Privacy Policy
Last updated: October 30, 2026
This policy explains how SRTly handles account, subtitle, usage, and payment information when you use the service.
Information we process
We store your email address, authentication credentials in hashed form, credit transactions, translation jobs, and payment status. Subtitle text and glossaries are processed to provide the translation service. We also keep security logs containing truncated event details and salted hashes of IP addresses and device identifiers.
How subtitle content is used
Subtitle text is sent to our configured AI processing provider solely to generate your requested translation. Original and translated SRT content remains in your job history until you delete the job. We do not sell subtitle content or use it to advertise to you.
Payments
PayPal and Lemon Squeezy process payment credentials directly. SRTly does not store full card numbers. We receive transaction identifiers, amounts, currencies, subscription status, and limited billing metadata required to credit your account and prevent fraud.
Cookies and security
We use essential cookies for sign-in sessions, CSRF protection, abuse prevention, and a random device identifier. These are not advertising cookies. Rate limits and security events help protect free credits and paid capacity. We also record first-party analytics events such as page path, referrer, and the tool being viewed to measure conversion; these stay in our own database, are not shared with advertising networks, and are removed by the retention job.
Retention, export, and account deletion
You can delete completed, failed, or cancelled translation jobs from the job page, which removes their subtitle text from the active application database. Signed-in users can also download a machine-readable JSON copy of their account data from the Account page, and permanently delete their account there after confirming with their password. Account deletion removes the profile, task history and outputs, task templates, and linked sign-in identities, de-identifies AI usage and security records, and forfeits any remaining credits. Payment, subscription, and credit ledger records are retained in anonymized form where required for accounting, tax, fraud prevention, or legal obligations. Payment provider webhook records are removed by the routine retention job after 30 days. Operational backups and financial records may be retained where necessary for security, fraud prevention, accounting, or legal obligations.
Service providers and international processing
Hosting, email, AI, and payment providers may process data in other countries. We only share the information needed for their respective service. Their own privacy terms also apply.
Chat and support widget
When support chat is enabled, this site loads the Crisp messaging widget. Crisp may process your IP address, browser metadata, and the content of messages you send to us. The widget is disabled when no support channel is configured, and Crisp's own privacy terms also apply.
Your choices
You can export or delete your account data from the Account page, delete subtitle jobs, manage subscriptions through your payment provider, and request assistance with account or privacy questions by contacting [email protected].