Plain English summary: Your video never leaves your device. CAPFLOW processes everything locally in your browser using WebAssembly and WebCodecs. We cannot see your content, we do not store it, and we do not sell your data.
CAPFLOW ("we", "us", "our") is a browser-based AI caption studio operated at capflow.studio as an independent product. For any privacy questions, contact us at support@capflow.studio.
Browser localStorage: Caption style and export preferences are saved to your browser's local storage. This data never leaves your device and is used only to restore your settings on your next visit.
Account information: If you create an account, we store your email address and subscription status (Free, Pro, or Team) in our database via Supabase. This is used solely to authenticate you and manage your access to paid features.
Email address: If you contact us by email, we store your address only to respond to you. We do not add you to mailing lists without your explicit consent.
Anonymous analytics: We may use privacy-respecting analytics (such as Netlify Analytics or Plausible) to count page visits. This data is aggregated and anonymous — no personal identifiers, no stored IP addresses.
Google Fonts: Fonts are loaded from Google Fonts CDN. Google may log your IP address as part of serving the font files. This is governed by Google's Privacy Policy.
Netlify hosting: Netlify logs basic access data (IP address, browser type, timestamp) for security and infrastructure purposes under their own privacy policy.
Supabase: User authentication and account data is stored via Supabase, a third-party database service. Supabase processes data in accordance with GDPR and their own privacy policy.
Paid subscriptions are processed by Stripe, Inc. CAPFLOW never sees or stores your full card number. All payment data is handled directly by Stripe. We receive only a customer ID and subscription status from Stripe for the purpose of unlocking your paid features. Stripe's privacy policy is available at stripe.com/privacy.
CAPFLOW does not use tracking cookies or advertising cookies. Browser localStorage is used only for your style and export preferences. This is not a cookie and cannot be used to track you across other websites. Supabase may use session cookies to keep you logged in during your visit.
We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not use advertising networks or tracking pixels of any kind. Third-party services we use are limited to: Netlify (hosting), Stripe (payments), Supabase (authentication and account data), Hugging Face CDN (AI model delivery), and Google Fonts (typography). Each of these services processes only the data necessary to perform their specific function.
We retain account data (email address, subscription status) for as long as your account is active. If you delete your account, all associated data is removed from our database within 30 days. We retain email correspondence for as long as necessary to respond to you, and no longer than 24 months. If you wish to have your data removed, contact us at support@capflow.studio and we will complete deletion within 30 days.
CAPFLOW is not directed at children under 13. We do not knowingly collect any personal information from children under 13. If you believe a child has submitted personal data to us, please contact us immediately at support@capflow.studio and we will delete it promptly.
If you are located in the European Economic Area or United Kingdom, you have the following rights regarding your personal data:
To exercise any of these rights, contact us at support@capflow.studio. We will respond within 30 days. Our legal basis for processing your personal data is: performance of a contract (providing the service you signed up for), and legitimate interests (service security and fraud prevention).
If you are a California resident, you have the following rights under the California Consumer Privacy Act:
To submit a verifiable consumer request, contact us at support@capflow.studio. We will respond within 45 days as required by law. You may designate an authorised agent to make a request on your behalf.
We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or alteration. All data in transit is encrypted using HTTPS/TLS. Account authentication is handled by Supabase, which implements industry-standard security practices including encrypted password storage. However, no internet service can be guaranteed 100% secure, and we cannot guarantee the absolute security of your data. We encourage you to use a strong, unique password for your CAPFLOW account and to contact us immediately at support@capflow.studio if you suspect any unauthorised access.
CAPFLOW is provided on an "as is" and "as available" basis without warranties of any kind, either express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, or non-infringement. To the fullest extent permitted by applicable law, we disclaim all liability for any indirect, incidental, special, consequential, or punitive damages arising from your use of or inability to use the service, even if we have been advised of the possibility of such damages. Our total aggregate liability to you for any claim arising from this policy or your use of the service shall not exceed the greater of: (a) the total amount you paid to CAPFLOW in the twelve months preceding the claim, or (b) $10 USD.
We make no representations or warranties about the accuracy, reliability, completeness, or suitability of the service for any particular purpose. The AI transcription feature is powered by third-party open-source technology (OpenAI Whisper via Transformers.js) and transcription accuracy is not guaranteed. You are solely responsible for reviewing, editing, and verifying all generated captions before using or publishing them. CAPFLOW is not liable for any errors, omissions, or inaccuracies in AI-generated content.
You agree to indemnify, defend, and hold harmless CAPFLOW and its operators, employees, and affiliates from and against any and all claims, liabilities, damages, losses, costs, and expenses (including reasonable legal fees) arising out of or in connection with: (a) your use of the service; (b) your violation of this privacy policy or our Terms of Service; (c) your violation of any applicable law or regulation; or (d) your infringement of any third-party intellectual property or other rights.
Your data may be processed in countries outside your own, including the United States, where our service providers (Netlify, Stripe, Supabase) operate their infrastructure. Where transfers involve personal data from the EEA or UK, we rely on appropriate safeguards such as Standard Contractual Clauses or the recipient's participation in approved adequacy frameworks recognised by applicable data protection authorities.
CAPFLOW may contain links to third-party websites or services. We are not responsible for the privacy practices, content, or data handling of those external sites. We encourage you to review the privacy policies of any third-party sites you visit.
You agree not to use CAPFLOW to process, caption, or distribute content that is unlawful, defamatory, infringing, obscene, or otherwise objectionable. You are solely responsible for the content you process using our service and any captions or exports you create or publish. CAPFLOW assumes no liability for user-generated content.
We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will endeavour to notify registered users by email at least 7 days before the changes take effect. Continued use of CAPFLOW after any changes constitutes your acceptance of the updated policy. If you do not agree to the updated policy, you must stop using the service.
This privacy policy and any disputes arising from it shall be governed by and construed in accordance with applicable law. If you are an EEA or UK resident, nothing in this policy affects your statutory rights under GDPR or UK GDPR. If you are a California resident, nothing in this policy affects your rights under CCPA.
If you have any questions, concerns, requests, or complaints regarding this privacy policy or your personal data, please contact us:
Email: support@capflow.studio
Website: capflow.studio
This policy was written in plain language to be as clear and readable as possible. If you have any questions about anything written here, please reach out — we are happy to explain.