Legal

Privacy Policy

Video Voice Over AI is built privacy-first. Dubbing happens as you watch — we do not store the videos you play, the audio you hear, or a history of what you have watched.
Effective:
September 4, 2026
Last updated:
September 4, 2026

1. Who we are and what this covers

This Privacy Policy explains how Video Voice Over AI ("Video Voice Over AI", "we", "us", "our") handles personal information. It applies to:

  • the Video Voice Over AI browser extension (the "Extension");
  • the videovoiceoverai.com website, including the marketing pages and the account dashboard;
  • the APIs the Extension and dashboard call (together with the above, the "Service").

It does not apply to the third-party video platforms you use the Extension on, or to any other company's site or app — see §19.

For the purposes of the EU and UK GDPR, Video Voice Over AI is the controller of the personal information described here.

2. Summary at a glance

This table is a summary for orientation only. The sections that follow are the operative text.

QuestionShort answer
Do you need an account?No. The free tier works with no account and no sign-in.
Do you store the videos I watch?No. Not the video, not the audio, not a watch history.
Do you sell my personal information?No — and we never have.
Do you show me ads or track me across sites?No. There are no advertising or cross-site tracking technologies in the Service.
What analytics do you use?Self-hosted Umami, which sets no cookies and records anonymous, aggregated page views.
Can I delete everything?Yes — from the dashboard, at any time. See §12.
Who do I write to?privacy@videovoiceoverai.com

3. What we never collect

Some categories of data are outside the design of the Service. We do not collect, store, or retain:

  • The video content you watch. Video frames are never sent to us. The Extension operates on the page you are already viewing.
  • Your watch history. We do not log which videos you open, and we do not build a profile of your viewing. Usage metering counts minutes, not titles.
  • Original soundtracks. Where a premium plan transcribes audio, that audio is streamed to the transcription provider, converted to text, and discarded. It is never written to our storage.
  • Biometric identifiers. We do not create voiceprints of you and do not analyse your voice. Synthetic voices come from our providers' catalogues.
  • Advertising identifiers or cross-site tracking data. There are no ad networks, ad pixels, or third-party trackers in the Service.
  • Full payment card numbers. Card details go directly to our payment processor and never touch our servers.

4. What we collect, why, and for how long

The table below is the complete set of personal information the Service collects, the purpose it serves, the GDPR legal basis where that framework applies, and how long it is kept.

CategoryWhat it isWhyLegal basisRetention
AccountName, email address, password hash (or the Google account identifier if you sign in with Google), email-verification state, and whether two-factor authentication is on.To create and secure your account and to sign you in.Performance of a contractLife of the account, then 30 days.
SessionSession token, IP address, browser user-agent string, and timestamps for each active sign-in.To keep you signed in, show you your active devices, and detect account takeover.Legitimate interests (account security)Until the session expires or you revoke it (30 days maximum).
Subscription and billingPlan, status, renewal date, the customer and subscription identifiers held by our payment processor, and invoice records. Card numbers stay with the processor.To operate paid plans, apply quotas, and meet tax and accounting obligations.Contract; legal obligationInvoice records for as long as tax law requires (typically 7 years).
Usage meteringA count of premium minutes processed, with a timestamp and the target language. Not the video, channel, or title.To enforce plan quotas fairly and to size capacity.Contract; legitimate interestsRolling 13 months, then aggregated.
PreferencesDefault target language, voice selection, playback and volume settings, notification choices.So your settings persist across sessions and devices.ContractLife of the account.
Support correspondenceThe messages you send us and our replies, including any feedback you submit in the dashboard.To answer you and to keep a record of what was agreed.Legitimate interests24 months from the last message.
DiagnosticsError reports (stack traces, browser and operating-system version, and the IP address of the request), plus minimal server logs.To find and fix faults and to keep the Service available.Legitimate interests (service reliability)90 days.
Anti-abuseIP address and request timing used for rate limiting, and the result of the bot check on the sign-in and sign-up forms.To stop brute-force attacks, scripted sign-ups, and abuse of quotas.Legitimate interests (security)Rate-limit counters are held in memory only; bot-check results are not stored.
AnalyticsPage visited, referring page, and coarse browser, device type, and country — anonymous and aggregated, with no cookie and no cross-site identifier.To understand which pages are useful.Legitimate interestsAggregated indefinitely; never linked to your account.

We do not collect special category data (health, biometrics, race, religion, politics, sexual orientation) or government identifiers, and we ask that you do not send them to us.

5. Where the information comes from

  • From you — when you create an account, change a setting, subscribe, or write to support.
  • From your device automatically — IP address, user-agent, and the page you are on, as part of any web request.
  • From Google, if you choose to sign in with Google: your name, email address, and profile picture, and nothing else.
  • From our payment processor — subscription status, the brand and last four digits of your card, and invoice history.

