Privacy Policy for Suubty

Last Updated: November 16, 2025

Thank you for using Suubty ("we," "us," or "our"). This Privacy Policy outlines how we collect, use, protect, and process your personal data when you use our website at https://www.suubty.com (the "Website") and our video translation and generation services (the "Services").

By accessing or using our Website and Services, you agree to this Privacy Policy. This policy complies with the General Data Protection Regulation (GDPR) and Belgian data protection laws.

DATA CONTROLLER

Suubty
Email: [email protected]
Jurisdiction: Belgium

1. INFORMATION WE COLLECT

1.1 Personal Data

We collect the following personal information:

• Name: To personalize your experience and identify your account
• Email Address: For account creation, authentication, service notifications, and customer support
• Payment Information: Credit card details and billing information processed securely by Stripe. We do not store complete payment card details on our servers
• Account Credentials: Encrypted passwords and authentication tokens
• User Profile Data: Profile pictures, preferences, and settings

1.2 Video Content

• Video Files: Videos you upload for translation or generation services
• Video Metadata: File size, duration, format, upload timestamp
• Processing Data: Translation language preferences, generation prompts, editing preferences
• Storage Duration: Uploaded and generated videos are stored for 24 hours and then automatically deleted from our servers

1.3 Usage Data

• IP Address: For security, fraud prevention, and analytics
• Browser Type and Version: To optimize service delivery
• Device Information: Operating system, device type, screen resolution
• Usage Analytics: Pages visited, features used, time spent, click patterns
• Cookies and Similar Technologies: See Cookie Policy below

1.4 Communication Data

• Support Correspondence: Messages sent through our support channels
• Feedback and Reviews: Any feedback you provide about our services

2. LEGAL BASIS FOR PROCESSING (GDPR)

We process your personal data under the following legal bases:

• Contract Performance: To provide our video translation and generation services
• Legitimate Interests: To improve our services, prevent fraud, and ensure security
• Legal Obligations: To comply with tax, accounting, and other legal requirements
• Consent: For marketing communications (you can withdraw consent at any time)

3. PURPOSE OF DATA COLLECTION

We use your data for:

• Service Delivery: Processing video translations, generating AI videos, managing your credit balance
• Account Management: Creating and maintaining your account, authentication, security
• Payment Processing: Processing credit purchases and managing transactions
• Customer Support: Responding to inquiries, troubleshooting issues, providing assistance
• Service Improvement: Analyzing usage patterns, fixing bugs, developing new features
• Security: Detecting and preventing fraud, abuse, and unauthorized access
• Legal Compliance: Meeting regulatory requirements, responding to legal requests
• Communications: Sending transactional emails, service updates, and (with consent) marketing materials

4. DATA SHARING AND THIRD-PARTY PROCESSORS

We share your data with trusted third-party service providers who assist in operating our services:

4.1 Payment Processing
• Stripe, Inc. (USA) - Payment processing and billing
  Purpose: Secure credit card processing
  Data shared: Name, email, payment details
  Privacy policy: https://stripe.com/privacy

4.2 Cloud Infrastructure
• Supabase (USA) - Database and file storage
  Purpose: Storing user data, authentication, video file storage
  Data shared: Account data, video files, metadata
  Privacy policy: https://supabase.com/privacy
  Note: Videos are automatically deleted after 24 hours

• MongoDB Atlas (USA) - Database services
  Purpose: User account and transaction data
  Data shared: Account information, credit balance, transaction history
  Privacy policy: https://www.mongodb.com/legal/privacy-policy

4.3 AI Processing
• Replicate (USA) - AI video processing infrastructure
  Purpose: Video translation and generation processing
  Data shared: Video files, processing parameters
  Privacy policy: https://replicate.com/privacy
  Note: Videos are processed temporarily and not retained by Replicate

• OpenAI (USA) - AI enhancement services
  Purpose: Prompt enhancement for video generation
  Data shared: Text prompts, generation parameters
  Privacy policy: https://openai.com/policies/privacy-policy

