Privacy Policy
This Privacy Policy explains how Translator ("the Service", "we", "our") collects, uses, stores, and shares personal information when you use it. Translator is a personal, non-commercial tool operated by an individual developer based in Romania. The data controller for purposes of the EU General Data Protection Regulation (GDPR) is the developer of the Service, contactable at btorjea@gmail.com.
1. Information we collect
Translator collects only the minimum information necessary to provide the dubbing and TikTok upload functionality:
| Category | What | Source | Why |
|---|---|---|---|
| Account | Email address, hashed password | You, at sign-up | Authenticate you to the Service |
| TikTok identity | TikTok open_id, granted scopes, access & refresh tokens |
TikTok OAuth, after you click "Connect TikTok" | Upload dubbed videos to your TikTok Drafts |
| Job content | Source TikTok URL, downloaded video, extracted audio, transcript, translated transcript, generated dub audio, final MP4 | You, when you submit a dubbing job | Produce the dubbed video you requested |
| Operational logs | Timestamps, job status, error messages | The Service | Debug and improve reliability |
Translator does not collect: payment information, location, contacts, browsing history, advertising identifiers, or any data about other TikTok users.
2. TikTok scopes and data accessed
When you connect your TikTok account, the Service requests only these scopes:
user.info.basic— read your basic profile (open id, display name, avatar) to confirm the connection in the UI.video.upload— upload a dubbed MP4 to your TikTok Drafts inbox. You explicitly publish the draft yourself from within TikTok; the Service never publishes on your behalf.
Translator does not read your videos, followers, analytics, direct messages, or any other TikTok data, and cannot modify or delete existing content on your TikTok account.
3. How we use information
Personal information is used exclusively to:
- authenticate you and protect your account;
- execute the dubbing job you submit (download, transcribe, translate, synthesise, mux);
- upload the resulting MP4 to your TikTok Drafts at your request;
- refresh expired TikTok tokens;
- maintain operational logs for debugging.
We do not use your data for advertising, profiling, automated decision-making with legal effects, or training AI models.
4. Legal bases for processing (GDPR)
- Performance of a contract (Art. 6(1)(b)) — running the dubbing job and the TikTok upload you requested.
- Consent (Art. 6(1)(a)) — connecting your TikTok account via OAuth.
- Legitimate interests (Art. 6(1)(f)) — basic logging to keep the Service reliable and secure.
5. Third-party processors
To produce the dubbed video, Translator transmits parts of your content to the following processors, each under their own privacy terms:
| Provider | What is sent | Purpose | Policy |
|---|---|---|---|
| OpenAI | Extracted audio, transcript text | Transcription (Whisper) and translation (GPT) | openai.com/policies/privacy-policy |
| ElevenLabs | Voice sample, translated text | Voice cloning and TTS synthesis | elevenlabs.io/privacy-policy |
| TikTok | OAuth tokens, dubbed MP4 | Authentication and draft upload | tiktok.com/legal/privacy-policy |
| Supabase | Account, job metadata, token records, generated files | Database, storage, authentication | supabase.com/privacy |
These providers are located in the United States and the European Union. Transfers outside the EEA rely on Standard Contractual Clauses where applicable.
6. Data retention
- Account data: kept until you delete your account.
- TikTok tokens: kept until you disconnect TikTok from the Service or revoke access at tiktok.com/setting/manage-app-permissions.
- Job artefacts (downloaded videos, transcripts, audio, MP4): kept for up to 30 days, then deleted automatically.
- Operational logs: kept for up to 90 days.
7. Your rights
Under the GDPR and similar laws you have the right to:
- access the personal information we hold about you;
- request correction of inaccurate data;
- request deletion of your data ("right to be forgotten");
- request restriction of processing;
- data portability;
- withdraw consent at any time (e.g. by disconnecting TikTok);
- lodge a complaint with your local data protection authority.
To exercise any of these rights, email btorjea@gmail.com. We will respond within 30 days.
8. Account and data deletion
You can:
- disconnect TikTok at any time from the Service settings (deletes stored TikTok tokens);
- revoke access from TikTok directly at tiktok.com/setting/manage-app-permissions;
- request full account deletion by emailing btorjea@gmail.com — all account data, tokens, and job artefacts are permanently deleted within 30 days.
9. Security
API keys, OAuth tokens, and uploaded files are stored in Supabase with row-level security so that each user can only access their own data. Connections to all third-party APIs use TLS. No security system is perfect — please use a strong, unique password and notify us immediately if you suspect unauthorised access.
10. Children
The Service is not directed to anyone under 18 and we do not knowingly collect data from minors. If you believe a minor has provided us with personal information, contact us and we will delete it.
11. Changes to this Policy
We may update this Privacy Policy from time to time. The "Last updated" date will reflect the most recent revision. Material changes will be announced in-app or by email where appropriate.
12. Contact
Questions, complaints, or data requests: btorjea@gmail.com