Privacy Policy

Last updated: 27 June 2026

1. Data Controller

Kakavelakis Georgios, VAT no. 046470052, Glyfada. For personal-data matters: [email protected].

2. What data we process

Email — account, notifications, receipt
Password — stored encrypted (hash), never in plain text
Subtitle files you upload & the translation results
IP address — rate limiting (rate-limit) & security
Payment data — processed by Stripe. We do not store card details
Cookies — only a technical session cookie (login), no advertising/tracking.

3. Purpose & legal basis

Performance of the service (Article 6.1.β GDPR) — translation, account, delivery
Legitimate interest (6.1.στ) — security, rate-limit, abuse prevention
Legal compliance (6.1.γ) — tax/accounting records of payments.

4. Third parties (data processors)

For the service to operate, data is shared with:

Alibaba Cloud (DashScope) — the subtitle text is sent to the AI model for processing in the EU (Frankfurt, Germany) and in Singapore
Anthropic (USA) — the subtitle text is sent to the AI model for processing
Stripe — payment processing
Resend — sending notification emails
Telegram — internal operational notifications to the administrator (e.g. failure of a paid order). Such notifications may contain your email
Hetzner (EU/Germany) — hosting. Cloudflare — DNS/email routing.

Public film databases (IMDb/Wikipedia/OMDb) are queried ONLY with a film title/ID to improve the translation — neither your personal data nor the subtitle content is sent to them.

Where an international transfer outside the EU takes place (Anthropic/USA, Alibaba Cloud/Singapore, or Telegram), it is based on appropriate safeguards (the Standard Contractual Clauses of the respective providers).

5. Retention period

We retain your files & results for as long as your account exists. Upon a deletion request or account closure, they are deleted — except for whatever we are required to keep for tax reasons (e.g. payment records). Guest data (without an account) is deleted when it is no longer necessary.

6. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection. Exercise them at [email protected]. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (dpa.gr).

7. Security & no selling of data

We take reasonable technical & organizational measures (password hashing, HTTPS, restricted access). We do not sell your personal data.

8. Cookies

We use only a necessary session cookie to keep you logged in. We do not use advertising/tracking cookies, so no consent banner is required.

9. Changes

We may update this policy. The version in force is always published here, dated.