Privacy Policy

1. What we collect

We collect the minimum information needed to operate the service:

• Account information: your email address and name. If you sign in with Google, we also receive your profile picture. If you create a password, we store a one-way hash of it — never the password itself.
• Recordings you upload: only when you explicitly click Share — video files and basic metadata (title, duration, dimensions, file size).
• Transcripts and AI insights: if you click Generate AI after Share, we send extracted audio from that uploaded file to a speech-to-text provider to produce a transcript. Summary and chapters are derived from that transcript. This does not run on record, edit, or export.
• Brand-kit logos: if you upload a logo in Brand Kit (Max), that image is stored so it can render on your share pages.
• Share access logs: a hashed (not raw) IP address and a hashed user-agent string for each time a shared link is viewed, used only for security and abuse prevention.
• Session information: a hashed session token, browser user-agent, and hashed IP address, to keep you signed in securely.
• Contact messages: if you write to us, the name, email, topic, and message you send.
• Website analytics: when enabled and you have accepted cookies, Google Analytics 4 records marketing page views and specific conversion events (sign_up, select_plan, begin_checkout, purchase) on recbaba.com and the billing/sign-up flow. Microsoft Clarity records session replays and heatmaps on public marketing pages only. This does not include recordings, exported files, video or audio content, or detailed editor activity, and Clarity does not run on the dashboard, editor, recordings library, settings, checkout, or shared-recording pages.

We do not collect recordings that you never upload. Local recording and editing never send anything to our servers.

2. Chrome extension

The RecBaba Chrome extension (listed as Screen Recorder 4K - With Mic & System Audio) records a tab, window, or screen on this device. To show the recorder on the page you choose, it injects a small overlay into that http(s) tab. When you record a Chrome tab, it may set a capture handle on that tab so the extension can tell which tab you picked. Video is written only to this browser’s origin-private file system (OPFS) and a local metadata index. Recording does not upload the file. The extension does not run remote code. Stop opens the local editor on app.recbaba.com, which reads the file from this device through a same-extension bridge. If cursor effects are on for a Chrome tab recording, the extension tracks mouse position and clicks on that tab so effects can be added later in the editor — this stays on your device with the recording. If you are signed in, the extension also caches your display name locally so the toolbar can show who is signed in.

3. How we use it

We use this information to operate your account, store recordings you have chosen to upload, generate and enforce share links, run transcript and AI-insight jobs you request, render Brand Kit assets on shares you brand, respond to messages you send, and protect the service from abuse. When website analytics is enabled and you have accepted cookies, we use marketing page views and conversion events (sign-up, plan selection, checkout, purchase) to understand which public pages people find and whether paid plans work. Recordings, video/audio content, and detailed editor activity are never sent to any analytics provider. We do not sell your information. We share data with third parties only as needed to run the service (for example Google sign-in, storage of files you explicitly upload, speech-to-text when you click Generate AI after Share, payment processing, Google Analytics after consent, or Microsoft Clarity after consent on public marketing pages). Google may use consented analytics signals for conversion measurement and ads personalization.

4. Sign-in

You can sign in with Google or with an email and password. When you use Google, we receive your email, name, and profile picture. We do not receive or store your Google password, and we do not retain the Google access token beyond the moment we use it to confirm who you are. When you use email and password, we store a one-way hash of the password.

5. Google Drive integration

If you choose to connect Google Drive, we request access limited to files this application creates in your Drive — never broad access to your existing Drive contents. The recording is uploaded from your browser directly to Google; we do not receive the file. We store an encrypted Drive refresh token on our servers so we can mint a short-lived access token in your browser when you save. Access tokens stay in this tab only. You can disconnect at any time from Settings, which revokes the grant with Google and deletes the stored token. If Google revokes the grant (for example after an account security event), we drop the stored token as well.

6. AI transcript and insights

After you upload via Share, you can choose to generate a transcript. RecBaba does not start that job on upload. When you click Generate AI, we extract audio from the uploaded original and send it to a speech-to-text provider (OpenAI by default, Groq as a configured fallback). Summary and chapters, on Pro and Max, are generated from the ready transcript and use your monthly AI-minutes allowance. Editor captions are separate: they run on your device and do not use this pipeline.

7. Data retention and deletion

You can delete any uploaded recording at any time, which removes the file immediately. You can delete your account from Settings; this removes all your uploaded recordings, cancels paid Razorpay subscriptions and storage add-ons immediately, and ends all active sessions immediately. For technical and abuse-prevention reasons, the account record itself is permanently removed after a short grace period. Local recordings that were never uploaded stay on your computer until you delete them there — we have no copy of those files.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export the personal information we hold about you, and to object to or restrict certain processing. You can exercise most of these from Settings (delete a recording, delete your account) or by writing to us. We do not sell personal information and we do not share it for cross-context advertising, so there is no separate “do not sell” opt-out to complete.

If you are in the European Economic Area, the UK, or a similar jurisdiction, you may also have the right to lodge a complaint with your local data protection authority.

9. Where data is processed

If you create an account or upload a recording, that information may be processed in the United States, where our sign-in provider and storage providers operate. Local recording and editing stay on your device and are not transferred.

10. Children

RecBaba is not directed at children under 13, and we do not knowingly collect personal information from children. If you believe a child has created an account, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of this page will change when we do. Continued use of the service after a change means you accept the updated policy.

12. Contact

Questions about this policy can be sent to support@recbaba.com or through our contact form.