Privacy Policy
Effective and last updated: October 15, 2026 · PullSubtitle (www.pullsubtitle.com)
[LEGAL NAME] ("we", "us" or "our") operates PullSubtitle at https://www.pullsubtitle.com (the "Service"). This Privacy Policy explains what personal information we collect when you use the Service, how we use, store and share it, and the rights you have. By using the Service you agree to this Policy. We will notify you of material changes by email or an in-product notice.
1. Data controller
The data controller responsible for your personal information is:
| Name | [LEGAL NAME] |
| Address | [REGISTERED / MAILING ADDRESS] |
| Privacy contact | contact@pullsubtitle.com |
| Data Protection Officer | Not applicable (we do not carry out large-scale processing of sensitive data) |
2. Personal information we collect
2.1 Information you provide or that is provided when you sign in
- Account information from Google or GitHub sign-in: your name, email address, profile picture and the account identifier issued by Google or GitHub. We never receive or store your password. We only accept a verified email address.
- Video links you submit: the URLs you paste into the Service, and the platform each one belongs to.
- Communications: emails and other messages you send to contact@pullsubtitle.com, and our replies.
2.2 Information created when you use the Service
- Transcripts and video details: the transcript we retrieve for each link and the video's public details (title, creator, thumbnail, duration, engagement counts, hashtags and similar), stored in your private history.
- Credit and usage records: your plan, credit balance, and a ledger of every credit granted and spent, including which video each charge relates to.
- Subscription records: the plan you bought, billing interval, subscription status, billing period dates and the order identifier sent to us by our payment processor.
2.3 Payment information
Payments are handled by our online reseller and Merchant of Record, Waffo Pancake. Waffo Pancake collects your card or wallet details, billing address and tax information directly on its checkout page. We receive only the order and subscription status, the product purchased, the amount, the billing email and the billing period dates. We never see or store your full card number.
2.4 Information collected automatically
- Device and network data: IP address, browser type, operating system and approximate location derived from your IP address, processed by our hosting provider, Cloudflare, to deliver and protect the Service.
- Log data: request time, requested page or API route, response status, error messages and performance data, used to operate and debug the Service.
- Cookies: a small number of strictly necessary cookies described in Section 4 and in our Cookie Policy.
We do not collect sensitive personal data (such as health, biometric or financial account data) and we do not knowingly process information about children.
3. How we use your information
| Purpose | Data used | Legal basis |
|---|---|---|
| Create and secure your account, keep you signed in | Account information, cookies | Performance of a contract |
| Retrieve transcripts and video details you request | Video links, transcripts, video details | Performance of a contract |
| Show your history, balance and exports | Transcripts, credit and usage records | Performance of a contract |
| Process subscriptions, credits, renewals and refunds | Subscription and payment records | Performance of a contract; legal obligation |
| Customer support | Communications, account and usage records | Performance of a contract; legitimate interests |
| Service notices (billing, security, policy changes) | Email address | Legitimate interests |
| Security, fraud and abuse prevention (e.g. free-credit abuse) | Account, usage, device and log data | Legitimate interests |
| Operating, debugging and improving the Service | Log and usage data, in aggregated form where possible | Legitimate interests |
| Complying with law, tax and accounting rules | Subscription and payment records | Legal obligation |
We do not use your video links or transcripts to train AI models, we do not sell your personal information, and we do not use it for targeted advertising. We do not currently send marketing emails; if we start, we will ask for your consent first (see Section 9).
4. Cookies
We use only strictly necessary cookies: one session cookie that keeps you signed in, and short-lived security cookies used during Google or GitHub sign-in. Our hosting provider may set security cookies to protect the Service from bots and attacks. We do not use analytics, advertising or tracking cookies. Full details, including names and durations, are in our Cookie Policy.
5. Sharing and disclosure
We do not sell or rent your personal information, including as "sale" or "sharing" is defined under the California Consumer Privacy Act (CCPA). We share personal information only with the service providers below, each bound by confidentiality and data-processing obligations and allowed to use it only to provide their service to us:
| Provider | What they do | Data involved |
|---|---|---|
| Cloudflare, Inc. | Website hosting, database, file storage, security | All data stored by the Service, IP addresses and logs |
| Google LLC | Sign-in with Google | Sign-in request; we receive your name, email, picture and Google ID |
| GitHub, Inc. | Sign-in with GitHub | Sign-in request; we receive your name, email, avatar and GitHub ID |
| Waffo Pancake (Merchant of Record) | Checkout, payment processing, tax, invoices, refunds | Your email, purchase details and payment details you give at checkout |
| ScrapeCreators | Retrieving captions, public video details and comments; speech-to-text transcription | The video links you submit (not your name or email) |
We may also disclose information: where required by law, court order or a valid request from authorities; to protect the rights, safety and property of our users, the public or us; in connection with a merger, acquisition or sale of assets, with notice to you and continued protection of your data; or with your explicit consent.
