Privacy Policy

1. Information we process

Media and job information

We process the source file you choose, requested service, filename, file type and size, duration, language, output dimensions, style, job status, timestamps, price, download count, and generated output. Karaoke jobs may include lyrics you provide. Localized-subtitle jobs include subtitle text that needs translation.

Guest-device information

The site creates a random visitor identifier in browser storage. Our service stores a salted one-way hash of that identifier for anonymous visitor counting, promotion limits, fraud prevention, and service protection. We do not use it to create a named user profile.

Payment information

Paddle processes customer identity, billing address, payment method, taxes, receipts, refunds, and chargebacks as merchant of record. Sanfausone receives transaction identifiers, status, purchased items, quantity, and related order information. We do not receive or store complete card numbers.

Technical information

Infrastructure providers may process IP address, browser details, timestamps, request information, security events, and diagnostic logs needed to deliver and protect the service.

2. Why we process it

• to calculate a quote and provide the requested render;
• to verify payment or a valid promotional credit;
• to provide status, recovery links, downloads, and retry credits;
• to detect misuse, enforce limits, secure files, and troubleshoot failures;
• to maintain anonymous service statistics and operational records;
• to comply with legal, tax, accounting, dispute, and fraud-prevention obligations.

Depending on applicable law, these activities rely on performing our contract with you, legitimate interests in operating and securing the service, consent where requested, and compliance with legal obligations.

3. Local browser storage

We use essential browser storage rather than a user account to retain your random visitor identifier, recent private-job shortcuts, Paddle environment configuration, and interface state. Clearing the site’s storage may remove recent-job links from that device. Save the private link or QR code separately.

Payment checkout may use technologies controlled by Paddle under Paddle’s privacy and cookie notices.

4. Service providers and disclosures

Information is shared only as necessary with service providers performing work for Sanfausone, including:

• Paddle, for checkout, merchant-of-record services, tax, receipts, refunds, and payment risk;
• Cloud infrastructure providers, for application delivery, temporary object storage, databases, security, and logs;
• OpenAI or another disclosed language provider, when you request a feature that requires machine translation or language processing;
• the authorized private processing workstation, which retrieves paid jobs and performs media rendering.

We may also disclose information when required by law, to protect legal rights and service security, or as part of a legitimate business transfer. We do not sell customer media or personal information.

5. Media retention

Standard source media and outputs are temporary and normally scheduled for deletion within 24 hours. Signed upload and download links expire sooner. Job metadata, payment records, security logs, failed-job details, and promotional-use records may be retained longer where needed for support, accounting, fraud prevention, legal compliance, and dispute resolution.

A failed job’s recovery promotion may remain available for up to seven days even when its source media has already been deleted.

6. Security

We use private storage, short-lived access links, restricted service credentials, payment verification, renderer authentication, download limits, and automatic cleanup controls. No system is completely secure, so you should avoid submitting unnecessary confidential information and keep recovery links private.

7. International processing

Our providers and processing systems may operate in countries other than yours. Where required, we rely on provider safeguards and lawful transfer mechanisms. By ordering the service, you understand that temporary processing may occur across borders.

8. Your choices and rights

Depending on your location, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent for applicable personal information. Because standard jobs are not attached to an account, include the private job link or transaction reference needed to locate your request. Do not send complete payment-card information.

You may contact appsteam@heldandbell.com. We may need to verify that you control the relevant job link or payment record.

9. Children

The service is not directed to children, and standard paid orders are intended for adults who can enter a contract. Contact us if you believe a child has submitted personal information without appropriate authorization.

10. Updates and contact

We may update this policy as the service or applicable law changes. The effective date shows the current version. Privacy questions can be sent to appsteam@heldandbell.com.