Privacy Policy: Data & Transcript Security

Scope

TokScript turns public TikTok and YouTube video links into transcripts and downloadable subtitles. This policy describes the information used for that service and its account, billing and support features.

Information Used

• Account information: the name, email address and authentication information you provide to create or access an account.
• Video and transcript information: submitted public video links, video metadata, transcription requests and results, your text corrections, task status and ownership information.
• Cookies and trial limits: authentication and preference cookies, plus a high-entropy anonymous cookie that proves ownership of temporary tasks. An IP-derived identifier and the UTC date are used to enforce the daily trial limit. Trial attempts count even when a source fails.
• Billing records: order, subscription and credit-usage information needed to provide paid access. Payment processing is handled by the configured third-party payment processor; TokScript does not store full payment-card numbers.
• Support information: the ticket text, replies and optional attachments you submit through support.

Processing and Service Providers

We use this information to operate transcription, restore owned results, apply trial and credit limits, maintain accounts and billing, respond to support requests, and prevent unauthorized use.

Submitted video links and metadata/transcription requests are processed through our designated third-party media processing and cloud transcription service providers to retrieve and process the public source. TokScript receives the resulting metadata, job status and transcript. Third-party providers process information under their own policies; this page does not promise that provider-held data follows TokScript's access periods.

Authentication, payment, email or attachment-storage providers may also process information when the corresponding configured feature is used. Information may also be disclosed where required by applicable law or to protect rights and safety.

The example section includes an official TikTok video player. Loading it connects your browser directly to TikTok, which may process connection information and use cookies under its own policies.

When enabled, our self-hosted Umami service at umami.look88.cc receives public-page visits, limited marketing attribution and product events such as submitting a transcription, exporting subtitles or opening checkout. Private account, history, administration and authentication pages are excluded. Task/token parameters, video links, transcript text, email addresses and account identifiers are not sent as analytics properties; referrers are reduced to their origin. Browser analytics respects available Do Not Track and Global Privacy Control signals and Umami's local opt-out flag. This does not prevent normal service requests or network connection logs.

Separate Umami server-side payment events contain the product, currency, actual amount paid and purchase/renewal type, without account or order identifiers. They are not linked to a browser session, and browser opt-out signals cannot automatically be associated with Stripe webhook requests. Billing records remain separate from analytics.

When enabled, our private Voyage operations monitor receives account registrations, transcription status, order and credit identifiers, credit movements and Stripe payment status to help investigate service and billing failures. Transcript text, video links and titles, passwords and provider keys are not included in these events. Authorized operators may look up the current email address for a referenced account in the private monitoring dashboard; email addresses are not included in the original events. Operational monitoring is separate from optional browser analytics.

Result Access Periods

• Anonymous results are temporarily accessible for 24 hours.
• Signed-in trial results are accessible for seven days. Explicitly saving your current anonymous result adds it to your signed-in history without transcribing it again.
• Paid results are accessible for 30 days.

After expiry, TokScript no longer provides the transcript body. You can delete your own transcript history. Expiry or history deletion limits product access; it is not a guarantee of immediate physical erasure from databases, backups or provider systems. Account, billing, security and support records are separate from transcript access periods.

Security and Requests

The service uses authentication and task-ownership checks to limit access. No system can guarantee absolute security.

You can edit available transcripts, download SRT/VTT/TXT files and delete your own history. These features are not a complete personal-data export. There is currently no self-service account-deletion or full personal-data-export control. If you need to delete your account or personal data, or have any privacy inquiries, email support@tokscript.org without signing in, or submit a support ticket when signed in. Do not send account passwords or provider keys by email or in a ticket.

Policy Changes

We may update this policy as the service changes. The date at the top identifies the latest revision.