Privacy Policy

Last updated: April 22, 2026

Video Translate AI (the "Extension" / the "Service") is a Chrome extension and companion web service that translates YouTube video audio into subtitles in your preferred language. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Who We Are

Video Translate AI is operated by an independent developer ("we", "us"). For privacy questions, contact: limit0422@gmail.com.

2. What We Collect

2.1 Account data

• Email address and Google profile name / avatar when you sign in with Google (via Google OAuth).
• A session token stored locally in the extension and the website.

2.2 Usage data

• YouTube video ID and URL of videos you choose to translate.
• Video audio — captured in your browser via the active YouTube tab, uploaded to our server, transcribed by OpenAI, then permanently deleted from our servers immediately after transcription. We do not retain raw audio.
• Transcripts and translations you generate, so you can view them again later in the extension.
• Translation job logs (duration, language pair, credit consumed, timestamp) for billing and troubleshooting.

2.3 Billing data

• Credit balance and purchase history.
• Payments are processed by Lemon Squeezy (international) and ZPay (China). We do not see or store your full card number, CVV, or bank credentials — those stay with the payment processor.

2.4 What we do NOT collect

• Your browsing history outside of YouTube video pages you explicitly translate.
• Keystrokes, form inputs on other sites, or personal files.
• Video content from sites other than youtube.com/watch.

3. How We Use the Data

• To transcribe and translate the specific video you request.
• To authenticate you and attribute credit usage to your account.
• To process purchases and apply credit to your account.
• To debug failures (error logs include the video URL and language pair, no audio).
• To send service notifications (e.g., low balance, failed job).

We do not sell your data, show you advertising, or use your data to train machine learning models.

4. Third-Party Services

We share the minimum data needed with these providers:

• OpenAI (speech-to-text + translation) — receives audio and transcript text. OpenAI's API policy states API data is not used for training and is retained for up to 30 days for abuse monitoring. See openai.com/policies/privacy-policy.
• Google OAuth — receives only the scopes you grant (email, profile) to issue a sign-in token. See policies.google.com/privacy.
• Lemon Squeezy — payment processing for international users. See lemonsqueezy.com/privacy.
• ZPay — payment processing for users in China (Alipay / WeChat Pay).
• Railway — our hosting provider (servers located in the United States).

5. Data Retention

• Audio files: deleted immediately after transcription (typically within minutes).
• Transcripts / translations: stored while your account is active so you can reopen them.
• Account & billing records: retained while your account exists, plus up to 2 years after closure to satisfy tax and accounting obligations.
• Error logs: 30 days, then auto-purged.

6. Permissions the Extension Requests

• activeTab / scripting — to read the video ID and inject the subtitle overlay on the YouTube tab you are watching.
• storage — to remember your sign-in token and language preference locally.
• alarms — to keep session tokens fresh in the background.
• identity — to launch the Google sign-in flow.
• Host permission https://www.youtube.com/* — required to run the translation overlay on YouTube.
• Host permission on our server domain — required to upload audio and fetch translations.

7. Your Rights

You can:

• Sign out at any time from the extension popup or the website.
• Delete your account and all associated data by emailing limit0422@gmail.com. We will action the request within 30 days.
• Export your data — request a JSON export of your account, transcripts, and billing history.
• Revoke Google access at myaccount.google.com/permissions.

If you are in the EU / UK, you have additional rights under GDPR (access, rectification, erasure, portability, objection). Contact us to exercise them.

8. Children

The Service is not intended for children under 13. We do not knowingly collect data from children.

9. Security

We use HTTPS for all network traffic, short-lived session tokens, and bcrypt-hashed passwords (if you use email sign-up instead of Google). No system is 100% secure; we cannot guarantee absolute security, but we follow reasonable industry practices.

10. Changes to This Policy

We may update this policy. Material changes will be highlighted on the extension popup or the website. The "Last updated" date above reflects the most recent revision.

11. Contact

Email: limit0422@gmail.com