Legal & trust

Privacy Policy

How DownitX handles your personal data and content.

Last updated: 6 July 2026

1. Who we are

DownitX (https://downitx.com) is operated by Suleman Hussain. For privacy requests contact contact@downitx.com.

2. Data we collect

  • Account data: email, username, password hash, subscription status, and usage quotas.
  • Content metadata: channel URLs, video titles, job status, and files you download or process through the service.
  • Payment data: processed by Stripe; we store customer IDs and plan tier, not full card numbers.
  • Technical logs: IP address, browser type, API requests, and error logs for security and reliability.
  • BYOA keys: if you add an OpenRouter API key in Settings, it is stored encrypted at rest and used only for your subtitle requests.

3. How we use data

We use your data to provide the service, process payments, prevent abuse, improve reliability, and comply with law. We do not sell personal data to third parties.

4. Where data is stored

  • DownitX app data (accounts, jobs, downloads) is stored on secure cloud infrastructure in the EU/US regions used by our hosting providers.
  • OpenCut editor (when used) stores auth data in an isolated Postgres schema separate from the main app database.
  • Video files are stored on your dedicated cloud volume while you use the service.
  • Downloaded files are retained according to your plan and account activity. You may delete completed jobs from the dashboard. We cooperate with valid DMCA notices — see our Acceptable Use Policy.

5. Third-party processors

  • Stripe — payments and billing portal
  • Fly.io — API hosting and file storage
  • Vercel — website and frontend hosting
  • Supabase — OpenCut editor database (isolated schema)
  • OpenRouter — only when you provide your own API key for AI subtitles

6. Retention & deletion

We retain account data while your account is active. You may delete downloaded files from the Jobs tab. To delete your account and associated data, email contact@downitx.com. We respond within 30 days.

7. Your rights (GDPR)

If you are in the EEA/UK, you may request access, correction, deletion, restriction, or portability of your personal data. You may lodge a complaint with your local supervisory authority.

8. Cookies

See our Cookie Policy for details on essential and analytics cookies.

9. Changes

We may update this policy. Material changes will be posted on this page with a new date.

Questions? Contact us.