Privacy Policy

1. Introduction & Single Purpose Statement

Transflow ("we", "our", or "the Extension") is dedicated to protecting user privacy. The single purpose of Transflow is to provide real-time bilingual subtitle translation, speech-to-text audio transcription, natural text-to-speech audio dubbing, and AI-powered video summarization and interactive Q&A for educational, research, and accessibility purposes on supported web video platforms.

Transflow offers three clear service tiers: Free ($0) for standard real-time bilingual subtitle translation and natural Text-to-Speech (TTS) dubbing; Pro ($2.99 / 30 days — BYOK) unlocking personal API key connectivity for Groq and custom OpenAI-compatible endpoints, AI Video Summarizer, multi-turn Q&A, Whisper audio transcription, and full subtitle styling; and Ultra ($9.99 / 30 days — For Everyday Users) adding 10,000 Cloud AI Credits per 30-day cycle for instant zero-key access to managed Cloud AI models.

2. Data Collection (What User Data We Collect)

Transflow collects only the minimum categories of data strictly necessary to deliver its features when invoked by the user:

• Google Account Identity Data: When you sign in via Google OAuth 2.0 (openid, email, profile scopes), we collect your basic Google profile information: Google Account ID, email address, display name, and profile picture URL. We never collect or access your contacts, private emails, Google Drive files, or browsing history.
• Video Subtitle & Comprehension Content: When you activate subtitle translation, AI summarization, or interactive video Q&A on a supported web video, the Extension reads the active video's subtitle/transcript text segments, video title, and the questions or prompts you submit in the chat interface.
• User-Selected Audio Files (Optional — Pro & Ultra BYOK): When a Pro or Ultra user explicitly selects a local audio or video file for Speech-to-Text (Whisper) subtitle generation, the selected audio stream is read locally in the browser for transcription.
• User Preferences & Personal BYOK API Credentials: We store your chosen target languages, subtitle visual styling settings, Text-to-Speech (TTS) voice/speed settings, authentication session token, and optional Bring-Your-Own-Key (BYOK) API credentials (personal Groq API key or user-configured custom OpenAI-compatible endpoint URL/key) that you manually enter.
• No Financial or Payment Data in Extension: The Chrome Extension contains zero payment forms and does not collect, process, or store credit card numbers or banking credentials. Plan upgrades and credit top-ups are managed exclusively on our external web portal (https://usetransflow.com/billing).

3. Data Processing and Use (How We Process User Data)

• Authentication & Subscription Verification: Your Google Account Identity Data is processed by our backend server (https://usetransflow.com) to authenticate your login session, issue an encrypted authentication session token, and verify your subscription plan entitlement (Free, Pro, or Ultra) and 30-day cycle status.
• Real-Time Subtitle Translation & Audio Dubbing: Video subtitle segments are sanitized and processed in real time to generate bilingual subtitle overlays and synchronized Text-to-Speech (TTS) voiceover playback.
• AI Video Summarization, Q&A & Transcription: Video transcripts, user chat prompts, and user-selected audio files are processed on demand to generate structured video summaries, contextual Q&A answers, and time-synchronized subtitle captions.
• Strict Prohibition of Secondary Processing: We never process user data for targeted advertising, behavioral tracking, user profiling, creditworthiness evaluation, or training foundation AI models.

4. Data Storage, Retention, Quota Audit Logs, and Security

• Encrypted Server-Side Account Storage: Only your core account identity and entitlement record (Google Account ID, email address, display name, profile picture, subscription plan, credit balance, and 30-day cycle timestamps) is stored securely in our encrypted cloud database behind usetransflow.com.
• Minimal Quantitative Quota Audit Logs (Zero Content Retention): For Ultra Cloud AI usage accounting and billing reconciliation, our server records only minimal quantitative quota metadata (video identifier, token counts consumed, and credit cost/balance adjustments). We never log, store, or retain subtitle text, video transcripts, summaries, or Q&A conversation content in our database.
• Isolated Local Device Storage: Your UI preferences, target language settings, subtitle styling, authentication session token, and personal BYOK API keys are stored exclusively on your local device inside Chrome's isolated extension storage. Your BYOK API keys are never written to our server database.
• Ephemeral Processing & Direct Browser-to-Groq Whisper Audio: Subtitle segments, transcripts, AI prompts, and pass-through BYOK headers are processed strictly in ephemeral memory only for the duration of the active request and are immediately discarded upon completion. When Pro or Ultra users select an audio file for Speech-to-Text (Whisper) subtitle generation, the audio stream is transmitted directly over HTTPS from your browser to Groq's servers (api.groq.com) using your personal API key (BYOK), without passing through or being stored on Transflow's servers.
• Security Measures: All communications between the Extension, usetransflow.com, and external API endpoints are encrypted in transit using HTTPS/TLS 1.3.

5. Data Sharing and Third-Party Transfers

We do not sell, rent, trade, or transfer personal user data to data brokers, advertisers, or unauthorized third parties. User data is transmitted only to:

• Google LLC (accounts.google.com, www.googleapis.com, translate.googleapis.com): For OAuth 2.0 sign-in verification and standard translation / Text-to-Speech synthesis when active.
• Cloudflare, Inc. (usetransflow.com Cloud Infrastructure): For secure serverless API routing, automated traffic protection, and encrypted account record storage.
• Groq, Inc. (api.groq.com) & User-Configured Custom Endpoints (Pro & Ultra BYOK): Receives subtitle batches, prompts, or direct browser-to-Groq HTTPS Whisper audio streams authenticated with your personal BYOK API key solely to return the requested output.
• Commercial Cloud AI Inference Partners (Ultra Managed Cloud AI): When an active Ultra subscriber selects a managed Cloud AI model, sanitized subtitle batches or comprehension prompts are transmitted over encrypted HTTPS to our Commercial Cloud AI Inference Partners strictly to return the requested translation, summary, or Q&A response under zero-training API terms.

6. Chrome Extension Permissions Disclosure

Permission	Purpose & Scope
activeTab & scripting	Render and synchronize the customizable bilingual subtitle overlay and study panel on active web video pages.
storage	Save target languages, subtitle styling, TTS preferences, session token, and personal BYOK API keys locally in your browser.
identity	Authenticate Google OAuth 2.0 sign-in and verify subscription plan entitlements.
Host Permissions	Restricted strictly to supported video platforms, Google OAuth & Translation endpoints, usetransflow.com, and api.groq.com (including direct HTTPS Whisper audio transcription).

7. Google API Services User Data Policy & Limited Use Compliance

Transflow's collection, use, storage, and transfer to any other app of information received from Google APIs strictly adheres to the Google API Services User Data Policy, including all Limited Use requirements.

8. User Rights, Sign-Out Behavior, and Data Deletion Policy

• Sign-Out Behavior & Local Data Removal: When you click Sign Out inside the Extension popup, the Extension immediately deletes your authentication session token (session token) and cached account profile. Your personal BYOK API keys remain stored locally on your device for convenient reuse unless you manually clear them in API settings, clear extension storage, or uninstall the Extension.
• Revoking OAuth Access: Revoke Google OAuth 2.0 permissions at any time via Google Account Permissions.
• Server-Side Account Deletion: Request inspection or permanent deletion of your cloud account record and quota logs via support@usetransflow.com Open in Gmail Copy Email from your registered Google email address (processed within 7 business days).

9. Contact Us

For any privacy questions, compliance inquiries, or data deletion requests, contact our support team: support@usetransflow.com Open in Gmail Copy Email