Privacy Policy | LiveTranslations

1. Data Controller

LiveTranslations ("we", "us", "our") is the data controller for the personal data processed through the platform located at livetranslations.video.

Contact: info@savemytime.dev

2. Personal Data We Collect

2.1 Account Data

Email address and display name (collected via Google OAuth or email sign-up)
Authentication tokens (managed by Supabase Auth)
Preferred language/locale

2.2 Service Data

YouTube and TikTok URLs submitted for dubbing
Uploaded video files (stored temporarily for processing)
Dubbed output files
Dubbing job metadata (source/target language, duration, status, timestamps)
Credit balance and transaction history

2.3 Payment Data

All payment processing is handled by Stripe, Inc. We never receive, store, or have access to your full credit/debit card number. We only store a Stripe customer ID and transaction references needed to manage your credit balance.

2.4 Technical Data

IP address (logged by our hosting infrastructure for security purposes)
Browser type, operating system, and device information (derived from HTTP headers)
Cookies strictly necessary for authentication and locale preference (see our Cookie Policy)

3. Purposes and Legal Bases for Processing

Purpose	Legal Basis (GDPR Art. 6)
Provide the video dubbing service	Performance of contract (Art. 6(1)(b))
Process payments and manage credits	Performance of contract (Art. 6(1)(b))
Send transactional emails (job status, receipts)	Performance of contract (Art. 6(1)(b))
Authenticate users and maintain sessions	Consent (Art. 6(1)(a)) via OAuth / email sign-up
Prevent fraud and abuse	Legitimate interest (Art. 6(1)(f))
Comply with legal obligations (tax records, etc.)	Legal obligation (Art. 6(1)(c))

4. Third-Party Processors (Sub-processors)

We share personal data with the following service providers, each acting as a data processor under GDPR:

Provider	Purpose	Data Location
Supabase	Database, authentication, file storage	EU (Frankfurt)
Stripe	Payment processing	EU / US (EU SCCs)
Vercel	Application hosting and delivery	EU edge / US (EU SCCs)
AI Dubbing Provider	Voice synthesis and audio dubbing	US (EU SCCs)
Inngest	Background job orchestration	US (EU SCCs)

Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses (SCCs) as approved by the European Commission.

5. Data Retention

Uploaded source videos: Deleted automatically after dubbing completes (best-effort immediate deletion).
Dubbed output files: Available for 30 days after generation, then permanently deleted from storage.
Account data: Retained for the lifetime of your account. Deleted within 30 days of account deletion request.
Payment records: Retained for 7 years as required by EU tax and accounting regulations.
Server logs: Retained for a maximum of 90 days for security and debugging purposes.

6. Your Rights Under GDPR

As a data subject, you have the following rights:

Right of Access (Art. 15): Request a copy of all personal data we hold about you.
Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data.
Right to Erasure (Art. 17): Request deletion of your account and all associated personal data ("right to be forgotten").
Right to Restriction (Art. 18): Request that we restrict processing of your data in certain circumstances.
Right to Data Portability (Art. 20): Receive your personal data in a structured, commonly used, machine-readable format.
Right to Object (Art. 21): Object to processing based on legitimate interest.
Right to Withdraw Consent (Art. 7(3)): Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email us at info@savemytime.dev. We will respond within 30 days as required by GDPR.

7. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

Encryption in transit (TLS 1.2+) for all data transfers
Encryption at rest for database and file storage
Row-level security policies ensuring users can only access their own data
Authentication via industry-standard OAuth 2.0 and secure session management
Principle of least privilege for all internal system access

8. Children's Privacy

Our service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will take steps to delete that data promptly. If you believe a child has provided us with personal data, please contact us at info@savemytime.dev.

9. Automated Decision-Making

We use AI-powered voice synthesis to produce dubbed audio. This is a core feature of our service and constitutes automated processing of audio content. No automated decisions are made that produce legal effects or similarly significantly affect you as an individual.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the "Last updated" date at the top of this page and, where appropriate, by email notification. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Supervisory Authority

If you believe that our processing of your personal data infringes GDPR, you have the right to lodge a complaint with a supervisory authority in the EU Member State of your habitual residence, your place of work, or the place of the alleged infringement.

12. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at:

LiveTranslations
Email: info@savemytime.dev
Website: livetranslations.video