DublioPrivacy policy
Last updated: [date]
Draft text. This page has not been reviewed by a qualified person yet and will change before launch. Do not rely on it as legal advice.
1. Who is responsible
The controller of your personal data is Cubexic. [legal name, address, registration and VAT number]. Contact: cubex@cubex.nl.
2. What we collect and why
| Data | Why |
|---|---|
| Email address, name and sign-in identifier (from Google or from email sign-up) | To create your account and sign you in |
| The videos you upload, and what is made from them: audio, transcripts, translations, voice files, subtitles, outputs, and any logo or background music you add | To run the service for you |
| Minutes granted, bought and used (a ledger) | To count your minutes and handle support |
| Payment record (Stripe session, amount, time). We never see your card number | To credit your minutes and keep accounting records |
| Technical data: a sign-in cookie, IP address and request logs of our server | To keep you signed in, secure the service and fix errors |
| Messages you send us | To answer you |
The legal bases are performing our contract with you, our legal duties (accounting), and our legitimate interest in security and abuse prevention. [confirm with counsel]
3. Who else processes your data
We use these providers to deliver the service. They receive only what their part needs.
- OpenAI: the audio of your video (transcription) and the text of the script (translation, and voice if you choose an OpenAI voice).
- Google (Gemini): the script text, when you choose a Gemini model or voice.
- Google (Firebase Authentication): sign-in with Google or email and password, and email verification.
- Stripe: payments, once they are switched on.
- Hetzner: the server where we store your projects. Location: [server country].
Some of these providers are outside the EU. Where that applies, transfers rely on [adequacy decision or standard contractual clauses, to be confirmed]. Each provider's own terms say whether it keeps or trains on API data: [to be verified and stated here].
4. Cookies
We use one cookie, "dublio_session", to keep you signed in for up to 14 days. It is necessary for the service. The marketing site at dublio.org sets no cookies and has no analytics. [update if analytics are added]
5. How long we keep it
Projects are deleted automatically 14 days after you last used them, or 30 days if you have bought minutes. You can delete a project or your whole account in the app at any time. The minutes ledger is kept while your account exists. Payment records are kept as long as accounting law requires.
6. Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to its use, and to move it. You can also complain to your data protection authority. Write to cubex@cubex.nl.
7. Your videos and other people
If your video contains other people's voices, it is your job to have the right to process it. We do not use your videos to train our own models and do not publish them. We do not sell personal data.
8. Security
Connections use HTTPS. Projects are visible only to the account that made them and to our administrators. No system is perfectly secure, so keep your own copies of what matters.
9. Changes
If we change this policy in a way that matters, we will say so in the app or by email.