Privacy policy

What we collect when you dub a video, who else touches it, how long we keep it, and how you get it back or get it deleted.

Effective
1 February 2026
Last updated
24 February 2026
Sections
12

1.Who is responsible for your data

LiveTranslations ("we", "us", "our") is the data controller for the personal data processed through the platform at livetranslations.video (opens in a new tab).

Write to us about anything on this page at info@heaven-interactive.com.

2.What we collect

Your account

  • Email address and display name, from the sign-up form or from Google sign-in
  • Authentication tokens, managed by our authentication provider
  • Your preferred language

Your dubs

  • The YouTube and TikTok links you submit
  • Video files you upload, stored only while they are being processed
  • The dubbed files we produce
  • Job metadata: source and target language, duration, status and timestamps
  • Your credit balance and transaction history

Your payments

Payments are handled by an external payment processor. We never receive, store or have access to your full card number. We hold a customer reference and the transaction records needed to keep your credit balance correct. Section 4 says what that processor handles and where the data sits.

Technical data

  • IP address, logged by our hosting infrastructure for security
  • Browser, operating system and device information, derived from request headers
  • Cookies strictly necessary for signing in and for remembering your language — see the cookie policy

3.Why we process it, and on what basis

Purpose
Provide the dubbing service
Legal basis (GDPR Art. 6)
Performance of a contract, Art. 6(1)(b)
Purpose
Process payments and manage credits
Legal basis (GDPR Art. 6)
Performance of a contract, Art. 6(1)(b)
Purpose
Send transactional email: job status, receipts
Legal basis (GDPR Art. 6)
Performance of a contract, Art. 6(1)(b)
Purpose
Sign you in and keep your session
Legal basis (GDPR Art. 6)
Consent, Art. 6(1)(a), given at sign-up
Purpose
Prevent fraud and abuse
Legal basis (GDPR Art. 6)
Legitimate interest, Art. 6(1)(f)
Purpose
Meet legal obligations such as tax records
Legal basis (GDPR Art. 6)
Legal obligation, Art. 6(1)(c)

4.Who else processes it

We share personal data with the processors below, each named here by the job it does for us. Every one acts as a data processor under GDPR and may only act on our instructions. Write to info@heaven-interactive.com and we will send you the current list with each company named, together with the contract terms that bind it.

Processor
Managed database and authentication platform
What it handles
Your account, your job records and your video files
Where the data sits
EU (Frankfurt)
Processor
Payment processor
What it handles
Card payments, invoices and refunds
Where the data sits
EU and US, under EU standard contractual clauses
Processor
Application hosting and delivery network
What it handles
Serving this site and its API
Where the data sits
EU edge and US, under EU standard contractual clauses
Processor
AI voice dubbing platform
What it handles
The audio of your video, and the dubbed voice it returns
Where the data sits
US, under EU standard contractual clauses
Processor
Background job platform
What it handles
Running a dub through to completion
Where the data sits
US, under EU standard contractual clauses
Processor
Transactional email provider
What it handles
Your email address, to tell you a dub is ready
Where the data sits
US, under EU standard contractual clauses

Where data leaves the EEA we rely on the standard contractual clauses approved by the European Commission. We do not sell personal data, and we do not share it for advertising.

5.How long we keep it

  • Uploaded source video: deleted as soon as the dub finishes.
  • Dubbed output: available for 30 days, then permanently deleted from storage.
  • Account data: kept while your account exists, and deleted within 30 days of a deletion request.
  • Payment records: kept for 7 years, as EU tax and accounting rules require.
  • Server logs: kept for a maximum of 90 days, for security and debugging.

6.Your rights

Under GDPR you can ask us to do any of the following.

  • Access (Art. 15): give you a copy of the personal data we hold about you.
  • Rectification (Art. 16): correct data that is wrong or incomplete.
  • Erasure (Art. 17): delete your account and the personal data attached to it.
  • Restriction (Art. 18): stop processing your data while a question about it is open.
  • Portability (Art. 20): hand your data over in a structured, machine-readable format.
  • Objection (Art. 21): object to processing we base on legitimate interest.
  • Withdraw consent (Art. 7(3)): withdraw consent at any time, where consent is the basis.

Write to info@heaven-interactive.com and we will answer within 30 days, as GDPR requires.

7.How we protect it

  • Encryption in transit, TLS 1.2 or later, on every transfer
  • Encryption at rest for the database and for file storage
  • Row-level security, so an account can only ever read its own rows
  • Sign-in through standard OAuth 2.0 with server-side session handling
  • Least privilege for every internal system access

8.Children

The service is not for anyone under 16. We do not knowingly collect personal data from children. If we learn that we have, we delete it. If you believe a child has given us personal data, write to info@heaven-interactive.com.

9.Automated processing

Dubbing is automated: a machine listens to your audio and speaks it in another language. That is the product. No automated decision is made about you that produces a legal effect or similarly significantly affects you.

10.Changes to this policy

We update this policy from time to time. A material change moves the last-updated date at the top of this page and, where it matters, arrives by email. Continuing to use the service after a change means you accept the updated policy.

11.Complaining to a supervisory authority

If you believe our processing breaches GDPR, you may complain to the supervisory authority of the EU member state where you live, where you work, or where the alleged breach happened.

12.Contact