Privacy Policy

This Privacy Policy explains how Kropee ("we", "us", "our"), collects, uses, stores, and shares information when you use our websites, applications, and related services that link to this policy (together, the "Services"), including our AI-assisted captioning and media features.

By using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services.

2.1Information you provide

• Account and profile: such as name, email address, and credentials when you register or sign in.
• Payment-related data: when you purchase coins or paid features, Polar (our payment provider) processes billing details on our behalf. We do not store full payment card numbers on our servers.
• Content you upload or generate: such as video or audio files, transcripts, captions, edits, and project metadata you choose to submit to the Services.

2.2Information collected automatically

• Device and usage data: such as browser type, operating system, approximate location derived from IP, pages viewed, and interaction events.
• Cookies and similar technologies: see Section 11.

2.3Information from third parties

We may receive limited information from authentication or analytics providers you connect with our Services.

We use information to:

• Provide, operate, and improve the Services, including AI-assisted caption generation and export features.
• Create and manage your account, process transactions, and provide customer support.
• Maintain security, detect abuse, and enforce our Terms of Service.
• Comply with legal obligations and respond to lawful requests.
• Send service-related notices and, where permitted, product updates (you may opt out of non-essential communications where applicable).

If you are located in the European Economic Area (EEA), United Kingdom, or a jurisdiction with GDPR-equivalent legislation, we rely on the following legal bases under Article 6 of the GDPR:

• Contract performance (Art. 6(1)(b)): Processing necessary to provide the Services you have requested — including account creation, caption generation, coin transactions, and customer support.
• Legitimate interests (Art. 6(1)(f)): Processing necessary for our legitimate interests, such as security monitoring, fraud prevention, product improvement, and analytics, where those interests are not overridden by your rights.
• Legal obligation (Art. 6(1)(c)): Processing required to comply with applicable law, including tax, financial record-keeping, and responding to lawful requests from authorities.
• Consent (Art. 6(1)(a)): Where we rely on consent (for example, for non-essential analytics cookies or marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

4A. Hong Kong Personal Data (Privacy) Ordinance (PDPO) If you access the Services from Hong Kong, the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO") also applies to our handling of your personal data. We collect and use personal data only for lawful purposes and in a manner consistent with the PDPO's six Data Protection Principles.

Under the PDPO, you have the right to:

• Data Access: Request a copy of the personal data we hold about you.
• Data Correction: Request correction of any personal data that is inaccurate.

To submit a Data Access Request or Correction Request, contact us via the Contact page. We will acknowledge your request and respond within 40 days as required by the PDPO. A fee may be charged for data access requests as permitted under the Ordinance. We will notify you of any applicable fee before processing your request.

To provide captioning and related features, your content may be processed by automated systems, including machine learning models operated by us or by subprocessors we engage. Processing is limited to what is needed to deliver the requested functionality. Do not upload content you are not entitled to share or that contains special categories of personal data unless you have a lawful basis to do so.

We may share information with:

• Service providers and subprocessors who assist us with hosting, storage, email, analytics, payment processing, security, and AI inference, bound by confidentiality and processing terms. Our current payment processor is Polar (Polar Software Inc.); billing-related data such as your email address, payment method details, and transaction metadata are shared with Polar to process your purchases. See Polar's Privacy Policy at polar.sh/legal/privacy.
• Professional advisers, regulators, or law enforcement when required by law or to protect rights, safety, and integrity of users or the public.
• A successor entity in connection with a merger, acquisition, or asset sale, subject to applicable law.

We do not sell your personal information as "sale" is commonly defined in privacy laws.

We retain different categories of data for different periods:

• Audio and video files you upload: retained for up to 30 days after your caption job is completed, after which source media files are permanently deleted from our storage.
• Transcripts and captions: retained while your account is active. You may request deletion of individual transcripts or projects at any time by contacting us (see Section 14).
• Account and billing records: retained while your account is active and for a period thereafter as required by applicable law (for example, financial records may be kept for up to 7 years for tax purposes).
• Usage logs and analytics data: retained on a rolling basis, typically up to 90 days.

If you delete your account, we will remove your uploaded source media and transcripts within 21 days of the deletion request. Some records (such as billing history and aggregated usage data) may be retained where required by law.

We implement appropriate technical and organizational measures designed to protect personal data. No method of transmission over the Internet is 100% secure.

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal data, to data portability, and to object to certain processing. If you are in the EEA or UK, you also have the right to lodge a complaint with your local supervisory authority (for example, the Information Commissioner's Office in the UK, or your EU member state's data protection authority). To exercise your rights, contact us as described in Section 14.

We may process and store information in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers, such as Standard Contractual Clauses.

We use cookies and similar technologies for essential operations, preferences, analytics, and security. See our Cookie Policy for more detail. You can control cookies through your browser settings; some features may not work if cookies are disabled.

The Services are not directed to children under the age where parental consent is required in their jurisdiction. We do not knowingly collect personal data from such children.

We may update this Privacy Policy from time to time. We will post the updated version and revise the "Last updated" date. For material changes, we will endeavour to provide reasonable advance notice.

For privacy questions, rights requests, or to request deletion of your data, please contact us via the Contact page on our website or at the contact details we provide there.