Privacy Policy

Last updated: 20 August 2026

Replix Captions ("we", "us") is a sole proprietorship of Sai Santosh Kumar, registered in India. This policy explains what personal information we collect, how we use it, who we share it with, and the choices you have. Features, subprocessors, and data practices may change as the product evolves. By using the service, you agree to this policy.

Information we collect

• Account information: email address and sign-in identifiers when you create or access your account.
• Phone number (if phone verification is enabled): your phone number and one-time verification codes (stored as hashes, never in plain text), used only to verify your account and prevent duplicate or abusive signups. We do not use your phone number for marketing.
• Content you provide: videos and audio you upload, generated transcripts, caption edits, and exported files.
• Usage and technical data: minutes used, export status, approximate timestamps, basic product events (for example which steps of the editor or checkout you reach), and logs needed to run and secure the service — including your browser type and the IP address used at signup and during phone verification. We keep IP addresses only as long as needed for security and abuse prevention.
• Cookies and local storage: session cookies for sign-in, and local storage for editor drafts and a device fingerprint hash used for abuse prevention when you sign up.
• Payment information: we do not store full card details. Payments are handled by Razorpay; we receive confirmation, purchase type (for example monthly subscription, yearly one-time payment, or export pack), amounts, and billing metadata needed for your account and refund eligibility checks.
• Support communications: information you send through our support form or email, including optional screenshot attachments you upload with a support request.

How we use information

We use personal information to:

• Provide transcription, caption editing, video export, and optional AI thumbnail generation.
• Authenticate you, manage your account, and apply usage limits or minutes.
• Process payments and respond to billing or refund requests.
• Operate, maintain, and improve the service, including troubleshooting and abuse prevention.
• Communicate with you about the service, security, or support requests.

A small number of authorized team members can view uploaded videos, transcripts, and exports when needed to debug a problem, respond to a support request you raise, or check caption quality. This access is limited to what is needed to fix or improve the service. We never share your videos with anyone outside the team, never publish them, and never use them in marketing without your explicit permission.

We do not use your uploads to train third-party or our own machine-learning models.

Usage analytics and error monitoring

We use product analytics to understand how creators use Replix Captions, such as which pages and editor steps are reached. We also use error monitoring to detect crashes and fix problems faster. These tools may record page views, clicks, and limited session replay on some visits. We use this data to improve the service, not for advertising.

When you click "Got it" on our cookie notice, you acknowledge this use. You can contact us to ask questions about how we measure usage.

How we share information

We do not sell your personal information. We share information only as needed to run the service, with companies that process data on our behalf under contract-like obligations (service providers / subprocessors), including:

• Hostinger: hosting for the servers that run Replix Captions.
• Supabase: authentication and account database.
• Cloudflare R2: temporary media storage during upload and processing.
• Modal: cloud computing used to render your captioned video.
• Sarvam AI, ElevenLabs, OpenAI: speech and language processing for transcription and caption generation.
• kie.ai: AI image generation for the thumbnail feature. When you generate a thumbnail, your saved photo (if you chose one) is made available to kie.ai through a short-lived private link, together with the text prompt.
• Google (Gemini API): AI image generation for the thumbnail feature, used as a backup provider.
• Razorpay: payment processing.
• ZeptoMail and Resend: transactional email delivery for account, security, and service emails.
• Product analytics and error monitoring providers: usage measurement and crash reporting to help us improve reliability.
• Device identification for abuse prevention: a browser-based check used only to reduce duplicate or abusive signups.
• Tally: support form hosting; optional screenshot attachments are stored on Tally's servers (EU) until the ticket is resolved.
• MSG91 / 2Factor.in: SMS delivery of one-time verification codes, if phone verification is enabled. They receive your phone number only to deliver the code.
• Cloudflare Turnstile: bot protection on sign-in and signup forms, when enabled. Turnstile checks that a request comes from a person; we do not receive any profile data from it.

If you connect Instagram

Connecting Instagram is optional. If you connect it, we receive your Instagram username and account ID from Instagram and store them, along with an encrypted access key, so we can show which account you are posting to and publish on your behalf. When you choose to publish, we send that video and the caption you wrote to Instagram.

We never post anything without you asking us to, and we do not read your followers, messages, comments, or insights. You can disconnect at any time from Posts → Connected accounts, which removes our access and deletes the stored key. You can also remove our access from your Instagram settings.

We may add or change service providers as the product evolves. We will update this policy when we materially change how personal information is shared.

