Privacy Policy

Last updated: 6 July 2026

Pancake Studio provides AI-assisted dubbing services. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and what rights you have — in particular under the EU General Data Protection Regulation (GDPR) and applicable Austrian data protection law.

We process personal data only to operate Pancake Studio, deliver dubbing jobs, manage subscriptions, and keep the service secure. We do not sell your personal data and we do not use advertising or behavioural analytics trackers in our web application.

If you have questions, contact us at office@pancake-studios.com.

  • The data controller for Pancake Studio is Pancake Studio, operating from Austria (“we”, “us”, “our”).

    For privacy-related requests, email office@pancake-studios.com. Operator details are listed in the Imprint in the site footer.

  • Depending on how you use Pancake Studio, we may process:

    • Account data: name, email address, Clerk user ID, display name, account role, and sign-in method (Google OAuth via Clerk).
    • Billing data: Stripe customer ID, subscription ID, price/plan, subscription status, renewal date, and cancellation status. Payment card details are processed directly by Stripe — we do not store them.
    • Upload & job metadata: original filename, file size, duration, target language, job status, approval status, delivery timestamps, and error details.
    • Library data: folder names and organisation within your Studio library.
    • Feedback: optional free-text messages you submit as “Issue” or “Idea”, linked to your account.
    • Technical data: server and application logs (e.g. user IDs, job IDs, timestamps, error messages) generated when you use the service.
    • Cookie preference: whether you accepted or declined our cookie notice (stored in the ps_cookie_consent cookie).
    • Local browser storage: UI preferences such as language, theme, and library view (stored in localStorage, not on our servers unless synced through your use of the app).

  • When you upload content for dubbing, we process the audio you provide and the outputs our pipeline generates. This may include:

    • Your uploaded source audio (converted to FLAC for processing).
    • Transcripts, speech segments, translations, reference audio, and final dubbed audio files.
    • Pipeline metadata (e.g. target language, format, upload time) stored alongside files.

    Files are stored in Amazon S3 under paths tied to your user ID and job ID. Our dubbing pipeline on RunPod accesses these files using job identifiers — audio is not sent as raw upload bytes in pipeline API requests; processing reads from secure cloud storage.

    Free-plan users: preview playback may be limited to a portion of the audio, and delivered files may be capped in length during beta. Paid and founder accounts receive full-length processing and delivery as described in our product terms.

  • We use personal data to:

    • Create and manage your account and authenticate you.
    • Provide dubbing services, including upload, processing, delivery, and library management.
    • Process subscriptions and payments through Stripe.
    • Send transactional emails (welcome, queue updates, delivery notifications) via Resend.
    • Review uploads during closed beta where manual approval is required before processing.
    • Respond to feedback and improve reliability and security.
    • Comply with legal obligations (e.g. billing records).
    • Enforce our terms, prevent abuse, and protect the service.

  • We rely on the following legal bases (Art. 6 GDPR):

    • Contract (Art. 6(1)(b)): processing necessary to provide Pancake Studio, your account, dubbing jobs, and paid features you subscribe to.
    • Legitimate interests (Art. 6(1)(f)): securing our platform, preventing fraud and abuse, closed-beta upload review, service improvement, and transactional communication — balanced against your rights.
    • Legal obligation (Art. 6(1)(c)): where we must retain billing or tax-related records.
    • Consent (Art. 6(1)(a)): where required for optional processing. Our cookie banner records your preference; essential authentication and payment cookies are necessary for the service to function.

    Processing of audio for dubbing is necessary to perform the service you request. You can withdraw from optional processing where consent is the sole basis by contacting us or adjusting browser settings for non-essential storage.

  • We use carefully selected processors. They may process data only on our instructions:

    • Clerk — authentication, identity, and session management (clerk.com/privacy).
    • Stripe — payments, subscriptions, and customer billing portal (stripe.com/privacy).
    • Supabase — application database (user profiles, jobs, folders, feedback) (supabase.com/privacy).
    • Amazon Web Services (S3) — storage of uploaded and generated audio and pipeline artefacts.
    • Resend — delivery of transactional emails (resend.com/legal/privacy-policy).
    • RunPod — GPU infrastructure running our dubbing pipeline steps (transcription, translation, voice dubbing).
    • Google — only if you choose “Sign in with Google” (OAuth); governed by Google’s privacy policy.

    Our marketing site may load fonts from Google Fonts. When you visit those pages, your browser may connect to Google’s servers. We do not use Google Analytics or similar tracking in the application.

  • Application data is stored in Supabase and AWS S3. AWS regions configured in our infrastructure may include eu-central-1 and/or us-east-1, depending on bucket and service configuration. RunPod processing infrastructure may be located outside the European Economic Area (EEA).

