Privacy Policy

Last updated: September 27, 2026

This policy explains what we collect when you use SubVela, why we collect it, how long we keep it, and what you can ask us to do with it. It covers this website, the AI processing tools and any related service we provide.

Who We Are

  • Chunlei Zhao ("we", "us") operates this website and the AI processing tools offered on it. We are the data controller for the information described in this policy.
  • Written enquiries about your data can be sent to support@subvela.ai.

What We Collect

  • Account information: the email address you register with (it is your account identifier), plus a password stored only as a salted hash — we cannot read or recover it. Nickname and avatar are optional.
  • Content you upload: the video, audio and image files you submit for processing, plus any text you type into the editors.
  • Generated output: the subtitles, transcripts, translations and other files our tools produce for you.
  • Usage records: which tools you used, task status, quota and point consumption, and referral records if you used or shared an invite code.
  • Payment information: payments are processed by Paddle.com, which acts as Merchant of Record. We receive order and subscription status; we do not receive or store your full card number.
  • Technical information needed to serve the site, such as your IP address and basic request logs. We use it for security and abuse prevention, and to count aggregate traffic (page views and unique visitors) so we can see how the service is used.

How We Use It

  • To run the processing you asked for and deliver the result.
  • To apply the quota and point limits that come with your plan.
  • To provide support and investigate faults you report.
  • To detect abuse, fraud and violations of our Copyright & Disclaimer statement.
  • To meet legal, tax and accounting obligations.
  • We do not sell your personal information, and we do not use the content you upload to train models.

Legal Grounds for Using Your Information (EEA and UK)

  • To perform our contract with you: creating and running your account, carrying out the processing you asked for, and applying the quota and points that come with your plan.
  • Legitimate interests: keeping the service secure, preventing abuse and fraud, investigating faults you report, and understanding aggregate usage so we can improve the product. We weigh these against your rights before relying on them.
  • Legal obligations: keeping tax and accounting records, and responding to lawful requests from authorities.
  • Consent: only where you have asked for something that needs it, such as optional email you can unsubscribe from at any time.
  • Declining something that relies on consent does not affect the rest of the service.

Who Else Processes It

  • Paddle.com — payment processing, checkout, invoicing and refunds, acting as Merchant of Record. Paddle holds the underlying transaction data; we do not receive your full card number.
  • Our own servers — transcription, translation, OCR and subtitle generation normally run on infrastructure we control, so your content does not leave it for those tasks.
  • Cloud storage providers — depending on how the service is deployed, uploaded and generated files may be stored on a third-party object storage service. Our overseas deployment uses Tencent Cloud International (COS) for this.
  • If we ever start sending your content to a new processor for AI processing, we will name that processor here before it happens.
  • We do not use third-party analytics, advertising networks or cross-site tracking, and we do not send your content to model providers for training.

Where Your Data Is Processed

  • Our servers are in the United States, and we may process your information there and in any other country where we or the processors named above operate.
  • If you are in the EEA or the UK, that means your information may be transferred outside your home country. Where we do so, we rely on safeguards recognised under applicable data protection law — such as standard contractual clauses or an adequacy decision — and we apply the protections described in this policy wherever it is processed.
  • You can ask us which safeguards apply to a particular transfer by emailing support@subvela.ai.

How We Protect It

  • Passwords are stored only as salted hashes, so we cannot read or recover them.
  • Traffic to the site is encrypted in transit, and access to production systems is limited to the people who need it to run the service.
  • Uploaded and generated files are stored under per-task keys rather than publicly guessable paths, and are deleted on the schedule described above.
  • No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and the relevant authority where the law requires it.

How Long We Keep It

  • Files you upload and the results we generate are deleted automatically 30 days after the task finishes.
  • Account information is kept while your account stays open. You can delete the account yourself from your account page at any time, and it takes effect immediately.
  • Deleting your account removes your profile details, your uploaded files, the transcripts we produced for you, your saved editing projects and your API credentials.
  • What then remains does not identify you: purchase and point records keep their amounts, dates and plan names under an anonymised account id, because tax and accounting rules require us to keep them. Nothing in those records points back to your name or email.
  • Payment and invoicing records are kept for as long as tax and accounting rules require; Paddle holds the underlying transaction data as Merchant of Record.

Your Rights

  • Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to complain to your local data protection authority.
  • You can exercise two of them yourself, right now, without waiting for us: your account page has an export that downloads everything we hold about your account, and a delete action that removes the account and its contents immediately.
  • For anything else, email support@subvela.ai and include the email address registered to your account so we can identify you.
  • We may need to verify your identity before acting on a request. If we cannot comply, we will tell you why.
  • We aim to answer within one month. If a request is genuinely complex and we need longer, we will tell you before that month runs out and explain why.
  • Making a request is free, and we will not treat you worse for exercising these rights.
  • We are not established in the EEA or the UK, and we have not appointed a representative there. You can still exercise every right in this policy, and reach us directly at support@subvela.ai.
  • You can also complain to your local supervisory authority at any time without going through us first. If we ever appoint a representative, we will name it here.
  • Deleting your account does not by itself remove records we are legally required to keep.

Cookies and Local Storage

  • We do not set third-party analytics, advertising or cross-site tracking cookies.
  • We store a small number of items in your browser, all on your device rather than on our servers: a session token so you stay logged in, your language and appearance preferences, settings you save in the tools, and, if you arrived through someone’s invitation link, the invitation code so that person can be credited. The invitation code is discarded as soon as you close the tab.

If You Live in California

  • We do not sell your personal information, and we do not share it with third parties for cross-context behavioural advertising.
  • You can ask us to disclose what we collect about you, to correct it, and to delete it. Use the contact details below; we verify requests before acting on them.
  • Referral programme: if you share or use an invite code, both accounts can earn bonus points. Under California law this is a financial incentive. The points are credited to your account, have no cash value and cannot be exchanged for money, and their value is roughly the value of the points shown on the invite page. Taking part is voluntary and you can stop at any time by not using or sharing a code.
  • Under California Civil Code §1798.83 ("Shine the Light"), you may ask for details of disclosures of personal information to third parties for their own direct marketing. We do not make any such disclosures.
  • We do not discriminate against you for exercising these rights.

Children

  • SubVela is not directed to children under 16 and we do not knowingly collect personal information from them.
  • If you believe a child has given us personal information, contact us and we will delete it.

Changes to This Policy

  • If we change this policy in a way that materially affects you, we will update the date at the top and tell you in the product or by email at least 30 days before the change takes effect.
  • If you do not agree with a change, you can stop using the service and ask us to delete your account.

Contact

  • Questions about this policy or about your data: support@subvela.ai.
  • Refund and billing questions are handled under our Refund Policy.
  • If you need a postal address for formal correspondence, ask us and we will give you one.