PRIVACY

Privacy policy

Effective 13 September 2026

What Caption Engine handles

We store your email address, account sign-in information, credit balance and credit activity. Passwords are stored only as password hashes. If you use Google sign-in, we receive and store your verified email address and a provider-specific account identifier. We do not request access to your Google Drive, contacts, calendar, or other Google services.

When you generate captions, we temporarily process the video you upload and extracted image frames. The video and frames are removed after the request finishes. We retain operational records such as the generation type, status, token usage, estimated cost and credit charge, but not the uploaded video or generated caption text.

How the data is used

Account data is used to sign you in, protect your wallet, show your balance, deliver password resets and prevent abuse. Video frames and your generation instructions are sent to OpenAI to produce captions, hashtags and limited public-web research. Google account data is used only to authenticate you and connect that verified identity to your Caption Engine account.

Services involved

Railway hosts the application and database. OpenAI processes generation requests. Google provides optional sign-in. Stripe will process checkout and payment identifiers when payments are enabled; Caption Engine does not receive full card details.

Cookies and retention

A secure, HTTP-only cookie keeps you signed in for up to seven days. OAuth state expires after ten minutes and password-reset links expire after thirty minutes and work once. Account, wallet and transaction records remain while your account is active or as required to operate and protect the service.

Your choices

You can use an email and password instead of Google sign-in. You may request access, correction or deletion of your account data by emailing support@captionengine.org. Deleting your Google connection does not delete data required for transaction integrity or legal obligations.

Security and updates

We use encrypted HTTPS connections, restricted session cookies and access controls. No online service can guarantee absolute security. We will update this page when our data practices materially change.