6. How dubbing works (the data flow)

Understanding the flow is the fastest way to see what does and does not reach us.

  1. The Extension reads the caption track already present on the page you are watching, or, on premium plans for videos without captions, captures the audio segment currently playing.
  2. That text or audio segment is sent over an encrypted connection to a translation and text-to-speech provider, which returns translated text and spoken audio.
  3. The Extension plays that audio over the video and lowers the original soundtrack. Nothing about the segment is written to our database.
  4. On paid plans, a counter of premium minutes used is incremented against your account so quotas can be enforced.

On the free tier, speech is produced by the voice engine already built into your browser, so that audio is generated entirely on your device and never leaves it.

7. The browser extension

The Extension requests the narrowest set of permissions that lets it work:

  • Access to video pages — its content scripts run only on the supported video platform, and only to read captions, render its controls, and play the dub. It does not run on your other tabs.
  • Storage — your language and voice preferences are saved in your browser's extension storage. If you are signed in, they also sync to your account so a second device matches.
  • Identity — used only when you choose to connect the Extension to a Video Voice Over AI account, to complete the sign-in handshake.

Connecting the Extension issues a revocable access token that identifies your account to our API. You can revoke it at any time from the dashboard; revocation takes effect immediately.

Video Voice Over AI's use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We do not transfer, sell, or use that data for advertising, and we do not allow humans to read it except with your explicit consent, to resolve a specific support issue you raised, for security purposes, or where required by law.

8. Cookies and similar technologies

We use a small number of strictly necessary cookies — chiefly to keep you signed in — and no advertising or cross-site tracking cookies at all. Our analytics is cookieless.

Every cookie the Service sets is named, explained, and given an expiry in the Cookie Policy, which forms part of this Privacy Policy.

9. How we share information

We share personal information only with the service providers below, each bound by contract to process it solely on our instructions, and only for the purpose listed.

ProviderFunctionWhat it receives
StripePayments, subscriptions, invoicingYour email address, the billing details you enter, and your subscription state. Card data goes to Stripe directly and never through us.
ResendTransactional email (verification, password reset, receipts)Your email address, name, and the contents of the message being sent.
Microsoft Azure, ElevenLabs and similar speech providersNeural voices and transcription on premium plansThe caption text or audio segment being dubbed, transiently. No account identifier, no video identifier.
DeepL / OpenAIMachine translationThe caption text being translated, transiently.
SentryError monitoringError reports, which may include your IP address and the page where the fault occurred.
CloudflareBot protection on the sign-in, sign-up and password-reset formsYour IP address and a challenge token, to distinguish a person from a script.
Our hosting and database providerRunning the ServiceThe data described in §4, encrypted in transit.

Beyond those providers, we disclose personal information only:

  • With your direction — for example when you connect the Extension to your account.
  • For legal reasons — to comply with a law, a valid legal process, or an enforceable governmental request; to enforce our Terms of Service; or to protect the rights, property, or safety of our users, the public, or us. Where we are permitted to tell you about such a request, we will.
  • In a corporate transaction — if Video Voice Over AI is involved in a merger, acquisition, financing, or sale of assets, information may transfer as part of that deal. We will give notice here before your information becomes subject to a different privacy policy, and the acquirer will be bound by commitments at least as protective as these.

10. We do not sell or share your information

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined by the California Consumer Privacy Act and comparable state laws. We have not done so in the preceding twelve months, including with respect to anyone under 16. We do not use or disclose sensitive personal information for any purpose beyond those permitted without a right to limit.

We also do not process personal information for targeted advertising or for profiling that produces legal or similarly significant effects.

11. International transfers

We operate from the State of Florida, United States and our providers may process information in the United States, the European Economic Area, and the United Kingdom. If you are in the EEA, the UK, or Switzerland, that means your information may be transferred outside your country.

Where it is, the transfer is covered by an appropriate safeguard — normally the European Commission's Standard Contractual Clauses (with the UK Addendum where relevant), or the provider's certification under the EU–US Data Privacy Framework. You can ask us for a copy of the safeguard relied on for a particular provider at privacy@videovoiceoverai.com.

12. Retention and deletion

We keep personal information only as long as it serves the purpose it was collected for, or as long as the law requires. The per-category periods are in the table at §4.

Deleting your account

You can delete your account at any time from the dashboard. When you do:

  • your profile, preferences, sessions, and usage records are removed from our live systems within 30 days;
  • encrypted backups roll over on a 35-day cycle, so a copy may persist there for up to that long before it is overwritten. We do not restore deleted accounts from backup;
  • invoices and the minimum billing records we are required to keep are retained for the statutory period, and nothing else.

