Privacy Policy
Last updated: July 2, 2026
1. Data Controller
The data controller responsible for your personal data is:
Dubify.studio
Country of establishment: India
Email: support@dubify.studio
Website: https://dubify.studio
Full postal address available upon written request to support@dubify.studio.
If you have any questions about how we handle your personal data, please contact us at the address above. We are committed to protecting your personal data and respecting your privacy rights under the EU General Data Protection Regulation (GDPR) and applicable national laws.
2. Key Definitions
- Account: A unique account created for you to access our Service.
- Personal Data: Any information that relates to an identified or identifiable individual.
- Usage Data: Data collected automatically when you use the Service (e.g., IP address, browser type, pages visited).
- Cookies: Small files placed on your device to store browsing details.
- Service: The Dubify.studio website, dashboard, and API.
- Service Provider / Processor: Third-party companies that process data on our behalf under a Data Processing Agreement.
3. Information We Collect
Account Data: When you sign in with Google OAuth, we receive and store your email address and a unique user identifier. We do not have access to your Google password or any data outside the OAuth consent scope.
Usage Data: We automatically collect information about how you interact with the Service, including IP address, browser type and version, pages you visit, time and date of your visit, time spent on pages, and device identifiers. This data is retained for 12 months.
Media Files: Videos and audio files you upload are processed solely to provide the dubbing service. They are stored in encrypted cloud infrastructure and are subject to our 30-day Zero-Retention Policy described in Section 8.
4. Legal Basis for Processing (GDPR Art. 6)
We only process your personal data when we have a lawful basis to do so. The table below sets out the legal basis for each category of processing:
| Processing Activity | Lawful Basis | GDPR Article |
|---|---|---|
| Account creation & authentication | Contract performance | Art. 6(1)(b) |
| Video dubbing pipeline processing | Contract performance | Art. 6(1)(b) |
| Credit management & job history | Contract performance | Art. 6(1)(b) |
| Payment processing | Contract performance | Art. 6(1)(b) |
| Service-related notifications | Contract performance | Art. 6(1)(b) |
| Analytics & usage tracking | Consent (opt-in via cookie banner) | Art. 6(1)(a) |
| Fraud prevention & security | Legitimate interests | Art. 6(1)(f) |
| Accounting & legal obligations | Legal obligation | Art. 6(1)(c) |
5. Cookies & Tracking Technologies
We use cookies and similar tracking technologies. You can manage your preferences at any time via the cookie banner shown on your first visit, or by contacting us.
- Strictly Necessary Cookies: Required for authentication and fraud prevention. These do not require consent and cannot be disabled without affecting core functionality.
- Analytics Cookies (consent required): Help us understand how the Service is used to improve performance and features. These are only placed after you grant consent.
You can withdraw analytics consent at any time by visiting your Account settings and toggling the analytics preference, or by clearing your browser cookies.
6. How We Use Your Data
- Provide, operate, and maintain the Service.
- Manage your account, credits, and job history.
- Process your transactions through our payment provider.
- Send you service-related notifications, security alerts, and support messages.
- Analyse usage trends to improve quality and performance (only with your consent).
- Detect, investigate, and prevent fraudulent or unauthorized activity.
- Comply with applicable legal obligations.
7. Data Sharing & Processors
We do not sell your personal data. We share data only with the following processors, each bound by a Data Processing Agreement (DPA):
| Processor | Purpose | Location / Transfer Mechanism |
|---|---|---|
| Authentication provider | User authentication and account data | US — Standard Contractual Clauses |
| Cloud storage provider | Encrypted video storage and delivery | US — EU–US Data Privacy Framework |
| AI processing provider | Video processing and dubbing pipeline | US — Standard Contractual Clauses |
| Payment processor | Payment processing & billing | EU — Standard Contractual Clauses |
| Sign-in provider | Authentication only | US — EU–US Data Privacy Framework |
We may also share your information when required by law, court order, or governmental authority, or in connection with a merger or acquisition (with prior notice to you).