4.4 Content Delivery
• Cloudflare (USA) - CDN and security services
  Purpose: Website performance, DDoS protection, caching
  Data shared: IP addresses, browser data, request data
  Privacy policy: https://www.cloudflare.com/privacypolicy/

4.5 Analytics and Monitoring
• Upstash (USA) - Rate limiting and caching
  Purpose: API rate limiting, performance optimization
  Data shared: IP addresses, request patterns
  Privacy policy: https://upstash.com/privacy

• Sentry (USA) - Error monitoring
  Purpose: Tracking and fixing technical errors
  Data shared: Error logs, user IDs (anonymized)
  Privacy policy: https://sentry.io/privacy/

We do NOT sell, rent, or trade your personal data to third parties for their marketing purposes.

5. DATA RETENTION

• Account Data: Retained while your account is active and for 30 days after account deletion
• Video Files: Automatically deleted 24 hours after upload or generation
• Transaction Records: Retained for 7 years as required by Belgian accounting law
• Usage Analytics: Aggregated and anonymized after 12 months
• Support Communications: Retained for 2 years

6. YOUR RIGHTS UNDER GDPR

As a data subject in the European Union, you have the following rights:

• Right to Access: Request a copy of your personal data we hold
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data
• Right to Restriction: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing communications at any time
• Right to Lodge a Complaint: File a complaint with the Belgian Data Protection Authority (APD/GBA)

To exercise these rights, contact us at: [email protected]

We will respond to requests within 30 days as required by GDPR.

7. DATA SECURITY

We implement appropriate technical and organizational measures to protect your data:

• Encryption: Data encrypted in transit (TLS/SSL) and at rest (AES-256)
• Access Controls: Role-based access, multi-factor authentication for staff
• Secure Infrastructure: Industry-standard cloud security practices
• Regular Audits: Security assessments and vulnerability testing
• Data Minimization: We collect only necessary data
• Automatic Deletion: Videos deleted after 24 hours to minimize data retention

Despite these measures, no internet transmission is 100% secure. We cannot guarantee absolute security.

8. INTERNATIONAL DATA TRANSFERS

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States. We ensure appropriate safeguards through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable
• Service providers' compliance with GDPR-equivalent protections

9. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies:

Essential Cookies (Required):
• Authentication tokens: Keep you logged in
• Security tokens: Prevent CSRF attacks
• Session management: Maintain your session state

Analytics Cookies (Optional):
• Usage analytics: Understand how you use our services
• Performance monitoring: Identify and fix issues

You can control cookies through your browser settings. Disabling essential cookies may impact service functionality.

10. CHILDREN'S PRIVACY

Suubty is not intended for children under 16 years of age. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us immediately at [email protected], and we will delete it promptly.

11. AUTOMATED DECISION-MAKING

We do not use automated decision-making or profiling that produces legal effects or significantly affects you.

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or service features. We will:

• Post the updated policy on this page with a new "Last Updated" date
• Notify you via email for material changes
• Require your consent for changes that expand data collection or sharing

Continued use of our services after changes constitutes acceptance of the updated policy.

13. THIRD-PARTY LINKS

Our Website may contain links to third-party websites. We are not responsible for the privacy practices of these sites. Please review their privacy policies independently.

14. DATA PROTECTION AUTHORITY

If you have concerns about our data practices, you can contact the Belgian Data Protection Authority:

Gegevensbeschermingsautoriteit (GBA) / Autorité de protection des données (APD)
Drukpersstraat 35, 1000 Brussels, Belgium
Phone: +32 2 274 48 00
Email: [email protected]
Website: https://www.gegevensbeschermingsautoriteit.be

15. CONTACT INFORMATION

For privacy-related questions, data access requests, or exercising your GDPR rights, contact us at:

Email: [email protected]
Subject: Privacy Inquiry

We will respond within 30 days.

By using Suubty, you acknowledge that you have read and understood this Privacy Policy.