Privacy Policy

1. Data Controller

The data controller responsible for processing personal data on this website is:

2. Categories of Personal Data We Collect

2.1 Account Information

• Name and email address
• Password (encrypted)
• Account preferences and settings
• Profile information (optional)

2.2 Billing Information

• Company name (if applicable)
• Billing address
• VAT identification number (if applicable)

2.3 Usage Data

• Translation history and preferences
• Credit balance and purchase history
• Feature usage patterns
• Language preferences

2.4 Technical Data

• IP address
• Browser type and version
• Device information
• Access timestamps

3. Purpose and Legal Basis for Processing

We process personal data based on the following legal grounds under Article 6 GDPR:

4. Data Retention

User Files (Subtitles)

Retained until manual deletion by user. Users control their own data.

Video Files (Future Feature)

Temporary storage only. Automatically deleted after analysis.

Account Data

Retained for 7 years after account deletion for legal compliance.

Technical Logs

Retained for 90 days for security and debugging.

5. Data Recipients and Third Parties

We share personal data with the following categories of recipients:

• AI Service Providers: Anthropic and OpenAI for translation processing. Only subtitle text is transmitted.
• Payment Processors: PayPal and Stripe for secure payment processing.
• Hosting Providers: For website and data hosting infrastructure.
• Email Services: Amazon SES for transactional emails.

All processors are bound by data processing agreements ensuring GDPR compliance.

6. International Data Transfers

Some service providers are located outside the EEA. For transfers to third countries, we rely on:

• EU Standard Contractual Clauses
• Adequacy decisions by the European Commission
• Supplementary measures as required by Schrems II decision

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of Access (Art. 15): Obtain confirmation and a copy of your personal data
• Right to Rectification (Art. 16): Correct inaccurate personal data
• Right to Erasure (Art. 17): Request deletion of your personal data
• Right to Restriction (Art. 18): Limit processing in certain circumstances
• Right to Data Portability (Art. 20): Receive your data in a structured format
• Right to Object (Art. 21): Object to processing based on legitimate interests
• Right to Withdraw Consent (Art. 7): Withdraw consent at any time

To exercise these rights, contact us at privacy@wocoo.tv

8. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. The competent authority in Austria is:

9. Cookies and Tracking

We use only essential cookies: session cookies for authentication, language preference cookies, and security tokens. We do not use tracking cookies.

10. Security Measures

We implement appropriate technical and organizational measures to protect your data:

• TLS/SSL encryption for all data transmission
• Encrypted storage for sensitive data
• Access controls and authentication requirements
• Regular security audits and updates
• SHA-256 file integrity checking

11. Changes to This Policy

We may update this privacy policy from time to time. Significant changes will be communicated via email or notice on our website.