Privacy Policy

1. Data Controller

The data controller for this service is Antonio Foti, operating the website flowsub.ai.

For any privacy-related questions or requests, contact: privacy@flowsub.ai

2. What data we collect

When you use FlowSub, the following data is collected:

• Account data — your email address and name, provided during registration via Clerk authentication.
• Uploaded media files — the video or audio files you submit for transcription. These are stored on Cloudflare R2 and used solely to generate subtitles.
• Generated subtitle files — SRT, VTT, and TXT files produced by the service, stored until you delete the job.
• Usage data — the number of transcription minutes used per month, to enforce plan limits.
• Payment data — billing is handled exclusively by Stripe. We never store your card details.
• Anonymous analytics — aggregated page view data collected by Vercel Analytics. No personal identifiers or cookies are used.

3. How we use your data

• To provide the AI transcription and subtitle generation service
• To authenticate your account and manage sessions
• To enforce free plan limits and track Pro subscription status
• To process payments via Stripe
• To improve the service using anonymous, aggregated statistics

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Cookies & Advertising

FlowSub displays advertisements on the free plan via Google AdSense. We use non-personalized ads only — Google will not use your browsing history or personal data to target ads to you.

Google AdSense may set functional cookies necessary to serve ads (e.g. to prevent showing the same ad repeatedly). These cookies do not track you across other websites for personalization purposes.

You can manage or block cookies at any time via your browser settings. For more information on how Google uses data, see Google's advertising policies.

5. Analytics

We use Vercel Analytics to collect anonymous, aggregated data about page views and performance. This service does not use cookies, does not collect IP addresses, and does not identify individual users. No personal data is transmitted to Vercel Analytics.

6. Third-party services

FlowSub uses the following third-party services to operate:

• Clerk — user authentication and session management
• Supabase — database for storing job records and usage data
• Cloudflare R2 — secure storage for uploaded media and generated subtitle files
• OpenAI — AI transcription (Whisper) and translation (GPT-4o-mini). Your uploaded files are sent to OpenAI servers for processing.
• Stripe — payment processing for Pro subscriptions
• Google AdSense — non-personalized advertising on the free plan
• Vercel Analytics — anonymous page view statistics

7. File retention

Uploaded video and audio files, and generated subtitle files, are stored until you delete the corresponding job from your dashboard, or until you close your account. We do not retain your files beyond your active use of the service.

To delete all your data, delete your jobs from the dashboard and contact us at privacy@flowsub.ai to request account deletion.

8. International data transfers

Your data may be processed outside Italy and the European Union by the following services:

• OpenAI — United States
• Cloudflare — global CDN infrastructure
• Clerk — United States
• Stripe — United States

These transfers are subject to appropriate safeguards including Standard Contractual Clauses (SCCs) or equivalent mechanisms as required by applicable data protection law.

9. Your rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your personal data
• Restriction — request that we limit how we process your data
• Portability — request your data in a machine-readable format
• Objection — object to processing based on legitimate interests

To exercise any of these rights, contact privacy@flowsub.ai. You may also lodge a complaint with the Italian Data Protection Authority: Garante per la protezione dei dati personali.

10. Children's privacy

FlowSub is not directed at children under the age of 13. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, please contact us at privacy@flowsub.ai and we will delete it promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via a notice on the website. Continued use of FlowSub after changes are posted constitutes your acceptance of the updated policy.

12. Contact

For any privacy-related questions, requests, or complaints:

Antonio Foti
privacy@flowsub.ai