Legal
Privacy Policy
- Effective:
- September 4, 2026
- Last updated:
- September 4, 2026
1. Who we are and what this covers
This Privacy Policy explains how Video Voice Over AI ("Video Voice Over AI", "we", "us", "our") handles personal information. It applies to:
- the Video Voice Over AI browser extension (the "Extension");
- the videovoiceoverai.com website, including the marketing pages and the account dashboard;
- the APIs the Extension and dashboard call (together with the above, the "Service").
It does not apply to the third-party video platforms you use the Extension on, or to any other company's site or app — see §19.
For the purposes of the EU and UK GDPR, Video Voice Over AI is the controller of the personal information described here.
2. Summary at a glance
This table is a summary for orientation only. The sections that follow are the operative text.
| Question | Short answer |
|---|---|
| Do you need an account? | No. The free tier works with no account and no sign-in. |
| Do you store the videos I watch? | No. Not the video, not the audio, not a watch history. |
| Do you sell my personal information? | No — and we never have. |
| Do you show me ads or track me across sites? | No. There are no advertising or cross-site tracking technologies in the Service. |
| What analytics do you use? | Self-hosted Umami, which sets no cookies and records anonymous, aggregated page views. |
| Can I delete everything? | Yes — from the dashboard, at any time. See §12. |
| Who do I write to? | privacy@videovoiceoverai.com |
3. What we never collect
Some categories of data are outside the design of the Service. We do not collect, store, or retain:
- The video content you watch. Video frames are never sent to us. The Extension operates on the page you are already viewing.
- Your watch history. We do not log which videos you open, and we do not build a profile of your viewing. Usage metering counts minutes, not titles.
- Original soundtracks. Where a premium plan transcribes audio, that audio is streamed to the transcription provider, converted to text, and discarded. It is never written to our storage.
- Biometric identifiers. We do not create voiceprints of you and do not analyse your voice. Synthetic voices come from our providers' catalogues.
- Advertising identifiers or cross-site tracking data. There are no ad networks, ad pixels, or third-party trackers in the Service.
- Full payment card numbers. Card details go directly to our payment processor and never touch our servers.
4. What we collect, why, and for how long
The table below is the complete set of personal information the Service collects, the purpose it serves, the GDPR legal basis where that framework applies, and how long it is kept.
| Category | What it is | Why | Legal basis | Retention |
|---|---|---|---|---|
| Account | Name, email address, password hash (or the Google account identifier if you sign in with Google), email-verification state, and whether two-factor authentication is on. | To create and secure your account and to sign you in. | Performance of a contract | Life of the account, then 30 days. |
| Session | Session token, IP address, browser user-agent string, and timestamps for each active sign-in. | To keep you signed in, show you your active devices, and detect account takeover. | Legitimate interests (account security) | Until the session expires or you revoke it (30 days maximum). |
| Subscription and billing | Plan, status, renewal date, the customer and subscription identifiers held by our payment processor, and invoice records. Card numbers stay with the processor. | To operate paid plans, apply quotas, and meet tax and accounting obligations. | Contract; legal obligation | Invoice records for as long as tax law requires (typically 7 years). |
| Usage metering | A count of premium minutes processed, with a timestamp and the target language. Not the video, channel, or title. | To enforce plan quotas fairly and to size capacity. | Contract; legitimate interests | Rolling 13 months, then aggregated. |
| Preferences | Default target language, voice selection, playback and volume settings, notification choices. | So your settings persist across sessions and devices. | Contract | Life of the account. |
| Support correspondence | The messages you send us and our replies, including any feedback you submit in the dashboard. | To answer you and to keep a record of what was agreed. | Legitimate interests | 24 months from the last message. |
| Diagnostics | Error reports (stack traces, browser and operating-system version, and the IP address of the request), plus minimal server logs. | To find and fix faults and to keep the Service available. | Legitimate interests (service reliability) | 90 days. |
| Anti-abuse | IP address and request timing used for rate limiting, and the result of the bot check on the sign-in and sign-up forms. | To stop brute-force attacks, scripted sign-ups, and abuse of quotas. | Legitimate interests (security) | Rate-limit counters are held in memory only; bot-check results are not stored. |
| Analytics | Page visited, referring page, and coarse browser, device type, and country — anonymous and aggregated, with no cookie and no cross-site identifier. | To understand which pages are useful. | Legitimate interests | Aggregated indefinitely; never linked to your account. |
We do not collect special category data (health, biometrics, race, religion, politics, sexual orientation) or government identifiers, and we ask that you do not send them to us.
