Privacy Policy

Last updated April 22, 2024

Who We Are and What This Policy Covers

Your privacy is critically important to us. At Subtito, we have a few fundamental principles:

• We are thoughtful about the personal information we ask you to provide and the personal information that we collect about you through the operation of our services.
• We store personal information for only as long as we have a reason to keep it.
• We aim for full transparency on how we gather, use, and share your personal information.

This privacy policy applies to information that Subtito collects and shares about you when you use our services, including:

• Visiting our website https://subtito.com
• Use our subtitle translation service

Throughout this Privacy Policy we'll refer to our website and subtitle translation addon collectively as "Services."

Below we explain how we collect, use, and share information about you, along with the choices that you have with respect to that information.

Table of Contents

Information We Collect

We only collect the bare minimum amount of information about you when we have a reason to do so — for example, to provide our Services, to communicate with you, or to make our Services better.

We collect this information from three sources: when you provide information to us, and automatically through operating our Services, and from outside sources. Let's go over the information that we collect.

Information You Provide to Us

• Basic account information: We ask for basic information from you in order to set up your account. We require individuals who sign up for a Subtito account to provide an email address and password — that's it.

Information We Collect Automatically

We also collect some information automatically:

• Log information: Like most online service providers, we collect information that web browsers, mobile devices, and servers typically make available, including the browser type, IP address, unique device identifiers, language preference, referring site, the date and time of access, operating system, and mobile network information. We collect log information when you use our Services — for example, when you log on or update your account preferences.

• Transactional information: When you make a purchase through our Services, we collect information about the transaction, such as product details, purchase price, and the date of the transaction.

• Usage information: We collect information about your usage of our Services. For example, we collect information about model preferences, language preferences, and translations generated. We use this information to, for example, provide our Services to you, get insights on how people use our Services so we can make our Services better, and understand and make predictions about user retention.

• Information from cookies: A cookie is a string of information that a website stores on a visitor's computer, and that the visitor's browser provides to the website each time the visitor returns. Subtito only uses essential cookies that are necessary to the functional operation of the Service, such allowing registered users to authenticate and perform account-related functions. We do not use cookies for tracking or advertising purposes. You can find more information about our use of cookies in our Cookie Policy.

Information We Collect from Other Sources

We may also get information about you from other sources. For example:

• Financial Account Info: We use Stripe as our payment processor. When you make a purchase through our Services, we may collect certain information from you, such as your payment details, email address, and other financial information. This information is necessary to process your payment and comply with applicable law. All payment data is processed and stored by Stripe. You may find their privacy policy here: https://stripe.com/privacy.

How and Why We Use Information

Purposes for Using Information

We use information about you for the purposes listed below:

• To provide our Services. For example, to set up and maintain your account, provide customer service, process payments, and translate subtitles.
• To ensure quality, maintain safety, and improve our Services. For example, by providing automatic upgrades and new versions of our Services. Or, for example, by monitoring and analyzing how users interact with our Services so we can create new features that we think our users will enjoy and that will make our Services easier to use.
• To protect our Services, our users, and the public. For example, by detecting security incidents; detecting and protecting against malicious, deceptive, fraudulent, or illegal activity; fighting spam; complying with our legal obligations; and protecting the rights and property of Subtito and others, which may result in us, for example, declining a transaction or terminating Services.
• To fix problems with our Services. For example, by monitoring, debugging, repairing, and preventing issues.
• To communicate with you. For example, by emailing you regarding updates to this Privacy Policy, administrative tasks such as resetting passwords, and other important updates relating to your account.

Legal Bases for Collecting and Using Information

A note here for those in the European Union about our legal grounds for processing information about you under EU data protection laws, which is that our use of your information is based on the grounds that:

(1) The use is necessary in order to fulfill our commitments to you under the applicable terms of service or other agreements with you or is necessary to administer your account — for example, in order to enable access to our website on your device or charge you for a paid plan; or

(2) The use is necessary for compliance with a legal obligation; or

(3) The use is necessary in order to protect your vital interests or those of another person; or

(4) We have a legitimate interest in using your information — for example, to provide and update our Services; to improve our Services so that we can offer you an even better user experience; to safeguard our Services; to communicate with you; and to understand our user retention and attrition; to monitor and prevent any problems with our Services.

Sharing Information

How We Share Information

We share information about you in limited circumstances, and with appropriate safeguards on your privacy. These are spelled out below:

• Third-party vendors: We may share information about you with Stripe, the payment provider that process your payment information.
• Business transfers: In connection with any merger, sale of company assets, or acquisition of all or a portion of our business by another company, user information would likely be one of the assets that is transferred or acquired by a third party. If any of these events were to happen, this Privacy Policy would continue to apply to your information and the party receiving your information may continue to use your information, but only consistent with this Privacy Policy.

International Data Transfers

Our servers are located in the United States. If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed by us in our facilities and by our payment provider, Stripe. Our Data Processing Agreements with Stripe that include Standard Contractual Clauses are available here: https://stripe.com/legal/dpa.

How Long We Keep Information

We generally discard information about you when it's no longer needed for the purposes for which we collect and use it — described in the section above on How and Why We Use Information — and we're not legally required to keep it.

