Privacy Policy

1. Scope

This Privacy Policy applies to the PrismaSub desktop application, prismasub.com, and the cloud services used to provide authentication, translation, credits, payments, support, and security. In this policy, "PrismaSub," "we," "us," and "our" refer to the operator of the PrismaSub service.

2. Information we process

Google sign-in and account information

When you sign in with Google, we receive the basic account information Google makes available for sign-in, such as your Google account identifier, email address, display name, and profile image. We also process authentication tokens and session information needed to keep you signed in and secure your account.

PrismaSub uses Google user data only to authenticate you, create and maintain your PrismaSub account, show your signed-in identity, protect the sign-in flow, and connect your credits and purchases to the correct account. PrismaSub does not request access to your Gmail, Google Drive, Google Calendar, contacts, or files.

Subtitle and translation information

Subtitle recognition happens on your device. PrismaSub sends recognized subtitle text, the selected source and target languages, limited recent subtitle context, and request identifiers to our cloud service for translation. Translation job records may contain the recognized source text and translated text so the service can return results, prevent duplicate charges, recover recent results, and investigate service failures.

Credits, purchases, and support

We maintain your promotional and paid credit balances, credit-ledger activity, starter-bonus claims, translation charges, purchase status, and related identifiers. When you contact support, we process the email address and information you choose to provide in order to respond.

Beta watch-time measurement

During beta, PrismaSub may measure how long screen capture and translation are actively running and combine that duration with the Dialogue Credits consumed during the same session. These usage measurements may be linked to your PrismaSub account so we can refine watch-time estimates and add credits when aggregate beta usage shows a consistent trend of shorter watch times than estimated.

The timer measures active translation duration, not your viewing history. The timer measurement itself does not collect video or channel titles, website addresses, audio, video, screenshots, or additional screen content. PrismaSub uses session summaries rather than continuous activity tracking for this purpose.

Payment information

Stripe processes your payment-card information. PrismaSub does not receive or store your full card number. We receive transaction information such as the Stripe customer, Checkout Session, and PaymentIntent identifiers; the purchased pack; amount; currency; payment status; and webhook records needed to grant credits and prevent duplicate fulfillment.

Technical and security information

We and our infrastructure providers process standard network and request information, such as IP address, request time, response status, rate-limit signals, device or browser information, and performance metrics. PrismaSub's structured application logs are designed not to contain subtitle source text, translated text, authentication tokens, or secret keys.

3. How we use information

• Authenticate users and protect account sessions.
• Recognize, translate, display, and recover subtitle translations.
• Maintain credit balances, grant welcome credits, and fulfill purchases.
• Measure beta translation-session duration, refine watch-time estimates, and issue credit adjustments.
• Prevent duplicate charges, fraud, abuse, and unauthorized access.
• Monitor reliability, diagnose failures, and improve service performance.
• Provide support and communicate important service or policy changes.
• Comply with legal obligations and enforce our Terms of Use.

We do not sell personal information or Google user data, and we do not use it for targeted advertising.

4. Google user data and Limited Use

PrismaSub's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements. Access to Google user data is limited to providing and improving user-facing sign-in and account functionality, security, support with your consent, compliance with applicable law, and other uses expressly permitted by Google policy.

Humans do not read Google user data unless you ask us to investigate a support issue, access is necessary for security or abuse review, applicable law requires it, or the data has been aggregated and de-identified for internal operations.

5. When we share information

We share information only as needed with service providers that help operate PrismaSub:

• Google and Supabase for sign-in, authentication, account records, and database services.
• Cloudflare for hosting, request routing, security, and the PrismaSub API.
• DeepSeek for processing subtitle translation requests.
• Stripe for Checkout, payment processing, refunds, and payment-event delivery.

We may also disclose information when reasonably necessary to comply with law, protect users or the service, investigate fraud or security incidents, or complete a business reorganization subject to appropriate safeguards. We do not allow service providers to use PrismaSub data for their own advertising.

6. Storage, security, and retention

PrismaSub uses administrative, technical, and organizational safeguards designed to protect information. On Windows, PrismaSub stores Supabase session credentials using Windows data-protection facilities rather than ordinary browser storage. Server-side secrets are kept in encrypted secret stores and are not shipped in the desktop application or website.

Account, credit, purchase, and translation job records are retained while reasonably necessary to operate the service, maintain accurate billing and fraud records, resolve disputes, and meet legal obligations. Translation job records may remain associated with your account until they are deleted under our retention processes or your account is deleted. Security and transaction records may be retained longer where required for fraud prevention, accounting, dispute resolution, or law.

Account-linked beta usage measurements are retained only as long as reasonably necessary to validate watch-time estimates, provide credit adjustments, and investigate abuse. They may then be deleted or retained only in aggregated or de-identified form for product planning.

No security method is perfect. We cannot guarantee absolute security, but we work to reduce access and retain only information that serves a legitimate operational purpose.

7. Your choices and controls

• You can sign out of PrismaSub at any time to remove the active local session.
• You can revoke PrismaSub's Google access from your Google Account permissions.
• You can request access, correction, or deletion of your PrismaSub account data by contacting us.
• You can stop cloud translation by disabling translation or discontinuing use of the service.

To request account deletion, email support@prismasub.com from the address associated with your account. We may need to verify your identity. Deletion requests do not require you to provide your Google password or payment-card details.

8. Website cookies and analytics

PrismaSub does not currently use third-party advertising or behavioral analytics on prismasub.com. Infrastructure providers may use strictly necessary cookies or similar technologies for security, traffic management, and abuse prevention.

If you use the Mac nudge button, PrismaSub stores only the aggregate number of nudges. We also set a first-party functional cookie and may use a local browser flag for up to one year to prevent accidental repeat submissions from the same browser. The counter is not linked to a PrismaSub account and does not store your email address, viewing activity, or the content you watch.

9. International processing

PrismaSub and its service providers may process information in countries other than your own. Where required, we rely on appropriate legal mechanisms and safeguards for international transfers.

10. Children

PrismaSub is not directed to children under 13, or the minimum age required to consent to online services in their country. We do not knowingly collect personal information from children below that age.

11. Changes to this policy

We may update this policy as PrismaSub changes. We will revise the effective date above and provide additional notice when a change materially affects how we use personal information.

12. Contact

Questions, privacy requests, or concerns can be sent to support@prismasub.com.