Privacy Policy

1. Introduction

DubDeal Inc. ("we," "our," or "us"), a company registered in Delaware, United States, with operations in Hangzhou, China, respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered video translation service ("Service").

Please read this Privacy Policy carefully. By using our Service, you consent to the practices described in this policy. If you do not agree with any part of this Privacy Policy, please do not use our Service.

This Privacy Policy applies to all users worldwide, including users in the European Economic Area (EEA), United Kingdom (UK), California, and other jurisdictions with specific privacy regulations.

2. Data Controller

For the purposes of GDPR and other applicable data protection laws, DubDeal Inc. is the data controller responsible for your personal data.

• Company Name: DubDeal Inc.
• Registered Address: Delaware, United States
• Location: Hangzhou, China
• Data Protection Email: privacy@dubdeal.ai

3. AI Service Provider Disclosure

Third-Party AI Processing: Our video translation service utilizes third-party artificial intelligence providers to process and translate your videos. When you submit a video for translation, it is transmitted to and processed through external AI services operated by independent third-party providers.

We work with trusted AI providers who comply with industry security standards and data protection regulations. However, please be aware that:

• Your video content is processed by third-party AI systems outside of DubDeal's direct infrastructure
• These providers have their own privacy policies and data handling practices
• We select providers based on their security certifications and compliance with applicable data protection laws
• We do not use your specific video content to train our own AI models, but third-party providers may have different policies regarding model training

By using our Service, you acknowledge and consent to this third-party processing of your video content. If you have concerns about third-party AI processing, please contact us at privacy@dubdeal.ai before uploading sensitive content.

4. Information We Collect

4.1 Information You Provide Directly

We collect information you voluntarily provide when you:

• Account Registration: Name, email address, password, and optional profile information
• Payment Information: Billing address, payment card details (processed securely by our payment processor Creem - we do not store your full card numbers)
• User Content: Videos you upload for translation, including any audio, visual, and metadata contained therein
• Communications: Messages, feedback, and inquiries you send to our support team
• Survey Responses: Information you provide in surveys, feedback forms, or user research

4.2 Automatically Collected Information

When you access our Service, we automatically collect:

• Device Information: Device type, operating system, browser type, screen resolution, and unique device identifiers
• Usage Data: Pages visited, features used, click patterns, time spent on the Service, and interaction sequences
• Log Data: IP address, access times, referring URLs, and system activity logs
• Location Data: General geographic location based on IP address (country/region level)
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixels, and similar technologies (see our Cookie Policy for details)

4.3 Information from Third Parties

We may receive information from:

• Social Login Providers: If you sign in using Google or other OAuth providers, we receive your basic profile information (name, email, profile picture)
• Payment Processors: Transaction status, payment confirmation, and fraud prevention signals from Creem
• Analytics Providers: Aggregated and anonymized usage statistics
• Affiliate Partners: Referral source information for users who join through affiliate links

5. Legal Basis for Processing (GDPR)

For users in the EEA, UK, and Switzerland, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide our Service, including video translation, account management, and payment processing
• Legitimate Interests: Processing for our legitimate business interests, such as improving our Service, preventing fraud, and ensuring security, where these interests are not overridden by your rights
• Consent: Processing based on your explicit consent, such as marketing communications and optional cookies
• Legal Obligation: Processing necessary to comply with legal requirements, such as tax and accounting obligations

6. How We Use Your Information

We use your information for the following specific purposes:

• Service Delivery: Process your video translations, generate lip-synced outputs, and deliver results to you
• Account Management: Create and maintain your account, authenticate your identity, and manage your subscription
• Payment Processing: Process transactions, issue invoices, manage credits, and handle refunds
• Customer Support: Respond to your inquiries, troubleshoot issues, and provide technical assistance
• Service Improvement: Analyze usage patterns, identify bugs, and improve our AI models and user experience
• Communications: Send transactional emails (receipts, account updates), service announcements, and promotional messages (with your consent)
• Security: Detect, prevent, and investigate fraud, abuse, security threats, and violations of our Terms
• Legal Compliance: Comply with applicable laws, regulations, and legal processes
• Research and Analytics: Conduct aggregated, anonymized analysis to understand trends and improve our offerings

8. Information Sharing and Disclosure

We may share your information only in the following circumstances:

8.1 Service Providers

We work with trusted third-party service providers who assist in operating our Service. These providers are contractually bound to protect your data and may only use it for the specific purposes we engage them:

• Creem: Payment processing and merchant services (PCI DSS compliant)
• Cloud Infrastructure: Secure data storage and computing (AWS/Google Cloud)
• Analytics Services: Anonymized usage analysis (Google Analytics)
• Email Services: Transactional and marketing communications (Resend)
• AI Processing: Video analysis and lip-sync generation

8.2 Legal Requirements

We may disclose your information when required by law, court order, or government request, or when necessary to:

• Comply with applicable legal obligations
• Protect our rights, property, or safety, or that of our users
• Investigate potential violations of our Terms of Service
• Prevent fraud, security threats, or illegal activities
• Respond to emergency situations

8.3 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of the transaction. We will notify you via email and/or prominent notice on our website of any such change and provide you with choices regarding your information.

