Privacy Policy

GroBaz (grobaz.com) is run by an individual based in Pakistan, as a sole operator. It is not yet a registered company. In this policy, “we” and “us” mean that operator.

For anything about your data, email support@grobaz.com.

Your account

• Your name, email address and password. The password is stored only as a one-way hash — we can't see it.
• If you sign in with Google instead: the name, email address and profile picture from your Google account. We never see your Google password.
• A profile picture, if you upload one.

We use these to create your account, sign you in and contact you about your account.

Your content

• The videos you upload, and a thumbnail image we make from each one.
• The audio we extract from each video, which is what gets transcribed.
• Transcripts (including the Roman-script version, if you choose it), your caption edits and styles.
• The videos and subtitle files you export.

We use your content only to provide the service to you: transcribing, editing, previewing and exporting.

Usage

How many minutes you've transcribed, how much storage you use and how many exports you've made, per billing period. We use these to apply your plan's limits and to show you what's left.

Technical data

• Your IP address and browser user agent, stored with your sign-in session. We use them to keep your session secure and to rate-limit requests (for example, repeated sign-in attempts).
• A record of the verification and password-reset emails we send you: the address, the type of email, when it was sent and whether it was delivered.

Payments

When paid plans are available, payments will be handled by [payment provider — to be added]. They collect your payment details directly; we never see or store your full card number. We receive what we need to run your subscription, such as your plan, payment status and billing dates.

You own the videos you upload and the captions and videos you create. We process them only to provide the service to you.

• We do not sell your data — not your account details, not your content, not anything else.
• We do not use your content to train AI models, our own or anyone else's.
• None of the third parties we use trains on your content (see the next section for what each of them receives).

These companies process data for us, only to provide GroBaz. Each receives only what's listed here.

• ElevenLabs — receives the audio extracted from your video, to turn speech into text. We have switched off ElevenLabs' option to use submitted audio to improve its models; ElevenLabs has confirmed to us that this setting covers everything our account sends, including through its API. (As ElevenLabs notes, the setting applies from when it was switched off.)
• Google Gemini — receives the transcript text, only when you choose Roman script for Urdu or Hindi, to convert it into Roman letters. We use Gemini's paid tier, under which Google does not use prompts or responses to improve its products and they are not reviewed by people; Google keeps them for a limited time only to detect abuse of its service.
• Google — if you choose “Sign in with Google”, Google confirms your identity and shares your name, email address and profile picture with us.
• Resend — receives your email address and the content of verification and password-reset emails, to deliver them.
• Cloudflare — DNS, hosting and file storage: your content and account data pass through or are stored on Cloudflare's infrastructure.
• Hetzner — provides the servers our backend runs on, which process and store your content and account data.
• [payment provider — to be added] — once paid plans are available, processes payments and receives the details needed to charge you.

These providers operate data centres outside Pakistan, so your data may be stored and processed in other countries.

• Exported videos are deleted automatically 24 hours after they're made. Download them before then.
• Projects — the uploaded video, its extracted audio, thumbnail, transcript and captions — are kept until you delete them. Deleting a project permanently deletes all of its files and data; it can't be undone.
• Account data, usage records and email records are kept for as long as you have an account.

Deleting your account

You can delete any project yourself at any time. To delete your whole account, email support@grobaz.com from the address you signed up with (there isn't a delete-account button yet). Within 30 days we permanently delete your account and everything stored for it: all projects and their files, transcripts, captions, usage records, sessions and the record of emails sent to you. We'll confirm by email when it's done. If you have a paid plan, cancel it first; records that the law requires us to keep for payments may be kept for as long as required.

We use no advertising or tracking cookies, and no third-party analytics. What we do store in your browser:

• A session cookie that keeps you signed in. It's httpOnly, so scripts on the page can't read it.
• A small “signed in” hint cookie on our website, used only to send you to the right page (your dashboard or the sign-in page). It contains no personal data.
• Browser local storage for preferences on this device: panel sizes, the last spoken language and script you picked, safe-zone settings, and the caption presets and favourite templates you save, plus the id of the last account signed in on this browser (so we can tell when someone else signs in). These stay in your browser and aren't sent to us.

Signing out clears the hint cookie and this stored data from that browser, except panel sizes and that last account id, which say nothing about your content.

Connections to GroBaz are encrypted (HTTPS), passwords are stored only as hashes, and your projects can only be reached by your own signed-in account. No service can promise perfect security, but if we learn of a breach that affects your data, we'll tell you by email without undue delay.

You can:

• see and change your name and profile picture on your profile page;
• download your exported videos and subtitle files;
• delete any project, or ask us to delete your account (see above);
• ask us for a copy of the personal data we hold about you, or to correct it.

Email support@grobaz.com and we'll reply within 30 days. Depending on where you live, you may have further rights under your local law; we'll honour them.

GroBaz is not for children under 13, and we don't knowingly collect data from them. If you believe a child under 13 has an account, tell us and we'll delete it. See the Terms of Service for the rules for users under 18.

When we change this policy we'll update the date at the top. If a change affects how we use your data in a significant way, we'll email you before it takes effect.