We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or sale of assets (with notice where appropriate).

Government and legal requests

Governments and other public authorities sometimes ask companies to hand over user information. When we receive such a request, we apply the following practices:

• We check that it is lawful. We review every request to confirm it is valid, properly issued, and actually binding on us before we act on it.
• We do not comply with requests we believe are invalid. If a request looks unlawful, overbroad, or improperly issued, we will decline it, ask for it to be narrowed or clarified, and take legal advice where needed.
• We give the minimum necessary. If we must respond, we disclose only the specific information the request actually requires, never more.
• We keep a record. We document each request, what we disclosed, and the reasoning behind the decision.
• We tell you where we can. We will notify you about a request for your information unless we are legally prohibited from doing so.

International transfers

Our service providers may process or store data in countries other than where you live (including outside India). Where required, we take reasonable steps designed to protect your information in line with applicable law, including India's Digital Personal Data Protection Act, 2023 (DPDP).

Data retention

• Raw uploads: cloud copy removed as soon as processing starts; local working files cleared within about one hour for free accounts, or within about one day for paid accounts if you leave a project open in the editor.
• Exports: available for download for a limited time (about one hour on the free plan, or a few hours on paid plans) unless you save them sooner.
• Account data: kept while your account is active. If you delete your account or ask us to, we delete or anonymize your personal information within 90 days, except records we must keep longer for legal, billing, or security reasons.
• Purchase and billing records: payment confirmations, export pack grants, subscription status, and minutes usage are kept as long as needed to provide the service, enforce plan limits, handle billing disputes, and meet legal or tax obligations.
• Phone verification records: one-time code records (phone number, hashed code, IP address, and timestamps) are kept for a limited period for security and rate limiting, then deleted.
• Support messages: kept as long as needed to handle your request and maintain a reasonable support history. Screenshot attachments are deleted when the support ticket is resolved.

Security

We use technical and organizational measures appropriate for a SaaS product of our size, including encrypted transport (HTTPS) and access controls. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Your rights and choices

Depending on applicable law (including DPDP in India), you may have the right to:

• Access, correct, or delete personal information we hold about you.
• Withdraw consent where processing is consent-based, subject to legal or contractual limits.
• Lodge a complaint with the relevant data protection authority.

To request access, correction, or deletion, email hello@replixcaptions.com or use our support form. We typically respond within 24 to 48 hours. Step-by-step instructions, and the full list of what gets removed, are on our data deletion page.

Data breach notification: In the event of a personal data breach that affects your rights or safety, we will notify you and, where required, the Data Protection Board of India within 72 hours of becoming aware of the breach, as required under India's Digital Personal Data Protection Act, 2023.

Saved photos and AI thumbnails

If you use the thumbnail feature, you may optionally save a profile photo (headshot) and generate thumbnail images from it. This section explains how that works.

• What we collect: an optional profile photo you choose to save, and thumbnail images generated when you request them.
• Purpose: solely to generate video thumbnails you request. We do not use your photo for advertising, we do not sell it, and we do not use it to train our own models.
• Processing: when you generate a thumbnail, your photo (if you chose one) and text from your video's transcript are sent to third-party AI image providers (currently kie.ai and Google's Gemini API) so they can create the image. Your photo is shared as a short-lived, time-limited private link rather than a permanent public URL. Neither provider is authorised to use your photo to train their own models, and both process the data to fulfil your request under their own policies.
• Storage: your saved photo and generated thumbnails are stored in our cloud storage. We keep them until you delete the photo or delete your account. Deleting your account also removes your saved photo and generated thumbnails.
• Deletion: you can delete your saved photo in the product at any time. Deletion permanently removes the photo from our storage right away.
• Your rights (DPDP Act 2023): you may request access, correction, or erasure of this data, and you may withdraw consent. Withdrawing consent means we delete your saved photo and the thumbnail feature that needs it becomes unavailable. For grievances, use our contact page or email hello@replixcaptions.com.
• AI provenance marking: generated thumbnails may include an invisible, industry-standard AI provenance mark added by the AI provider. This helps platforms and tools identify AI-generated images; it does not change how the thumbnail looks.

Children

The service is not directed at anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We will post the revised version on this page and update the "Last updated" date. Continued use after changes means you accept the updated policy where permitted by law.

Contact

Data fiduciary / operator: Replix Captions (proprietor: Sai Santosh Kumar)
Email: hello@replixcaptions.com
Support: contact form