SubGrab

Privacy Policy

Last updated: 20 March 2026

1. Introduction

This Privacy Policy explains how Oceanx Consulting Pty Ltd (ABN pending), a company incorporated in New South Wales, Australia (“Oceanx”, “we”, “us”, or “our”), collects, uses, discloses, and protects personal information in connection with the SubGrab website and services located at subgrab.com (the “Service”).

We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using the Service, you consent to the practices described in this Policy.

2. Information We Collect

2.1 Information You Provide

  • Account information: When you create an account, we collect your email address for authentication purposes.
  • Payment information: When you purchase credits, your payment is processed by Stripe, Inc. We do not store your credit card details. We receive and store your Stripe transaction ID, purchase amount, and credit quantity for record-keeping.
  • Video URLs: When you use the Service, you provide video URLs. We store these URLs along with the extracted transcript data.
  • Support communications: If you contact us at help@subgrab.com, we retain your correspondence to assist you and improve the Service.

2.2 Information Collected Automatically

  • Usage data: We may collect information about how you access and use the Service, including your IP address, browser type, operating system, referring URLs, pages viewed, and timestamps.
  • Cookies: We use essential cookies required for authentication and session management. We do not use advertising or tracking cookies.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service.
  • Process transactions, manage your account, and deliver purchased credits.
  • Send you transactional and service-related emails, including sign-in magic links, payment confirmations, welcome messages, and account notifications (e.g., credit balance alerts).
  • Respond to your enquiries and support requests.
  • Monitor and analyse usage patterns to improve the Service’s performance and user experience.
  • Detect, prevent, and address technical issues, fraud, or abuse.
  • Comply with legal obligations.

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

  • Service providers: We use third-party providers to operate the Service, including Stripe (payment processing), Resend (transactional email), and Groq (AI transcription and AI summary generation). These providers process data only as necessary to perform their functions and are bound by their own privacy policies.
  • Legal requirements: We may disclose your information if required to do so by law, regulation, legal process, or enforceable governmental request.
  • Business transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

5. Data Storage and Security

Your data is stored on secure servers. We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

6. Data Retention

  • Account data: Retained for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us.
  • Transcript data: Retained indefinitely to provide caching and history features. Anonymous caption extractions (no account) are stored without any personally identifiable information.
  • Audio files: Audio extracted for AI transcription is processed in memory and immediately deleted after transcription is complete. We do not retain audio files.
  • Payment records: Retained as required by applicable tax and accounting laws.

7. Your Rights

Under the Australian Privacy Principles, you have the right to:

  • Access: Request access to the personal information we hold about you.
  • Correction: Request correction of any inaccurate or incomplete personal information.
  • Deletion: Request deletion of your personal information, subject to any legal obligations requiring us to retain certain records.
  • Complaint: Lodge a complaint with us or with the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached.

To exercise any of these rights, please contact us at help@subgrab.com.

8. International Data Transfers

The Service may use infrastructure and third-party providers located outside of Australia. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws. We take reasonable steps to ensure that overseas recipients handle your information in accordance with the APPs.

9. Children’s Privacy

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a child, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page indicates when the latest revision was made. Your continued use of the Service after any changes constitutes your acceptance of the revised Policy.

11. Contact Us

If you have any questions about this Privacy Policy, or wish to make a complaint or exercise your rights, please contact us:

  • Email: help@subgrab.com
  • Entity: Oceanx Consulting Pty Ltd
  • Location: New South Wales, Australia