FastZM takes your privacy seriously. This policy explains what we collect when you use the service, how we use it, who we share it with, how long we keep it, and your rights.
What we collect
Information you give us:
- Account details: your email address, your password (stored only in a form that can’t be reversed) and your interface language.
- What you upload: the audio and its file name, the project names and transcription hints you enter, and the subtitles you edit. When you upload a video, your browser extracts the audio on your device and uploads only that; the picture never leaves your device.
- Orders: the plan or credits you buy, the amount, currency and payment method, and the transaction number the payment provider gives back.
Information created as you use the service:
- Sign-ins: the IP address and browser you sign in from, to keep you signed in and spot unusual sign-ins.
- Tasks and credits: each task’s status, the file’s length and what was used, and every credit granted or spent.
- Security: to prevent bulk sign-ups and abuse, we limit how often requests can be made from an IP address or for an email address.
We never see or store your card number or payment account password; you enter them only on the payment provider’s pages.
How we use it
- To provide the service: uploading, transcribing, polishing, translating, reviewing and exporting subtitles;
- For billing: setting aside, charging and granting credits, and handling orders and refunds;
- To contact you: verification codes and notices about your account, orders and tasks;
- To keep things safe: confirming it’s you, preventing bulk sign-ups, fraud and abuse, and fixing problems;
- To meet legal requirements.
We don’t use your information for advertising, and we don’t sell your personal information.
Who we share it with
To provide the service, we pass what’s needed to the providers below. They may use it only to provide their service:
- Speech recognition: Deepgram and AssemblyAI process the audio you upload and return the transcript.
- Large language models: when subtitles are polished or translated, their text is sent to the model provider we use, such as Anthropic, OpenAI or a service compatible with their APIs.
- Storage: Cloudflare R2 holds uploaded files.
- Payments: Stripe, and the payment provider that collects Alipay and WeChat Pay payments. We only receive the result and a transaction number.
- Email: our email delivery provider, such as Mailgun, sends verification codes and notices.
These providers may process data outside your country or region, for example in the United States.
Beyond that, we only disclose information to authorities when the law requires it, or when it’s genuinely needed to protect the safety or property of you, other users or the public. If we’re involved in a merger, acquisition or sale of assets, we’ll require the recipient to keep to this policy.
How long we keep it
- Uploaded files: deleted automatically 7 days after upload. Uploads that never finish are cleared within a day.
- Transcripts and subtitles, including the versions you save while reviewing: kept in your account. Deleted tasks and projects are no longer shown, but their data is kept to reconcile billing and resolve disputes until your account is closed.
- Orders and credit records: kept as long as the law requires for transaction records.
- Sign-in records: deleted 7 days after the session ends or expires.
Cookies and local storage
We only use the cookies the service needs: one keeps you signed in and can only be read by our server, and one remembers your interface language.
Your browser’s local storage also keeps a little interface state, such as whether you’ve seen a tip.
We don’t use advertising or cross-site tracking cookies, and we don’t use third-party analytics.
Security
Passwords are stored with argon2id, a one-way process, so nobody, including us, can see your original password. Data travels over encrypted connections. The storage holding your files isn’t public, and uploads use signed addresses that expire. Only authorized administrators can access the console, and every change there is logged.
No system is perfectly secure. If an incident could put your information at risk, we’ll tell you promptly and report it as the law requires.
Your rights
- See and correct: view your account details and change your password and interface language in account settings. Your email address can’t be changed after sign-up.
- Delete: delete projects and tasks at any time.
- Export: export subtitles as SRT, VTT or TXT at any time. For a copy of your account data, contact us.
- Close your account: contact us. Once it’s closed, we delete or anonymize your personal information and content, except transaction records the law requires us to keep.
- Withdraw consent and complain: you can stop using the service at any time. If you object to how we handle your information, contact us; you can also complain to the data protection authority where you live.
To protect your account, we confirm it’s you before acting on these requests, and usually reply within 15 working days.
Children
The service isn’t meant for children. We don’t knowingly collect children’s personal information and will delete it promptly if we find any. Minors should use the service only with a parent or guardian’s consent.
Changes to this policy
When we update this policy, we publish it on this page and change the date. We tell you about significant changes, such as new recipients or purposes, by in-app notice or email.