5. Where the information comes from
- From you — when you create an account, change a setting, subscribe, or write to support.
- From your device automatically — IP address, user-agent, and the page you are on, as part of any web request.
- From Google, if you choose to sign in with Google: your name, email address, and profile picture, and nothing else.
- From our payment processor — subscription status, the brand and last four digits of your card, and invoice history.
6. How dubbing works (the data flow)
Understanding the flow is the fastest way to see what does and does not reach us.
- The Extension reads the caption track already present on the page you are watching, or, on premium plans for videos without captions, captures the audio segment currently playing.
- That text or audio segment is sent over an encrypted connection to a translation and text-to-speech provider, which returns translated text and spoken audio.
- The Extension plays that audio over the video and lowers the original soundtrack. Nothing about the segment is written to our database.
- On paid plans, a counter of premium minutes used is incremented against your account so quotas can be enforced.
On the free tier, speech is produced by the voice engine already built into your browser, so that audio is generated entirely on your device and never leaves it.
7. The browser extension
The Extension requests the narrowest set of permissions that lets it work:
- Access to video pages — its content scripts run only on the supported video platform, and only to read captions, render its controls, and play the dub. It does not run on your other tabs.
- Storage — your language and voice preferences are saved in your browser's extension storage. If you are signed in, they also sync to your account so a second device matches.
- Identity — used only when you choose to connect the Extension to a Video Voice Over AI account, to complete the sign-in handshake.
Connecting the Extension issues a revocable access token that identifies your account to our API. You can revoke it at any time from the dashboard; revocation takes effect immediately.
10. We do not sell or share your information
We also do not process personal information for targeted advertising or for profiling that produces legal or similarly significant effects.
11. International transfers
We operate from the State of Florida, United States and our providers may process information in the United States, the European Economic Area, and the United Kingdom. If you are in the EEA, the UK, or Switzerland, that means your information may be transferred outside your country.
Where it is, the transfer is covered by an appropriate safeguard — normally the European Commission's Standard Contractual Clauses (with the UK Addendum where relevant), or the provider's certification under the EU–US Data Privacy Framework. You can ask us for a copy of the safeguard relied on for a particular provider at privacy@videovoiceoverai.com.
12. Retention and deletion
We keep personal information only as long as it serves the purpose it was collected for, or as long as the law requires. The per-category periods are in the table at §4.
Deleting your account
You can delete your account at any time from the dashboard. When you do:
- your profile, preferences, sessions, and usage records are removed from our live systems within 30 days;
- encrypted backups roll over on a 35-day cycle, so a copy may persist there for up to that long before it is overwritten. We do not restore deleted accounts from backup;
- invoices and the minimum billing records we are required to keep are retained for the statutory period, and nothing else.
Ask for a copy first
Deletion is irreversible. If you want a copy of your data, request it at privacy@videovoiceoverai.com before you delete the account — we will send it in a machine-readable format, and we will hold off on the deletion until you have it if you ask us to.
13. Security
We apply safeguards appropriate to the sensitivity of the data:
- all traffic is encrypted in transit (HTTPS/TLS);
- passwords are stored only as salted hashes — we cannot read them, and neither can anyone who obtains the database;
- optional two-factor authentication is available on every account, and is required for staff with administrative access;
- administrative access is role-based, least-privilege, and audit logged;
- the sign-in, sign-up, and password-reset endpoints are rate limited and protected by a bot check.
No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal information we will notify you and any regulator as required, without undue delay. Please report anything that looks like a vulnerability to support@videovoiceoverai.com.
