Privacy Policy | Supadata

This policy explains how Dumpling Software UG (haftungsbeschränkt), Kollwitzstrasse 76, 10435 Berlin, Germany (“Supadata”, “we”) processes personal data on supadata.ai, the dashboard, the documentation, the playground and the Supadata API. We are the controller for this processing. Contact us at support@supadata.ai.
For content our customers submit to the API, we act as their processor under our Data Processing Agreement. Section 6 explains what happens to that content.
You can opt out of marketing emails via the unsubscribe link in every marketing email, or by contacting us at support@supadata.ai. Transactional emails (verification, password reset, usage alerts) are part of the service.
We share personal data with providers that act on our behalf under data-protection agreements. They are listed with purpose and location at supadata.ai/legal/sub-processors. Several are in the United States; for those we rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the EU Standard Contractual Clauses. We also disclose data where the law requires it or to enforce our Terms. We do not sell personal data.
We ask for your consent before setting non-essential cookies or reading non-essential data from your device (§ 25 TDDDG). You can change your choice at any time through “Cookie settings” in the footer.
You have the right to access, rectify and erase your personal data, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time. You can delete your account yourself in the dashboard. For everything else, email support@supadata.ai. We respond within one month of receiving your request; where the complexity or number of requests requires it, we may extend this by up to two further months and will tell you within the first month if we do. We may ask you to verify your identity. Requests that are manifestly unfounded or excessive, in particular because they are repetitive, may be refused or charged a reasonable fee.
You also have the right to lodge a complaint with a data protection supervisory authority.
We use encryption in transit, encryption at rest by our infrastructure providers, multi-factor authentication for staff, and two-factor authentication and API key rotation for your account. Details are in the Annex to the Data Processing Agreement.
Our customers use the API to fetch publicly available videos, audio, web pages and metadata and to obtain transcripts and structured data from them. We process that content on their behalf as their processor under the Data Processing Agreement; customers are responsible for having a legal basis for what they do with the results. Job results can be retrieved for 1 hour (single jobs) or 24 hours (batch jobs) and are then deleted. Results of public content may be cached for performance optimization. We do not store media files supplied through a direct file URL; we may briefly cache the URL and a failure marker so that a file that could not be processed is not fetched again. To have content removed from our cache, email support@supadata.ai with its URL.
The services are intended for businesses and adults. We do not knowingly collect personal data from anyone under 16.
We may update this policy when our services or the law change. The date at the top shows the current version.
Version 1.0 · Last updated: 5 August 2026
Supadata is an API that turns YouTube, TikTok, Instagram, Facebook and X videos into transcripts, metadata and structured JSON. Python & JS SDKs, free tier.
App Store & Google Play data API
©2026 Dumpling Software
Made with ❤️ in EU 🇪🇺