    Where data is transferred to countries without an EU adequacy decision, we rely on appropriate safeguards such as Standard Contractual Clauses offered by our providers, or equivalent mechanisms required under GDPR Chapter V.

  • We retain data only as long as necessary:

    • Account & profile: for as long as your account is active.
    • Dubbing files & job records: until you delete individual jobs from your library or delete your account.
    • Billing records: as required by tax and commercial law (typically up to 7 years where applicable).
    • Cookie preference: up to 12 months in the ps_cookie_consent cookie.
    • Server logs: for a limited operational period, then deleted or anonymised.

    After account deletion, we remove your Supabase records, S3 job assets, and Clerk account. Stripe may retain billing records independently as required by law and its own retention policies.

  • Essential cookies (required for the service):

    • Clerk authentication/session cookies — to keep you signed in securely.
    • Stripe cookies — when you complete checkout or use the billing portal.

    Preference cookie:

    • ps_cookie_consent — stores whether you accepted or declined our cookie notice (1 year, SameSite=Lax).

    Accepting or declining the banner records your choice but does not disable essential login or payment cookies, because the service cannot function without them.

    Local storage (browser only): language, theme, and UI preferences. You can clear these in your browser settings.

  • No. We do not run advertising networks, behavioural analytics (such as Google Analytics), or sell, rent, or trade your personal data to third parties for their marketing purposes.

    We use real-time WebSocket connections (Socket.IO) only to update your Studio UI — for example upload progress and library changes — not for cross-site tracking.

  • During closed beta, uploads from standard accounts may require manual approval before dubbing starts. Authorised Pancake Studio administrators (founder/manage access) can view job metadata — including your email, filename, file size, duration, and account role — to approve or reject uploads. Rejections may include an internal note.

    Administrators access this data solely to operate the beta queue, prevent abuse, and maintain service quality. Approved jobs are processed automatically by our pipeline.

  • We apply technical and organisational measures including:

    • HTTPS encryption for data in transit.
    • Authentication via Clerk; API routes require a valid session where applicable.
    • Server-side-only access to Supabase using privileged credentials; no direct public database access.
    • Presigned, time-limited URLs for audio delivery (typically 1 hour).
    • Webhook signature verification for Clerk and Stripe events.
    • Separate pipeline authentication (internal secret) for RunPod communication.
    • Role-based access controls, including restricted founder/manage APIs.

    No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately.

  • If you are in the EEA, UK, or Switzerland, you may have the right to:

    • Access — obtain confirmation and a copy of your personal data.
    • Rectification — correct inaccurate data (e.g. update your name in Clerk/Google account).
    • Erasure — request deletion where applicable (see account deletion below).
    • Restriction — limit processing in certain circumstances.
    • Data portability — receive data you provided in a structured, commonly used format where technically feasible.
    • Object — object to processing based on legitimate interests.
    • Withdraw consent — where processing is consent-based, without affecting prior lawful processing.
    • Lodge a complaint with a supervisory authority — in Austria: Österreichische Datenschutzbehörde.

    To exercise your rights, email office@pancake-studios.com. We respond within one month, extendable where permitted by law.

  • Signed-in users can delete their account from the Studio profile menu (Delete account). Deletion is permanent and removes, in order:

    • All S3 audio files and pipeline artefacts linked to your jobs.
    • All dub job records and library folders in Supabase.
    • Your active Stripe subscription (cancelled).
    • Your Supabase user profile and feedback entries.
    • Your Clerk authentication account.

    You may not be able to create a new Pancake Studio account with the same email address after deletion. Founder accounts cannot be self-deleted through the UI; contact us if you need assistance.

    You can also delete individual dubbing jobs from your Studio library without deleting your entire account.

  • Our dubbing pipeline uses automated AI and audio processing to transcribe, translate, and generate dubbed audio. This is core to the service you request — not profiling for marketing or legal decisions about you.

    We do not make solely automated decisions with legal or similarly significant effects on you within the meaning of Art. 22 GDPR. Closed-beta upload approval involves human review before processing begins for standard accounts.

  • Pancake Studio is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

  • We may update this Privacy Policy when our practices, legal requirements, or services change. We will post the revised version on this page and update the “Last updated” date. For material changes, we may also notify you by email or through the Studio where appropriate.

    Continued use of Pancake Studio after changes take effect constitutes acceptance of the updated policy.

  • Privacy enquiries: office@pancake-studios.com

    Postal address: Zdravko Jovanovic, Wagramerstraße 2/70, 1220 Wien, Austria (see Imprint in the site footer).

    For general product support, use the Feedback option in Studio or contact us through the channels listed on our website.