For example, we keep web server logs that record information about a visitor to Subtito, like the visitor's IP address, browser type, and operating system, for approximately 30 days. We retain the logs for this period of time in order to, among other things, analyze traffic and investigate issues if something goes wrong on one of our websites.

If you choose delete your account, we will purge your account data from our systems, including all translations and subtitles generated, following a pending period of 45 days.

You may also request that our payment processor Stripe delete your payment history and information at any time by using their form.

Security

While no online service is 100% secure, we work very hard to protect information about you against unauthorized access, use, alteration, or destruction, and take reasonable measures to do so. We monitor our Services for potential vulnerabilities and attacks.

Your Rights

If you are located in certain parts of the world, including some US states and countries that fall under the scope of the European General Data Protection Regulation (aka the "GDPR"), you may have certain rights regarding your personal information, like the right to request access to or deletion of your data.

European General Data Protection Regulation (GDPR)

If you are located in a country that falls under the scope of the GDPR, data protection laws give you certain rights with respect to your personal data, subject to any exemptions provided by the law, including the rights to:

• Request access to your personal data;
• Request correction or deletion of your personal data;
• Object to our use and processing of your personal data;
• Request that we limit our use and processing of your personal data; and
• Request portability of your personal data.

You also have the right to make a complaint to a government supervisory authority.

US Privacy Laws

Laws in some US states, including California, Colorado, Connecticut, Utah, and Virginia, require us to provide residents with additional information about the categories of personal information we collect and share, where we get that personal information, and how and why we use it. You'll find that information in this section (if you are a California resident, please note that this is the Notice at Collection we are required to provide you under California law).

In the last 12 months, we collected the following categories of personal information, depending on the Services used:

• Identifiers (like your name, contact information, and device and online identifiers);
• Commercial information (your billing information and purchase history, for example);
• Internet or other electronic network activity information (such as your usage of our Services);
• Inferences we make (such as likelihood of retention or attrition).

You can find more information about what we collect and sources of that information in the Information We Collect section above.

We collect personal information for the business and commercial purposes described in the How and Why We Use Information section. And we share this information with the categories of third parties described in the Sharing Information section. We retain this information for the length of time described in our How Long We Keep Information section.

In some US states you have additional rights subject to any exemptions provided by your state's respective law, including the right to:

• Request a copy of the specific pieces of information we collect about you and, if you're in California, to know the categories of personal information we collect, the categories of business or commercial purpose for collecting and using it, the categories of sources from which the information came, and the categories of third parties we share it with;
• Request deletion of personal information we collect or maintain;
• Request correction of personal information we collect or maintain;
• Opt out of the sale or sharing of personal information;
• Receive a copy of your information in a readily portable format; and
• Not receive discriminatory treatment for exercising your rights.

Right to Opt Out

Your right to opt out of our sale of personal information is in effect by default. We do not sell your personal information. In fact it is difficult for us to sell your personal information because we don't collect much of it in the first place beyond the bare minimum that is required to operate and protect our Services.

All browser signals for "do not track" and similar mechanisms are honored by us. We do not track you across third party websites to provide targeted advertising and therefore do not respond to Do Not Track (DNT) signals.

We do not collect or process your sensitive (and potentially sensitive) personal information except where it is strictly necessary to provide you with our service, where the processing is not for the purpose of inferring characteristics about you, or for other purposes that do not require an option to limit under California law. We don't knowingly process information of those under 18.

Contacting Us About These Rights

You can usually access, correct, or delete your personal data using your account settings and tools that we offer, but if you aren't able to or you'd like to contact us about one of the other rights, you can reach us by email at privacy@subtito.com.

When you contact us about one of your rights under this section, we'll need to verify that you are the right person before we disclose or delete anything. For example, if you are a user, we will need you to contact us from the email address associated with your account. You can also designate an authorized agent to make a request on your behalf by giving us written authorization. We may still require you to verify your identity with us.

Appeals Process for Rights Requests Denials

In some circumstances we may deny your request to exercise one of these rights. For example, if we cannot verify that you are the account owner we may deny your request to access the personal information associated with your account. As another example, if we are legally required to maintain a copy of your personal information we may deny your request to delete your personal information.

In the event that we deny your request, we will communicate this fact to you in writing. You may appeal our decision by responding in writing to our denial email and stating that you would like to appeal. All appeals will be reviewed by an internal expert. In the event that your appeal is also denied this information will be communicated to you in writing.

If your appeal is denied, in some US states (Colorado, Connecticut, and Virginia) you may refer the denied appeal to the state attorney general if you believe the denial is in conflict with your legal rights. The process for how to do this will be communicated to you in writing at the same time we send you our decision about your appeal.

Privacy Policy Changes

Although most changes are likely to be minor, Subtito may change its Privacy Policy from time to time. Subtito encourages visitors to frequently check this page for any changes to its Privacy Policy. If we make changes, we will update the last updated date at the top of this notice, and in some cases, we may send you a notification through email or your dashboard. Your further use of the Services after a change to our Privacy Policy will be subject to the updated policy.

This privacy policy is based on Automattic's open source legal documents shared under the Creative Commons Attribution-ShareAlike 4.0 International license.