Data processing addendum
Last updated 6 September 2026
Signing is not required for most accounts. If your legal team needs a countersigned copy, mail timurcagribek@gmail.com and we will return one within two working days. Read the transfers section before you sign: extraction runs outside the EEA, and that is the term most reviews will care about.
Roles
You are the controller of the data you submit. We are the processor and act only on your instructions, which in practice means the jobs you create through the API.
Scope of processing
Video IDs, the schemas you write, the caption text fetched in order to answer them, and the resulting rows. Rows and the submitted URL are deleted on your first successful fetch; job metadata — status, timestamps, character and chunk counts — is kept because usage and billing are calculated from it.
Subprocessors
We give 30 days’ notice before adding one, and you may object in that window.
Where processing happens, and transfers
Storage is in Germany: a server rented from Hetzner holds the database, the job queue and everything in the paragraph above. Extraction is not. The caption text and your schema are sent to a machine of ours in Turkey, which runs the model and returns the rows, holding nothing after the request. Turkey is outside the EEA and has no EU adequacy decision, so this is an international transfer and you should treat it as one. Separately, the video ID (and nothing else) goes to a third-party transcript provider that fetches the caption track.
Security
Encryption in transit between every component. Access to the production server is limited to the operator, over SSH with key authentication. This is deliberately a short paragraph: we do not have a SOC 2 report, a yearly penetration test or a security team, and claiming otherwise on a page a customer relies on would be worse than saying so. Ask before you assume a control is in place.
Breach notification
We notify you without undue delay and in any case within 48 hours of becoming aware, with what we know at that point rather than waiting for a full picture.
Deletion on exit
Close the account and anything still held — unread results, schemas, job metadata — is deleted within 30 days. Billing records are kept as long as tax law requires.