Privacy Policy

“DubDuck,” “we,” “us,” and “our” refer to the operator of the dubduck.com website and the related dubbing services described in these documents. You can reach us at info@dubduck.com for any privacy question, request, or concern.

For users in the European Economic Area, the United Kingdom, or Switzerland, DubDuck is the “controller” of the personal data described in this Policy.

We use the information we collect for the following purposes:

• To provide the Service. Run the editor, transcribe and translate dialogue, generate dubbed audio with the original speaker’s voice characteristics, render the final video, deliver downloads, and keep your projects available to you.
• To operate your account. Create and authenticate it, remember your preferences, send service emails (sign-in verifications, password resets, important notices about your account or our terms), and provide support.
• To bill you. Process payments, deliver receipts, prevent payment fraud, and comply with tax obligations.
• To improve and secure the Service. Diagnose bugs, monitor performance, prevent abuse and unauthorized access, defend against attacks, and develop new features. Where we use product analytics, we work with deidentified or aggregate data wherever practical.
• To comply with the law. Respond to lawful requests from courts, regulators, and law enforcement; protect the rights, property, and safety of DubDuck, our users, and the public; and enforce our Terms of Service and Acceptable Use Policy.

The defining feature of DubDuck is dubbing a video into another language using the voice of the original speaker. To do that, our systems analyse the audio in your uploaded video and derive characteristics of the speakers’ voices so the dubbed audio can sound like them. Because we know users want a clear answer, here is exactly how this works.

To operate the Service we engage third-party service providers (sometimes called “subprocessors”) that perform specific functions on our behalf. We choose providers with strong privacy and security commitments and bind them to confidentiality and data-protection terms. The categories of providers we use include:

• Cloud hosting, database, storage, and authentication infrastructure. Hosts your account, project metadata, uploaded videos, and Outputs.
• AI and machine-learning inference providers. Process project content to perform transcription, translation, voice synthesis for dubbing, and lip-sync rendering. Project content sent to these providers is bound by their enterprise confidentiality terms and is not used to train general-purpose AI models.
• Payment processing. We use a third-party payment processor to process card and other payment-method transactions. Our processor collects payment details directly; we receive only limited payment metadata such as a token, the last four digits, the brand, and the country.
• Sign-in providers. When you choose to sign in with Google, Google authenticates you on our behalf and shares your email, name (if provided), and profile picture with us.
• Email delivery, customer support, and analytics providers. Used for transactional emails (e.g., sign-in, receipts), support tickets, and aggregate usage insights.

We may also disclose information when we believe in good faith that it’s necessary to comply with law, respond to a valid legal process, protect the rights or safety of DubDuck or others, or in connection with a merger, acquisition, or sale of all or part of our business (in which case we will notify affected users).

DubDuck is headquartered in Israel and uses service providers located in countries including the United States and the European Union. When we transfer personal data from the EEA, the United Kingdom, or Switzerland to a country that has not been recognised as providing adequate data protection, we rely on appropriate safeguards including the European Commission’s Standard Contractual Clauses (SCCs) or equivalent mechanisms.

• Account data. Kept for as long as your account is active, plus a short grace period (typically 30 days) after you close the account, for backup and recovery.
• Project content. Kept until you delete the project. Deletion is processed within a few days from active systems and within thirty (30) days from backups.
• Billing records. Retained for the period required by tax and accounting law in our operating jurisdiction (typically seven (7) years).
• Server and security logs. Typically 90 days, longer where required to investigate abuse or comply with the law.

Depending on where you live, you may have some or all of the following rights regarding your personal data:

• Access. Request a copy of the personal data we hold about you.
• Correction. Update or correct inaccurate data. Most account fields can be edited from Account settings.
• Deletion. Ask us to delete your account and associated data, subject to legal exceptions (e.g., we may need to keep billing records).
• Portability. Receive your data in a structured, commonly-used machine-readable format.
• Restriction or objection. Ask us to limit or stop processing your data in certain situations.
• Withdraw consent. Where processing is based on consent, withdraw it at any time (this won’t affect lawfulness of processing before the withdrawal).
• Lodge a complaint. If you believe we’ve handled your data improperly, you may complain to your local data protection authority. We’d much rather you tell us first so we can try to fix it.

To exercise any of these rights, email info@dubduck.com from the address associated with your account. We’ll respond within thirty (30) days, or sooner where required by law.

We use industry-standard administrative, technical, and physical safeguards to protect your information, including TLS in transit, encryption at rest in our infrastructure providers, principle of least privilege for internal access, and isolation of customer data per project. No system is perfectly secure; if you believe your account has been compromised, please email info@dubduck.com immediately.

DubDuck is not directed at children under sixteen (16), and we do not knowingly collect personal information from children under sixteen. If you believe a child has provided personal information to us, email info@dubduck.com and we will promptly delete the account and associated data.

We may update this Privacy Policy from time to time. When we make a material change, we will revise the “Last updated” date at the top and, where required, notify you in-app or by email. Continued use of the Service after a change takes effect constitutes acceptance of the updated Policy.

For privacy questions, requests to exercise any of the rights described above, or any other concern about how DubDuck handles your information, email info@dubduck.com.