14. Your rights and how to use them
Wherever you live, you can do all of the following — most of them yourself, in seconds:
| Right | How |
|---|---|
| Access a copy of your data | Ask at privacy@videovoiceoverai.com — we send it in a machine-readable format |
| Correct your name or email | Dashboard → Account |
| Change or withdraw preferences | Dashboard → Preferences |
| Sign out other devices | Dashboard → Account → Connected devices |
| Revoke the extension's access | Dashboard → Account → Connected devices |
| Delete your account and data | Dashboard → Account → Delete account |
| Opt out of non-essential email | The unsubscribe link in any such email |
| Anything else, or if you have no account | Write to privacy@videovoiceoverai.com |
We acknowledge written requests within 10 business days and answer within 45 days, which we may extend once by a further 45 days where the law allows and the request is complex — we will tell you if that happens. There is no charge unless a request is manifestly unfounded or excessive.
To protect you, we verify requests against the account they concern — normally by requiring the request to come from, or be confirmed at, the account's email address. We never ask for more information than verification needs. You may use an authorised agent where the law allows one; we will ask for proof of the authorisation.
We will never deny you service, charge a different price, or give you a lower quality of service because you exercised a privacy right.
15. United States state privacy rights
If you live in California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, your state gives you rights over personal information. In practice they line up with §14: to know what we collect and why, to get a copy in a portable format, to correct it, to delete it, and to opt out of sale, targeted advertising, and significant profiling — none of which we do.
California
The categories in §4 map to the CCPA categories of identifiers, customer records, commercial information, internet activity, and geolocation inferred at country level only. Sources are in §5, purposes in §4, and recipients in §9. We disclose personal information to those service providers for business purposes; we do not sell or share it, so no "Do Not Sell or Share My Personal Information" link is required. We do not use sensitive personal information to infer characteristics.
Appeals
If we decline a request, our answer will tell you why. You may appeal by replying to that message or writing to privacy@videovoiceoverai.com with "Appeal" in the subject line; we will respond within 45 days with the outcome and our reasoning. If the appeal is denied, several states let you complain to your Attorney General, and we will give you the link.
16. EEA, UK and Swiss rights
If the EU or UK GDPR applies to you, you have the rights of access, rectification, erasure, restriction, portability, and objection, and the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects — we make no such decisions.
Where we rely on legitimate interests (see the table in §4), you may object at any time and we will stop unless we have compelling grounds that override your interests. Where we rely on consent, you may withdraw it at any time without affecting processing already carried out.
You also have the right to lodge a complaint with your local supervisory authority — in the UK, the Information Commissioner's Office. We would appreciate the chance to address your concern first at privacy@videovoiceoverai.com.
17. Children's privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, write to privacy@videovoiceoverai.com and we will delete it promptly. Users between 13 and 18 should use the Service only with the involvement of a parent or guardian.
18. Do Not Track and Global Privacy Control
There is still no common standard for how sites should respond to a browser "Do Not Track" signal, so we do not respond to it differently — but the point is largely moot here, because we run no advertising or cross-site tracking to switch off.
We treat a Global Privacy Control signal as a valid opt-out of sale and sharing wherever the law requires it. As we do neither, no change to our processing follows from it.
19. Third-party sites and platforms
The Service works alongside third-party video platforms and links to other sites. Those platforms and sites have their own privacy policies and we are not responsible for their practices. Using the Extension on a video platform does not change your relationship with that platform, and it continues to collect information about you under its own policy.
20. Changes to this policy
We may update this policy as the Service evolves. When we do, we change the "last updated" date at the top and keep the policy at this URL so changes are visible.
If a change materially reduces your rights or materially expands how we use personal information, we will give you at least 30 days' notice by email (if you have an account) or by a prominent notice on the site before it takes effect, and where the law requires consent we will ask for it rather than assume it.
21. How to contact us
Privacy questions, requests, and complaints go to privacy@videovoiceoverai.com. General support is at support@videovoiceoverai.com.
We read every message and answer within the timescales in §14.