Data Processing & Providers
How Capti processes your data and which third-party providers we use
Capti uses several trusted third-party providers to deliver our service. This page explains what data we store, how we process it, and which providers have access to your data.
What We Store
Job Data
For each captioning job you create, we store:
| Data Type | Description |
|---|---|
| Job metadata | Job name, status, settings, creation date |
| Audio file | The audio extracted from your video |
| Transcription file | List of words with precise timestamps |
| Grouping file | Organized words within caption groups |
| SRT files | Standard subtitle format exports |
| FCPXML files | Final Cut Pro project files |
User Data
For each user account, we store:
| Data Type | Description |
|---|---|
| Presets | Your saved caption styles and preferences |
| Subscription information | Your plan and payment status |
| Credit balance | Available credits for processing jobs |
Storage Provider
All job files and user data are stored on Convex, our backend database and file storage provider.
- Data is encrypted in transit and at rest
- Convex complies with SOC 2 Type II, HIPAA and GDPR standards
- Convex Privacy Policy
- Convex Terms of Service
- Convex Data Processing Agreement
- Convex Subprocessors
Processing Providers
Audio Transcription - AssemblyAI
Your audio files are sent to AssemblyAI for speech-to-text transcription.
What they receive:
- Audio file only (no video)
- No user identification information
- No job metadata
What they provide:
- Word-level transcription with timestamps
- Support for 100+ languages
- High-accuracy speech recognition
Privacy & retention:
- AssemblyAI does not use your audio for model training
- Audio files are deleted after processing
- AssemblyAI Privacy Policy
- AssemblyAI Terms of Service
Caption Grouping - Groq
Transcription data is sent to Groq for AI-powered caption grouping.
What they receive:
- Transcription text and timestamps
- No audio files
- No user identification information
What they provide:
- Optimized caption grouping
- Natural language processing for readability
Privacy & retention:
User Management & Payments
Authentication - Clerk
User accounts and authentication are exclusively handled by Clerk.
What they manage:
- User registration and login
- Email verification
- Account security
- Email notifications for account and billing
Privacy & security:
- Clerk is SOC 2 Type II certified
- Clerk Privacy Policy
- Clerk Terms of Service
Payments - Stripe
Payment processing is handled by Stripe through Clerk.
What they process:
- Subscription payments
- Credit card information (never stored by Capti)
- Billing information
Security & compliance:
- Stripe is PCI-DSS Level 1 certified
- Stripe Privacy Policy
- Stripe Terms of Service
Marketing & Analytics
Email Marketing - Loops
We use Loops.so for automated email marketing campaigns.
What they receive:
- Email address
- Account status (free/paid)
- Opt-in preferences
Control:
- You can unsubscribe from marketing emails at any time
- Transactional emails (account/billing) are sent via Clerk
- Loops Privacy Policy
- Loops Terms of Service
Web Analytics - Vercel & PostHog
We collect anonymous usage metrics and analytics through Vercel Analytics and PostHog.
Vercel Analytics
What they collect:
- Page views and navigation patterns
- Performance metrics
- Geographic location (country-level)
- Device and browser type
Privacy:
- No personal identification
- No cookies required
- Anonymized data only
- Vercel Privacy Policy
- Vercel Terms of Service
PostHog
What they collect:
- User behavior and product analytics
- Feature usage and interactions
- Session recordings (optional, anonymized)
- Performance and error tracking
Privacy:
- GDPR, CCPA, and HIPAA compliant
- PostHog Privacy Policy
- PostHog Terms of Service
Data Retention & Deletion
Automatic Deletion
- Job data is automatically deleted after 2 years of inactivity
- Files older than 2 years are permanently removed from storage
- Deletion notifications sent before automatic removal
Manual Deletion
You can delete your data at any time:
Delete a specific job:
- Open the job page
- Click the delete button
- Confirm deletion
- All associated files are immediately removed
Delete your account:
- Click your profile in the top right
- Select "Settings"
- Click "Delete Account"
- Confirm deletion
- All jobs, files, and user data are permanently deleted
What happens after deletion:
- Convex: All files and metadata removed immediately
- AssemblyAI: Audio already deleted after transcription
- Groq: No persistent storage of your data
- Clerk: Account and authentication data removed
- Stripe: Payment history retained per legal requirements (7 years)
Security Measures
Capti implements industry-standard security practices:
- Encryption: TLS 1.3 for data in transit
- Storage: Encrypted at rest on Convex
- Access control: Role-based permissions
- Authentication: Secure session management via Clerk
- Monitoring: Automated security scanning and alerts
Data Sovereignty
Your data may be processed in different regions:
- Convex: US-based storage (AWS)
- AssemblyAI: US-based processing
- Groq: US-based processing
- Clerk: Global CDN with EU/US compliance
- Stripe: Global payment processing
All providers comply with applicable data protection regulations including GDPR.
Your Rights
You have the right to:
- Access: View all data we have about you
- Export: Download your job data and presets
- Correct: Update incorrect information
- Delete: Remove your data at any time
- Object: Opt out of marketing communications
- Portability: Export data in standard formats (SRT, JSON)
To exercise these rights, contact us at contact@usecapti.com or use the in-app deletion tools.
Questions?
If you have questions about data processing or privacy:
- Email: contact@usecapti.com
- See our Privacy Policy
- See our Terms of Service
We respond to all privacy inquiries within 48 hours.