8.4 With Your Consent

We may share your information with third parties when you have given us your explicit consent to do so.

8.5 What We Never Do

We will NEVER:

• Sell your personal information to third parties
• Share your video content publicly without your explicit consent
• Use your data for purposes unrelated to providing our Service
• Share your information with advertisers without your consent

9. Cookies and Tracking Technologies

We use cookies and similar technologies to provide, protect, and improve our Service. For detailed information about our use of cookies, please see our Cookie Policy.

9.1 Types of Cookies We Use

• Essential Cookies: Required for core functionality like authentication, security, and session management. These cannot be disabled.
• Functional Cookies: Remember your preferences and settings (language, theme)
• Analytics Cookies: Help us understand how users interact with our Service (with your consent)
• Marketing Cookies: Used to deliver relevant advertisements (only with your explicit consent)

9.2 Your Cookie Choices

You can manage your cookie preferences through our cookie consent banner or your browser settings. Please note that disabling certain cookies may affect the functionality of our Service.

10. Data Security

We implement comprehensive security measures to protect your data:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Strict role-based access controls with multi-factor authentication for all systems
• Infrastructure Security: Enterprise-grade cloud infrastructure with DDoS protection and firewalls
• Monitoring: 24/7 security monitoring, intrusion detection, and automated threat response
• Regular Audits: Periodic security assessments and penetration testing
• Employee Training: Mandatory security awareness training for all team members
• Incident Response: Documented incident response procedures with notification protocols

While we implement industry-standard security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but will notify you of any breach affecting your data as required by applicable law.

11. Data Retention

We retain your information only as long as necessary to fulfill the purposes outlined in this policy:

• Account Information: Retained while your account is active and for 30 days after account deletion to allow for account recovery
• Video Content: Automatically deleted based on subscription tier (7-365 days) or upon your request
• Payment Records: Retained for 7 years as required by financial and tax regulations
• Usage Data: Retained for 2 years for analytics and service improvement purposes
• Support Communications: Retained for 3 years to maintain service quality and for dispute resolution
• Marketing Preferences: Retained until you withdraw consent or delete your account

After the retention period, data is permanently deleted or anonymized so it can no longer be associated with you. You may request earlier deletion of your data (except where we are legally required to retain it) by contacting privacy@dubdeal.ai.

12. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data ("right to be forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests or for direct marketing
• Withdraw Consent: Withdraw previously given consent at any time
• Automated Decision-Making: Not be subject to decisions based solely on automated processing

To exercise these rights, please contact us at privacy@dubdeal.ai. We will respond within 30 days (or sooner as required by applicable law). We may ask you to verify your identity before processing your request.

13. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States and China where our operations are based. We ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data Processing Agreements with all service providers
• Compliance with applicable data protection frameworks
• Technical and organizational measures to ensure equivalent protection

14. Children's Privacy

Our Service is not intended for children under 18 years of age (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@dubdeal.ai. We will take steps to delete such information from our systems.

15. California Privacy Rights (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: What personal information is collected, used, shared, or sold
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the "sale" or "sharing" of personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Limit: Limit the use of sensitive personal information
• Right to Non-Discrimination: Not be discriminated against for exercising your rights

We do not sell or share your personal information as defined under CCPA/CPRA. To exercise your California privacy rights, contact us at privacy@dubdeal.ai or call [toll-free number].

16. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

• Right to access, rectification, and erasure
• Right to data portability
• Right to restrict processing
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with your local supervisory authority

If you wish to lodge a complaint, you may contact your local Data Protection Authority. A list of EEA Data Protection Authorities is available at:https://edpb.europa.eu/about-edpb/board/members_en

17. Do Not Track Signals

Our Service does not currently respond to "Do Not Track" (DNT) browser signals. However, you can manage your cookie preferences through our cookie consent banner and your browser settings.

18. Third-Party Links

Our Service may contain links to third-party websites, services, or applications. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through our Service.

19. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated policy on our website with a new "Last updated" date
• Sending you an email notification for significant changes
• Displaying a prominent notice on our Service

Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

20. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Company: DubDeal Inc.
• Location: Hangzhou, China
• Privacy Email: privacy@dubdeal.ai
• General Support: support@dubdeal.ai
• Legal Inquiries: legal@dubdeal.ai

We will respond to your inquiry within 30 days. For urgent privacy concerns, please include "URGENT" in your email subject line.