This policy explains what personal data capshak collects, why, who else processes it, and what you can do about it. It covers the capshak website and the capshak editor.
Who we are
capshak is operated by Tose’e Ertebatat-e Ra’d (Mindio) (“we”, “us”). You can reach us at info@mindio.ir for anything in this policy.
How capshak is built: your video stays on your device
capshak is designed so that the heavy work happens in your browser, not on our servers.
- Decoding, the waveform, the preview, effects and the final MP4 encoding all run on your own device. Your video is not uploaded to edit or export it.
- To create captions, your browser extracts only the soundtrack as a small, compressed audio file (about 240 KB per minute) and sends that to us. We pass it to a speech-to-text provider and do not keep the audio file.
- Translation and AI proofreading send caption text only.
- The AI editor sends your chat messages and a text description of your edit. Only when it decides to look at a frame does it send a small JPEG snapshot of the preview (at most 768 px).
- Video backup is optional. If you turn it on, your source video is uploaded in the background so you can open the project on another device.
What we collect
- Account data: your mobile number and your name. There is no password: we use your number to text you sign-in codes through our SMS provider. We also keep the sessions you are signed in with, so you can review them and sign out everywhere.
- Project documents: your captions, translations, styles and edit decisions (cuts, texts, effects, timings). These are stored with your account so your projects are there when you come back.
- Optional video backups: the source files you choose to back up, plus pictures and audio you add to a project when they are backed up.
- Credit and payment records: which package you bought, the amount, the date, the payment provider’s reference and the status. Card details are entered on Stripe’s or Zarinpal’s own pages and handled by them. We never receive or store your card number.
- Security data: your IP address and basic request data, used to keep the service secure, prevent abuse and enforce rate limits. Important account actions are recorded in an audit log.
- Contact and sales forms: what you type into a form on the website (such as your name, email, phone, company and message). We store your IP address only as a one-way hash, to spot spam.
Who processes your data
We use a small number of providers to run features you ask for. Each receives only what the feature needs.
| Purpose | Provider | What they receive |
|---|---|---|
| Speech-to-text | AvalAI (using ElevenLabs Scribe) or Groq | The extracted audio of your video |
| Translation, proofreading, AI editor | Anthropic Claude, directly or through AvalAI | Caption text; for the AI editor, chat, edit description and occasional frame snapshots |
| Payments | Stripe (international cards), Zarinpal (Iranian bank cards) | What you enter on their payment page and the order amount |
| Sign-in codes | Our SMS provider | Your mobile number and the sign-in code |
| Asset search, only when you use it | GIPHY, Freesound, Jamendo | Your search terms |
These providers process data under their own terms and privacy policies.
What we don’t do
- We do not sell your personal data.
- We do not use your videos, audio or captions to train AI models.
- We do not use advertising trackers. See our Cookie Policy.
How long we keep data
- Video backups: deleted automatically after the retention period, 7 days by default. After that, the editor asks you for the file again.
- Audio sent for captions: not kept by us after the transcript is returned.
- Project documents and account data: kept while your account exists, and deleted when you delete your account.
- Audit logs: 365 days.
- Unpaid payments: marked as failed after 2 days. Completed payment records are kept as long as accounting and tax rules require.
- Form messages: kept as long as we need to answer you and follow up.
Your rights
You can:
- See and correct your profile at any time in Account.
- Ask for a copy of the personal data we hold about you.
- Delete your account yourself from the Account page (or Settings in the Android app), confirmed by a code texted to your phone, or by emailing info@mindio.ir with the mobile number of your account. We delete your account, projects, backups, credits and payment history. We keep only what stops a purchase being used twice (an app store purchase token, without your details), our security audit log, and messages you sent through our forms.
- Object to a specific use of your data, or ask any question about it.
We answer requests within a reasonable time, usually within 30 days.
Security
Sign-in codes are single-use, short-lived and stored only as a one-way hash, connections are encrypted, and backup playback uses short-lived signed links. No system is perfectly secure, but we work to protect your data and limit who can access it.
Children
capshak is not meant for children under 13, and they should not create an account. If you are between 13 and 18, you need permission from a parent or guardian to use capshak and to buy credits. If you believe a child has given us personal data, contact us and we will delete it.
Changes to this policy
We may update this policy as capshak changes. We will update the date at the top, and for important changes we will let you know by email or in the app.
Contact
Tose’e Ertebatat-e Ra’d (Mindio)
Email: info@mindio.ir
Address: Unit 70, Hall U, Azadi Innovation Factory, Lashgari Highway, Bimeh, Tehran, Iran. Postal code 1391955478