: User authentication and account data is stored via Supabase, a third-party database service. Supabase processes data in accordance with GDPR and their own privacy policy.
Paid subscriptions are processed by Stripe, Inc. CapFlow Studio never sees or stores your full card number. All payment data is handled directly by Stripe. We receive only a customer ID and subscription status from Stripe for the purpose of unlocking your paid features. Stripe's privacy policy is available at stripe.com/privacy.
CapFlow Studio does not use tracking cookies or advertising cookies. Browser localStorage is used only for your style and export preferences. This is not a cookie and cannot be used to track you across other websites. Supabase may use session cookies to keep you logged in during your visit.
We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not use advertising networks or tracking pixels of any kind. Third-party services we use are limited to: Netlify (hosting), Stripe (payments), Supabase (authentication and account data), Hugging Face CDN (AI model delivery), and Google Fonts (typography). Each of these services processes only the data necessary to perform their specific function.
We retain account data (email address, subscription status) for as long as your account is active. If you delete your account, all associated data is removed from our database within 30 days. We retain email correspondence for as long as necessary to respond to you, and no longer than 24 months. If you wish to have your data removed, contact us at support@capflow.studio and we will complete deletion within 30 days.
CapFlow Studio is not directed at children under 13. We do not knowingly collect any personal information from children under 13. If you believe a child has submitted personal data to us, please contact us immediately at support@capflow.studio and we will delete it promptly.
If you are located in the European Economic Area or United Kingdom, you have the following rights regarding your personal data:
To exercise any of these rights, contact us at support@capflow.studio. We will respond within 30 days. Our legal basis for processing your personal data is: performance of a contract (providing the service you signed up for), and legitimate interests (service security and fraud prevention).
If you are a California resident, you have the following rights under the California Consumer Privacy Act:
To submit a verifiable consumer request, contact us at support@capflow.studio. We will respond within 45 days as required by law. You may designate an authorised agent to make a request on your behalf.
We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or alteration. All data in transit is encrypted using HTTPS/TLS. Account authentication is handled by Supabase, which implements industry-standard security practices including encrypted password storage. However, no internet service can be guaranteed 100% secure, and we cannot guarantee the absolute security of your data. We encourage you to use a strong, unique password for your CapFlow Studio account and to contact us immediately at support@capflow.studio if you suspect any unauthorised access.
CAPFLOW is provided on an "as is" and "as available" basis without warranties of any kind, either express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, or non-infringement. To the fullest extent permitted by applicable law, we disclaim all liability for any indirect, incidental, special, consequential, or punitive damages arising from your use of or inability to use the service, even if we have been advised of the possibility of such damages. Our total aggregate liability to you for any claim arising from this policy or your use of the service shall not exceed the greater of: (a) the total amount you paid to CapFlow Studio in the twelve months preceding the claim, or (b) $10 USD.
We make no representations or warranties about the accuracy, reliability, completeness, or suitability of the service for any particular purpose. The AI transcription feature is powered by third-party open-source technology (OpenAI Whisper via Transformers.js) and transcription accuracy is not guaranteed. You are solely responsible for reviewing, editing, and verifying all generated captions before using or publishing them. CapFlow Studio is not liable for any errors, omissions, or inaccuracies in AI-generated content.
You agree to indemnify, defend, and hold harmless CapFlow Studio and its operators, employees, and affiliates from and against any and all claims, liabilities, damages, losses, costs, and expenses (including reasonable legal fees) arising out of or in connection with: (a) your use of the service; (b) your violation of this privacy policy or our Terms of Service; (c) your violation of any applicable law or regulation; or (d) your infringement of any third-party intellectual property or other rights.
Your data may be processed in countries outside your own, including the United States, where our service providers (Netlify, Stripe, Supabase) operate their infrastructure. Where transfers involve personal data from the EEA or UK, we rely on appropriate safeguards such as Standard Contractual Clauses or the recipient's participation in approved adequacy frameworks recognised by applicable data protection authorities.
CapFlow Studio may contain links to third-party websites or services. We are not responsible for the privacy practices, content, or data handling of those external sites. We encourage you to review the privacy policies of any third-party sites you visit.
You agree not to use CapFlow Studio to process, caption, or distribute content that is unlawful, defamatory, infringing, obscene, or otherwise objectionable. You are solely responsible for the content you process using our service and any captions or exports you create or publish. CapFlow Studio assumes no liability for user-generated content.
We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or new services we offer. When we make changes, we will revise the "Last updated" date at the top of this page. For material changes — such as new types of data collection, new third-party processors, or changes to how we use your data — we will endeavour to notify registered users by email at least 7 days before the changes take effect. Your continued use of CapFlow Studio after any changes to this policy constitutes your acceptance of the revised policy. If you do not agree to the updated policy, you must stop using the service and may request deletion of your account and data.
CapFlow Studio uses artificial intelligence (specifically OpenAI's Whisper model via the open-source Transformers.js library) to generate caption transcriptions. This AI processing happens entirely within your browser — no audio or video is sent to any server. However, AI transcription is not perfect and may produce inaccurate, incomplete, or contextually incorrect captions. You are solely responsible for reviewing, editing, and verifying all AI-generated captions before publishing or distributing them. CapFlow Studio makes no representations about the accuracy of transcriptions and shall not be liable for any consequences arising from the use of AI-generated content, including but not limited to reputational damage, misrepresentation, or legal claims arising from inaccurate captions.
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users without undue delay and, where required by applicable law (including GDPR), notify the relevant supervisory authority within 72 hours of becoming aware of the breach. Notification will be sent to the email address associated with your account and will include: the nature of the breach, the categories of data affected, the likely consequences, and the measures we have taken or propose to take. Because CapFlow Studio does not store your video or audio content, any breach would be limited to account data (email address, subscription status, and Stripe customer ID).
This privacy policy is available at all times at capflow.studio/privacy.html and is linked from every page of our website. If you require this policy in an alternative format or language, please contact us at support@capflow.studio and we will make reasonable efforts to accommodate your request.
If you are located in the European Economic Area or United Kingdom and believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with your local data protection supervisory authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk. In Ireland, this is the Data Protection Commission at dataprotection.ie. We would, however, appreciate the opportunity to address your concerns before you approach a supervisory authority — please contact us first at support@capflow.studio.
This privacy policy is governed by and construed in accordance with applicable law. Nothing in this policy limits or excludes any rights you have under applicable mandatory consumer protection or data protection law in your country of residence. If you are an EEA or UK resident, GDPR and UK GDPR apply to our processing of your personal data. If you are a California resident, CCPA applies. In all cases, we are committed to handling your data lawfully and transparently regardless of where you are located.
If you have any questions, concerns, requests, or complaints regarding this privacy policy or our handling of your personal data, please contact us:
Email: support@capflow.studio
Website: capflow.studio
Response time: We aim to respond to all privacy-related enquiries within 5 business days, and within 30 days for formal data subject requests.
This policy was written to be clear and readable. If anything is unclear, please reach out — we are happy to explain in plain language.