Skip to content
CaptionTik
Start free

Privacy Policy

Last updated: 1 November 2026

This Privacy Policy explains how CaptionTik (“CaptionTik”, “we”, “us”) collects, uses, shares and protects personal data when you use captiontik.cyou and the CaptionTik editor and APIs (the “Service”). We process personal data in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and the rules made under them.

1. What stays on your device

By default the editor runs in your browser. Your video files, in-browser transcription, caption styling and video export are processed on your own device and are not uploaded to us. Local projects are saved in your browser’s storage (IndexedDB) and remain there until you clear them.

2. Personal data we collect

  • Account data: your name, email address and a hashed password, or your Google profile (name, email and profile picture) if you sign in with Google.
  • Payment and billing data: your plan, subscription status, invoices, and order, payment and subscription IDs from Razorpay. Card, UPI and bank details are collected and processed by Razorpay, not by us; we never see or store your full card number, CVV or UPI PIN.
  • Cloud content (only if you use these features): projects you sync to the cloud, media you upload, audio sent for cloud transcription, transcripts sent for AI styling, and videos you submit to the Automation API.
  • Usage data: minutes exported and transcribed, AI runs and API usage (to apply plan limits), and technical logs such as IP address, browser type and timestamps (for security and fraud prevention).
  • Communications: messages you send us through the contact form or by email.

3. Why we use it (purposes and legal basis)

We process personal data on the basis of your consent and for legitimate uses permitted by the DPDP Act, in order to:

  • create and secure your account and provide the Service you asked for;
  • process payments, issue invoices and keep records required by tax and accounting law;
  • apply plan limits, prevent fraud and abuse, and keep the Service secure;
  • send transactional emails such as email verification, password resets, receipts and important service notices;
  • respond to support requests and grievances; and
  • comply with legal obligations and lawful requests from authorities.

We do not sell your personal data and we do not use it for third-party advertising.

4. Who we share it with

We share personal data only with service providers (data processors) that help us run the Service, under contracts that require them to protect it:

  • Razorpay Software Private Limited, for payments and subscriptions;
  • our hosting, database and cloud storage providers;
  • our email delivery provider;
  • only when you use those features, our speech-to-text and AI language-model providers. If you add your own provider API key, requests go to that provider under your own account with it.

Some providers may process data outside India. Where they do, we rely on transfers permitted under the DPDP Act and choose providers with appropriate safeguards. We may also disclose data where required by law.

5. Retention

  • Account data is kept while your account is active and deleted within 30 days after you delete your account, except where we must keep it longer by law.
  • Cloud projects and media are kept until you delete them or your account.
  • Automation API inputs and outputs are deleted automatically after 7 days.
  • Billing and invoice records are kept for the period required by Indian tax law (currently up to 8 years).

6. Your rights

Subject to the DPDP Act, you have the right to:

  • access a summary of the personal data we hold about you and how it is processed;
  • correct, complete, update or erase your personal data;
  • withdraw consent at any time (this does not affect processing already done, and some features may stop working);
  • nominate another person to exercise your rights in case of death or incapacity; and
  • have your grievances redressed, and if you are not satisfied, complain to the Data Protection Board of India.

You can update your profile or delete your account from Settings, or write to support@captiontik.cyou. We reply within 2 business days and complete requests within the time required by law.

7. Cookies and local storage

We use only essential cookies, for signing in, security and remembering your language and theme. The editor uses your browser’s local storage to keep your projects on your device. If analytics is enabled, we use a privacy-friendly, cookieless analytics tool that does not track you across websites.

8. Security

Data is encrypted in transit (HTTPS). Passwords are hashed with bcrypt and API keys are stored only as hashes. Access to production systems is restricted. No system is completely secure; if you suspect unauthorised access to your account, contact us immediately. We will notify affected users and the authorities of a personal data breach as required by law.

9. Children

The Service is not intended for anyone under 18. We do not knowingly process the personal data of children without verifiable parental consent; if you believe a child has given us personal data, contact us and we will delete it.

10. Changes to this policy

We may update this policy. We will post the new version here with a new “Last updated” date and notify you of material changes by email or in the app.

11. Grievance Officer

For privacy questions, requests or complaints, contact our Grievance Officer: Grievance Officer, CaptionTik, CaptionTik, India, email support@captiontik.cyou. We acknowledge complaints within 48 hours and aim to resolve them within 30 days. See also our Terms of Service.

Who we are

CaptionTik (captiontik.cyou) is operated by CaptionTik, India. Email: support@captiontik.cyou.