8. Zero-Retention Policy for Media Files
We operate a strict 30-day automatic deletion policy for all media. Source videos, extracted audio stems, generated dubbed audio, and final output files are permanently and irreversibly deleted from our infrastructure 30 days after a job completes or fails. We do not use your video or audio content to train, fine-tune, or evaluate any foundational AI model.
9. Data Retention
- Account data (email, credit balance, billing tier): retained for as long as your account is active, then deleted within 30 days of account deletion.
- Job history metadata (job IDs, target language, duration, status): retained for 12 months from job completion.
- Usage & analytics data (activity_log): retained for 12 months.
- Payment transaction records (amount, date, plan — no card data): retained for 7 years to comply with accounting law.
- Media files (source video, dubbed output): deleted within 30 days of job completion (see Section 8).
10. International Data Transfers
Some of our processors operate outside the European Economic Area (EEA). Where personal data is transferred to third countries, we ensure appropriate safeguards are in place as required by GDPR Chapter V:
- Transfers to processors certified under the EU–US Data Privacy Framework are covered by the European Commission adequacy decision.
- Transfers to other US-based processors are covered by the European Commission's Standard Contractual Clauses (SCCs) (2021/914).
You can request a copy of the applicable transfer safeguards by contacting support@dubify.studio.
11. Payment Processing
All payments are securely processed by Dodo Payments. We do not store or have access to your full card number, CVV, or other sensitive payment details. Transaction records (amount, date, plan) are retained for 7 years for accounting and dispute resolution purposes.
12. Data Security
We use commercially reasonable technical and organizational measures to protect your personal data, including encrypted storage, HTTPS-only transmission, secure authentication, and access controls limited to authorized personnel. However, no method of internet transmission or electronic storage is 100% secure.
13. Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware, as required by GDPR Art. 33. Where the breach is likely to result in a high risk to you, we will also notify you directly without undue delay (GDPR Art. 34), including the nature of the breach, data affected, likely consequences, and the measures we have taken.
14. Your Rights Under GDPR
If you are in the European Economic Area (EEA) or UK, you have the following rights regarding your personal data:
- Right of access (Art. 15): Request a copy of the personal data we hold about you.
- Right to rectification (Art. 16): Request correction of inaccurate or incomplete data.
- Right to erasure (Art. 17): Request deletion of your personal data ("right to be forgotten").
- Right to restrict processing (Art. 18): Request that we limit how we use your data.
- Right to data portability (Art. 20): Receive your data in a structured, machine-readable format (JSON/CSV) to transfer to another service.
- Right to object (Art. 21): Object to processing based on legitimate interests (e.g., analytics). You can withdraw analytics consent at any time in your Account settings.
- Right to withdraw consent (Art. 7(3)): Where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.
- Right to lodge a complaint: You have the right to lodge a complaint with your local supervisory authority. If you are based in the EU, you may contact the data protection authority of your country of residence. If you are in the UK, the relevant authority is the Information Commissioner's Office (ICO) at ico.org.uk.
To exercise any of these rights, you can use the self-service tools in your Account settings or contact us at support@dubify.studio. We will respond within 30 days.
15. Children's Privacy
The Service is not directed to individuals under the age of 18. We require users to confirm they are 18 or older at sign-up. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will promptly delete such information.
16. Third-Party Links
The Service may contain links to third-party websites or services not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of third-party sites.
17. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this page and, where appropriate, by sending an email notification. Continued use of the Service after changes constitutes acceptance of the updated Policy.
18. EU & UK Representative (GDPR Art. 27)
Dubify.studio is not established in the European Economic Area (EEA) or the United Kingdom. As required by Article 27 of the GDPR and the UK GDPR, we are in the process of designating a formal EU/UK representative. Until that appointment is complete, EEA and UK data subjects may direct enquiries about our data processing practices directly to us at support@dubify.studio. We will respond within 30 days.
19. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at support@dubify.studio.