Ask for a copy first

Deletion is irreversible. If you want a copy of your data, request it at privacy@videovoiceoverai.com before you delete the account — we will send it in a machine-readable format, and we will hold off on the deletion until you have it if you ask us to.

13. Security

We apply safeguards appropriate to the sensitivity of the data:

  • all traffic is encrypted in transit (HTTPS/TLS);
  • passwords are stored only as salted hashes — we cannot read them, and neither can anyone who obtains the database;
  • optional two-factor authentication is available on every account, and is required for staff with administrative access;
  • administrative access is role-based, least-privilege, and audit logged;
  • the sign-in, sign-up, and password-reset endpoints are rate limited and protected by a bot check.

No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal information we will notify you and any regulator as required, without undue delay. Please report anything that looks like a vulnerability to support@videovoiceoverai.com.

14. Your rights and how to use them

Wherever you live, you can do all of the following — most of them yourself, in seconds:

RightHow
Access a copy of your dataAsk at privacy@videovoiceoverai.com — we send it in a machine-readable format
Correct your name or emailDashboard → Account
Change or withdraw preferencesDashboard → Preferences
Sign out other devicesDashboard → Account → Connected devices
Revoke the extension's accessDashboard → Account → Connected devices
Delete your account and dataDashboard → Account → Delete account
Opt out of non-essential emailThe unsubscribe link in any such email
Anything else, or if you have no accountWrite to privacy@videovoiceoverai.com

We acknowledge written requests within 10 business days and answer within 45 days, which we may extend once by a further 45 days where the law allows and the request is complex — we will tell you if that happens. There is no charge unless a request is manifestly unfounded or excessive.

To protect you, we verify requests against the account they concern — normally by requiring the request to come from, or be confirmed at, the account's email address. We never ask for more information than verification needs. You may use an authorised agent where the law allows one; we will ask for proof of the authorisation.

We will never deny you service, charge a different price, or give you a lower quality of service because you exercised a privacy right.

15. United States state privacy rights

If you live in California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, your state gives you rights over personal information. In practice they line up with §14: to know what we collect and why, to get a copy in a portable format, to correct it, to delete it, and to opt out of sale, targeted advertising, and significant profiling — none of which we do.

California

The categories in §4 map to the CCPA categories of identifiers, customer records, commercial information, internet activity, and geolocation inferred at country level only. Sources are in §5, purposes in §4, and recipients in §9. We disclose personal information to those service providers for business purposes; we do not sell or share it, so no "Do Not Sell or Share My Personal Information" link is required. We do not use sensitive personal information to infer characteristics.

Appeals

If we decline a request, our answer will tell you why. You may appeal by replying to that message or writing to privacy@videovoiceoverai.com with "Appeal" in the subject line; we will respond within 45 days with the outcome and our reasoning. If the appeal is denied, several states let you complain to your Attorney General, and we will give you the link.

16. EEA, UK and Swiss rights

If the EU or UK GDPR applies to you, you have the rights of access, rectification, erasure, restriction, portability, and objection, and the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects — we make no such decisions.

Where we rely on legitimate interests (see the table in §4), you may object at any time and we will stop unless we have compelling grounds that override your interests. Where we rely on consent, you may withdraw it at any time without affecting processing already carried out.

You also have the right to lodge a complaint with your local supervisory authority — in the UK, the Information Commissioner's Office. We would appreciate the chance to address your concern first at privacy@videovoiceoverai.com.

17. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, write to privacy@videovoiceoverai.com and we will delete it promptly. Users between 13 and 18 should use the Service only with the involvement of a parent or guardian.

18. Do Not Track and Global Privacy Control

There is still no common standard for how sites should respond to a browser "Do Not Track" signal, so we do not respond to it differently — but the point is largely moot here, because we run no advertising or cross-site tracking to switch off.

We treat a Global Privacy Control signal as a valid opt-out of sale and sharing wherever the law requires it. As we do neither, no change to our processing follows from it.

20. Changes to this policy

We may update this policy as the Service evolves. When we do, we change the "last updated" date at the top and keep the policy at this URL so changes are visible.

If a change materially reduces your rights or materially expands how we use personal information, we will give you at least 30 days' notice by email (if you have an account) or by a prominent notice on the site before it takes effect, and where the law requires consent we will ask for it rather than assume it.

21. How to contact us

Privacy questions, requests, and complaints go to privacy@videovoiceoverai.com. General support is at support@videovoiceoverai.com.

We read every message and answer within the timescales in §14.