6. Data security
- All traffic to and from the Service is encrypted with TLS (HTTPS).
- Session tokens are stored only as one-way hashes; sign-in uses OAuth, so we never handle your passwords.
- Data is stored with Cloudflare, and access is limited to the people who operate the Service.
- Each user's transcripts are stored in a separate private folder and are only served to the signed-in owner.
- Payment card data never reaches our servers.
No method of transmission or storage is completely secure. If a security incident affects your personal information, we will notify you and the relevant authorities without undue delay, and within 72 hours of becoming aware of it where required by law.
7. Data retention
| Data | How long we keep it | What happens next |
|---|---|---|
| Account information | While your account is active, plus 90 days after you delete it or it is closed | Deleted |
| Transcripts and video details in your history | Free: 3 days · Starter: 30 days · Pro: 90 days from extraction, or until you delete them | Deleted automatically every day |
| Credit ledger and usage records | While your account is active, plus 90 days | Deleted |
| Subscription, order and payment records | As long as required by tax and accounting law (typically up to 7 years) | Deleted or archived |
| Support emails | 2 years from the last message | Deleted |
| Server and security logs | Up to 30 days | Deleted |
| Session and sign-in cookies | Up to 30 days (session) / 10 minutes (sign-in) | Expire automatically |
8. Your rights
Depending on where you live (including under the GDPR, UK GDPR and CCPA), you have the rights below. To exercise them, email contact@pullsubtitle.com from your account email. We respond within 30 days and may need to verify your identity. Exercising your rights is free.
| Right | What it means |
|---|---|
| Right to be informed | Know what data we collect and how we use it (this Policy) |
| Right of access | Get a copy of the personal information we hold about you |
| Right to rectification | Correct inaccurate or incomplete information |
| Right to erasure | Ask us to delete your account and data; you can also delete any transcript yourself in your dashboard |
| Right to restrict processing | Ask us to pause processing in certain circumstances |
| Right to data portability | Receive your data, including your transcripts, in a machine-readable format (you can export transcripts as JSON at any time) |
| Right to object | Object to processing based on our legitimate interests |
| Right to withdraw consent | Withdraw any consent you gave, at any time |
| Right to non-discrimination | We will not treat you differently for exercising your rights |
You also have the right to lodge a complaint with your local data protection authority.
9. Communications and marketing
We send service emails that are necessary to run your account, such as receipts and renewal reminders (sent by Waffo Pancake), security notices and changes to our policies. These cannot be switched off while you have an account. We do not send marketing emails today. If we do in the future, we will only do so with your consent, and every marketing email will include an unsubscribe link.
10. International data transfers
We and our service providers process data in several countries, including the United States, and Cloudflare serves the Service from data centers around the world. When personal information is transferred outside your country, we rely on safeguards such as the European Commission's Standard Contractual Clauses included in our providers' data-processing agreements, adequacy decisions, or other lawful transfer mechanisms.
11. Children's privacy
The Service is intended for people aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us personal information, contact contact@pullsubtitle.com and we will delete it promptly.
12. Third-party links and services
The Service links to videos and profiles on third-party platforms and uses third-party sign-in and checkout pages. This Policy covers only the data we collect. The privacy practices of Google, GitHub, Waffo Pancake, and the video platforms are governed by their own policies, which we encourage you to read.
13. Changes to this Policy
We may update this Policy from time to time. For material changes, we will give at least 15 days' notice by email or an in-product notice before they take effect, and update the date at the top of this page.
14. Contact us
- Privacy and data requests: contact@pullsubtitle.com
- Support: contact@pullsubtitle.com
- Operator: [LEGAL NAME]
- Mailing address: [REGISTERED / MAILING ADDRESS]
- Hours: Monday–Friday, 09:00–18:00 (UTC+8)