Who we are
DUBD is an automatic video dubbing service operated by [legal entity name], registered at [registered address] ([company number / CNPJ]). We are the controller of the personal data described here.
You can reach us about anything in this policy at [email protected].
What we collect
Videos you upload, and what we derive from them
When you dub a video we store the file you upload and everything the pipeline produces from it: the separated audio tracks, the transcript, the translation, the generated speech, a thumbnail frame, and the final dubbed video.
If the audio contains people speaking, that recording and its transcript may be personal data about them, and in some jurisdictions a voice is biometric data. You are responsible for having the right to upload it — see the Terms of Use.
Account data
If you create an account we store your name, your email address, a hashed version of your password, an API key, your credit balance, and the date you registered. We never store your password itself.
Payment records
When you add credits we store the amount, the currency, the status and the payment method type. Card details are entered on Stripe's own checkout page and never reach our servers.
Using DUBD without an account
You can dub a video without registering. In that case we hold no identity for you at all — the task is reachable only through the unguessable address in your browser's URL bar, and your browser session is what proves the task is yours. Anyone who obtains that address can reach the task, so treat it as private.
Analytics
We use Google Analytics to count visits and see which pages are used. It sets cookies and records your approximate location, device and browser. We do not combine it with your account or your uploads.
We do not ask for or store your postal address, phone number, date of birth, or any government identifier.
Why we process it
- To provide the service — we cannot dub a video without processing the video. This is the performance of our contract with you.
- To operate accounts and billing — authenticating you, tracking your credit balance, and charging for the premium steps you choose.
- To send necessary email — address confirmation and account recovery. We do not send marketing email.
- To keep the service working and secure — diagnosing failures and preventing abuse, on the basis of our legitimate interest.
- To understand usage — analytics, on the basis of consent where the law requires it.
We do not sell your data, and we do not use your videos, transcripts or generated audio to train our own models.
Who else processes it
Dubbing is assembled from specialist services. Depending on the options you pick, parts of your audio are sent to the providers below. Each receives only what its step needs, through a link that expires.
| Provider | What it does | What it receives |
|---|---|---|
| Replicate | AI audio separation and voice cloning | Audio extracted from your video |
| AssemblyAI | Transcription | The isolated voice track |
| Google Translate | Translation | The transcript text |
| Microsoft Azure (Edge TTS) | Speech synthesis | The translated text |
| ElevenLabs | Optional high-quality voices | The translated text, and a voice sample when cloning |
| Stripe | Payments | Your email and payment details, entered directly on Stripe |
| Brevo | Transactional email | Your email address and name |
| Google Analytics | Usage analytics | Site usage, device and approximate location |
| Cloudflare | Traffic delivery and protection | Connection metadata, including your IP address |
These providers operate outside your country in most cases, including in the United States. Each has its own privacy terms, and we rely on their standard contractual protections for international transfers.
The free options keep more of the work in-house; the premium options are the ones that involve the AI providers above. If you would rather a particular provider never saw your audio, choose the free option for that stage.
How long we keep it
We should be direct about this: uploaded videos and the files derived from them are currently kept indefinitely. There is no automatic deletion schedule yet. They remain on our servers until we remove them.
Account records are kept while your account exists. Payment records are kept for as long as tax and accounting rules require.
If you want a video and everything derived from it deleted, email [email protected] with the task address and we will remove it. We are working towards an automatic retention limit; when it is in place this section will say what it is.
Your rights
Depending on where you live — under the GDPR in Europe, the LGPD in Brazil, and comparable laws elsewhere — you can ask us to:
- confirm what data we hold about you, and give you a copy;
- correct anything inaccurate;
- delete your account and your uploads;
- restrict or object to a particular use;
- export your data in a portable form;
- withdraw consent, where consent is what we relied on.
Email [email protected] and we will respond within the period the applicable law allows. You may also complain to your local data protection authority — in Brazil the ANPD, in the EU your national supervisory authority.
Security
Traffic is encrypted in transit. Passwords are stored only as salted hashes. Task addresses are generated with a cryptographic random source so they cannot be guessed or predicted, and the links we hand to processing providers are signed and expire. Access to media is restricted to the account that owns it or the browser session that uploaded it.
No service is perfectly secure. If you believe you have found a vulnerability, please tell us at [email protected] before disclosing it publicly, and we will work with you.
Children
DUBD is not intended for children under [16 / 13 — set per your jurisdiction], and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
Changes to this policy
We will update this page when the service changes. The date at the top always reflects the current version. If a change materially affects how we handle your data, we will tell registered users by email before it takes effect.
Contact
[email protected]
[legal entity name, registered address]
[data protection officer, if you appoint one]