1. Who we are
RixCaps (operated by RixCaps Site Operator) (“RixCaps”, “we”) provides the Service at https://rixcaps.com.
Data controller contact: privacy@rixcaps.com.
If you are in the European Economic Area (EEA), UK, or Switzerland, this Policy describes how we process personal data under the GDPR/UK GDPR where applicable. We currently do not maintain an EU Article 27 representative; contact us at the privacy email above.
2. What we collect
Account data: email address, password hash (if password login), Google account identifiers if you use Google Sign-In, and account timestamps.
Billing data: credit balance, order records, payment status, and processor references (e.g. PayPal or WeChat transaction IDs). Card numbers are handled by payment processors, not stored by us as full PAN data.
Usage/technical data: basic logs (IP address, user agent, error diagnostics), and optional local product analytics events stored in your browser for funnel debugging.
Optional cloud project metadata: project name, caption text/timings, style settings, cuts—if you choose to sync. Video files are not uploaded by default.
We do not intentionally collect special-category data. Do not upload content you are not allowed to process.
3. Local-first video processing
By default, video upload, on-device speech recognition, preview, and export run in your browser. Video blobs are stored locally (e.g. IndexedDB) on your device.
We design the product so that unpaid watermarked export and local transcription do not require sending your video to our servers.
If you enable optional cloud features, only the data categories described for that feature are transmitted.
4. Why we process data (legal bases)
Contract: create accounts, provide the editor, sell credits, fulfill clean exports.
Legitimate interests: secure the Service, prevent fraud/abuse, improve reliability (balanced against your rights).
Consent: non-essential cookies or similar technologies where required; Google Sign-In permissions as presented by Google.
Legal obligation: tax, accounting, or lawful requests where applicable.
5. Google Sign-In
If you choose “Continue with Google”, Google authenticates you and provides us with an ID token containing identifiers such as Google user id and email (subject to your Google account settings).
We use this only to create or log into your RixCaps account. See Google’s Privacy Policy for Google’s processing: https://policies.google.com/privacy
You can disconnect Google access via your Google account permissions; you may still request account deletion from us.
6. Payments (PayPal & WeChat Pay)
Payments are processed by PayPal and/or WeChat Pay under their terms and privacy policies.
We receive confirmation of payment success/failure and identifiers needed to credit your account. We do not sell your personal information.
7. Sharing
We share data with: infrastructure/hosting providers; payment processors; Google (only if you use Google Sign-In); and authorities when legally required.
We do not sell personal information as defined under the California Consumer Privacy Act (CCPA/CPRA).
8. International transfers
Servers or processors may be located outside your country, including the United States. Where GDPR applies, we rely on appropriate safeguards (e.g. standard contractual clauses used by processors) where required.
9. Retention
Account and ledger data: retained while the account is active and for a reasonable period afterward for disputes, fraud prevention, and legal compliance (typically up to several years for financial records where required).
Local video data: controlled by you on your device; clearing site data deletes local projects.
Logs: retained for a limited operational period unless needed for security investigations.
10. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, or port personal data, and to object to certain processing, and to withdraw consent.
EEA/UK users may lodge a complaint with a supervisory authority. Contact privacy@rixcaps.com to exercise rights. We may need to verify your identity.
California residents may request know/delete/correct rights and information about sharing; we do not sell personal information. Contact privacy@rixcaps.com.
11. Security
We use industry-reasonable measures (HTTPS, hashed passwords, access controls). No method of transmission or storage is 100% secure.
12. Children
The Service is not directed to children under 16. We do not knowingly collect personal data from children under 16.
13. Changes
We may update this Policy and will revise the “Last updated” date. Continued use after changes means you acknowledge the updated Policy.