Privacy Policy
Last updated: 21 October 2026
- You sign in with Google. We get your name, email address and profile picture, nothing else from your Google account.
- Your audio is sent to ElevenLabs to be transcribed. Uploaded audio is deleted from our server within 24 hours; uploaded video is deleted as soon as its sound has been extracted.
- We keep your transcripts so you can edit and download them, until you delete them or ask us to.
- We don't sell your data, show ads, or use your audio or transcripts to train AI models.
1. Who we are
Kalam Mazboot ("we", "us") is a subtitle service at kalammazboot.com. You upload audio, video or a link, and we give you subtitle files (SRT, VTT, text). For anything about your data, email a.m.osman011@gmail.com.
2. What we collect
- Account details from Google: your name, email address, profile picture and the fact that Google has verified your email. We never see your Google password.
- What you upload: audio and video files, or links to them (for example YouTube or TikTok), and the file names.
- What we produce and you edit: transcripts with word timings, your edits, speaker names, subtitle layout choices, presets, and spelling lists (key terms and learned fixes).
- Usage records: each file's length, language, status, processing cost and dates, and when you last signed in. These are used for limits, billing and support.
- Technical data: a sign-in cookie, and standard server logs (IP address, browser, pages requested, errors) kept for security and to fix problems.
3. How we use it
- To transcribe your files and produce, store and let you edit your subtitles.
- To run your account: sign-in, usage limits, billing and support.
- To keep the service secure and working, and to prevent abuse.
- To improve accuracy for you: spelling fixes you make can be remembered and applied to your future transcripts.
We process your data to provide the service you asked for (performance of a contract), to keep it secure (legitimate interest), and where the law requires it.
4. Service providers
We use a small number of companies to run the service. They process data only on our instructions.
| Provider | What for | Data they receive |
|---|---|---|
| ElevenLabs (Eleven Labs Inc.) |
Speech-to-text transcription | Your audio, or the link you submitted, plus your key terms and language choice. ElevenLabs processes this under its Data Processing Agreement and Privacy Policy. We have opted out of ElevenLabs using our customers' content to train its models. |
| Sign-in, and web fonts | Google confirms who you are when you sign in. Loading the page's fonts from Google means your browser shares your IP address with Google. | |
| Hostinger | Server hosting (France, EU) | Everything stored by the service sits on this server. |
When we add payments, the payment provider will receive the details needed to charge you; we will list it here before it goes live. We never store full card numbers.
5. How long we keep it
- Uploaded audio: deleted within 24 hours of upload.
- Uploaded video: deleted as soon as its sound has been extracted.
- Links: kept with the file's record so you can see where it came from; the linked video is not stored by us.
- Transcripts and subtitles: kept until you delete them or close your account.
- Account details: kept while your account is open, and deleted within 30 days of you asking us to close it.
- Server logs and backups: kept for up to 14 days.
6. Who can see your files
Your files and transcripts are visible to you and to the people you share a workspace with. Our administrators can access them only when needed to run the service, investigate abuse, or help you when you ask.
7. Where your data goes
Our server is in the European Union. ElevenLabs and Google may process data in the United States and other countries; they provide safeguards for those transfers in their data processing terms.
8. Your rights
You can ask us to give you a copy of your data, correct it, delete it, or stop processing it, and you can object to how we use it. Email us at the address above and we'll reply within 30 days. If you're unhappy with our answer, you can complain to your local data protection authority.
9. Security
Traffic is encrypted (HTTPS), sign-in tokens are stored only as secure hashes, the server is firewalled, and access to it is restricted. No system is perfectly secure, and we'll tell you without undue delay if a breach affects your data.
10. Cookies
We use one cookie to keep you signed in, and a short-lived one during Google sign-in. We don't use advertising or tracking cookies.
11. Children
The service is not meant for children under 16, and we don't knowingly collect their data.
12. Changes
If we change this policy in a way that matters, we'll update the date above and tell signed-in users before the change takes effect.