Skip to content
BabelStack

Privacy policy

What BabelStack stores, how uploaded media moves through the service, and how long files stay available.

1. Who we are

BabelStack (“we”, “us”) is operated from California, United States. We are the controller of the personal information described in this policy. Contact us about privacy at support@babelstack.app.

2. Information we collect

  • Account information: your email address, name, a hashed version of your password, and whether your email is verified. If you sign in with Google, we receive your name, email address and profile picture from Google.
  • Your content: videos, subtitle files, glossaries and reference files you upload, the subtitles and videos we generate, and your edits.
  • Billing information: your plan, subscription status, minutes balance and purchase history. Card details are collected and stored by Stripe; we only receive limited details such as card brand, last four digits and expiry date. When you subscribe we also record your consent to the automatic-renewal terms (time, terms version, language and IP address).
  • Technical and usage information: IP address, browser and device information, and logs of requests, jobs, processing times, file sizes and errors, which we need to run, secure and debug the Service. Cloudflare Turnstile processes browser signals to check that sign-ups come from people, not bots.
  • Communications: messages you send us, for example to support.
  • Stored in your browser: your sign-in token, language choice and, briefly, a file you chose before signing in (so it is ready after sign-in). This stays on your device.

We do not knowingly collect sensitive personal information, and you should not include it in your uploads.

3. How we use it

  • To provide the Service: create your account, process and translate your media, show results in the editor and deliver files (legal basis in the EU/UK: performance of our contract with you).
  • To bill you and prevent fraud and abuse, including duplicate free accounts (contract; legitimate interests; legal obligations such as tax and accounting records).
  • To send account and service emails, such as verification, password resets, receipts, renewal reminders and important changes (contract; legal obligation).
  • To keep the Service secure, investigate problems and improve reliability (legitimate interests).
  • To comply with the law and respond to lawful requests, including copyright notices (legal obligation; legitimate interests).

We do not use your content to train our own models, and we do not sell your personal information or share it for cross-context behavioral advertising. We do not show ads.

4. How your media is processed

  • Uploaded files are stored in Cloudflare R2 and processed on servers we operate.
  • On-screen text is read on servers we operate; your video and its frames are not sent to other companies for this.
  • To translate, we send the text of the subtitles (not the video or audio) to OpenRouter, which passes it to the company that runs the translation model (DeepInfra, Atlas Cloud or io.net). They process it on our behalf to return the translation to us.
  • Uploaded files are deleted about 2 days after upload, and generated files about 3 days after they are created. Job records (file name, date, duration and minutes used) stay in your history until you delete your account.

5. Who we share information with

We share personal information only with service providers that help us run the Service, under contracts that limit how they may use it:

  • Stripe — Payments, subscriptions, fraud prevention (United States)
  • Cloudflare (R2, Turnstile) — Storage of uploaded and generated files; bot protection on sign-up (United States / global network)
  • Render — Hosting of our API (United States)
  • Netlify — Hosting of the website (United States / global network)
  • Neon — Account database (United States)
  • Resend — Account emails (verification, password reset, billing notices) (United States)
  • Google — Optional “Continue with Google” sign-in (United States)
  • Discord — Optional “Continue with Discord” sign-in (United States)
  • OpenRouter, and the model hosts it routes to (DeepInfra, Atlas Cloud, io.net) — Machine translation of subtitle text (United States / other countries)

We may also disclose information if required by law or legal process, to protect the rights, safety and property of our users, us or others, or as part of a merger, acquisition or sale of the Service, in which case this policy will continue to apply to your information.

6. International transfers

We are based in the United States, and our providers process information in the United States and other countries. These countries may not offer the same level of data protection as your own. Where the law requires it, such as for transfers from the European Economic Area, the United Kingdom or Brazil, we rely on appropriate safeguards such as standard contractual clauses.

7. How long we keep it

  • Media and generated files: as described in section 4.
  • Account information and job history: while your account is open. When you delete your account, we delete this information within 30 days, except for records we must keep.
  • Billing records and consent records: as long as required for tax, accounting and legal purposes (generally up to 7 years); Stripe keeps its own records under its privacy policy.
  • Server logs: up to 90 days, unless needed longer to investigate abuse or security incidents.

8. Cookies and similar technologies

We do not use advertising or analytics cookies. We use browser storage that is necessary for the Service (such as keeping you signed in), and Stripe and Cloudflare set cookies needed for payments, fraud prevention and bot protection on the pages where those features are used. Because we do not track you across other websites, we do not respond differently to “Do Not Track” signals; we also do not sell or share personal information, so a Global Privacy Control signal requires no further action.

9. Your rights and choices

  • Everyone: you can view and update your account details in the Service, delete your account from the account menu, and ask us for a copy of your information or to correct or delete it by emailing support@babelstack.app.
  • EEA, UK and Switzerland: you have the rights to access, rectify, erase, restrict and object to processing, and to data portability. You may also complain to your local data protection authority.
  • Brazil: you have the rights provided by the LGPD, including confirmation of processing, access, correction, anonymization or deletion, portability, and information about sharing.
  • California and other U.S. states: depending on where you live, you may have rights to know, access, correct and delete personal information, and to opt out of its sale or sharing. We do not sell or share personal information. We will not discriminate against you for using these rights.

We respond to requests within the time the law requires (usually 30 to 45 days). We may need to verify your identity before acting, for example by asking you to write from your account email. You may use an authorized agent where the law allows.

10. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, contact us and we will delete it.

11. Security

We protect information with measures such as encryption in transit, hashed passwords, access controls and short retention of media. No system is perfectly secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you as the law requires.

12. Changes to this policy

We will post any changes on this page and update the date above. If a change is material, we will notify you by email or in the Service before it takes effect. See also our Terms of Service.