Last updated: 2026-08-05 | Version 1.0
Captivo is operated by Dmytro Yefremenko. To run the Service we rely on the providers below, which process personal data on our behalf. This page is the list referenced by our Privacy Policy and is kept current here, so that adding or replacing a provider does not require rewriting the policy.
| Subprocessor | Purpose | Data involved | Region | Policy |
|---|---|---|---|---|
| RunPod | GPU speech recognition | Extracted audio | US/EU | Privacy |
| Cloudflare R2 | Temporary storage of extracted audio, deleted after processing | Extracted audio | EU | Privacy |
| DeepL | Translation of transcripts (backup provider) | Transcript text | Germany | Privacy |
| Google (Gemini API) | Translation of transcripts (primary provider, paid tier: prompts are not used to train models) | Transcript text | US | Privacy |
| Neon | Database hosting | Account data, transcripts, translations, usage records | US | Privacy |
| Heroku (Salesforce) | Backend application hosting | Everything the backend handles, in transit | US | Privacy |
| Vercel | Frontend hosting and CDN | Request metadata (IP address, user agent) | US/global | Privacy |
| Google (Sign-in) | Optional sign-in with Google (OAuth) | E-mail address, name, Google account identifier | US | Privacy |
| Sentry | Error monitoring; masked replay of sessions where an error occurred | Technical error reports, internal account identifier, masked replay | US | Privacy |
| Resend | Transactional e-mail (verification, notifications) | E-mail address, message content | US | Privacy |
| MaxMind | Country lookup (GeoLite2 web service) for security logs and the blocked-country check | IP address | US | Privacy |
| Paddle | Merchant of Record: checkout, billing, taxes (independent controller, not our processor) | Billing details and payment data (we never receive card numbers) | UK/US | Privacy |
| PostHog | Product analytics (loads only after opt-in consent; session recording disabled) | Usage events, page views (no transcript content) | EU (Frankfurt) | Privacy |
Paddle is our Merchant of Record and acts as an independent controller for payment data rather than as our processor; it is listed here so the picture is complete.
Where providers are outside the EU/EEA, transfers rely on the EU-US Data Privacy Framework or Standard Contractual Clauses in the provider's data processing agreement.
Your video files are not in this list because they never leave your browser: only the extracted audio is sent for processing, and it is deleted from storage right after transcription.
This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.
When we add or replace a subprocessor we update this page and bump the version above. Material changes are also announced by e-mail or in the app, as described in the Privacy Policy.
Questions: privacy@captivo.app. See also the Privacy Policy and Terms of Service.