Privacy Notice

Last updated: May 2026

Who we are

Dubrly is operated by Obbema Labs, a sole proprietorship registered in Ontario, Canada and owned by Christine Obbema. We are the data controller for personal data collected through dubrly.com.

What we collect and why

• Account data (email, password hash, display name) — to create and secure your account. Legal basis: contract performance.
• Project data (project names, target language, voice selection, transcripts, translations, generated audio) — to deliver the dubbing Service. Legal basis: contract performance.
• Audio you upload — transcribed and translated by our AI providers, then synthesised into a dubbed track. Legal basis: contract performance.
• Usage and device data (IP address, browser, pages viewed, error logs) — to operate, secure, and improve the Service. Legal basis: legitimate interests.
• Support messages — to respond to your inquiries. Legal basis: legitimate interests.
• Billing identifiers — to link your account to your subscription. Payment card details are collected and processed directly by our payment provider, not us. Legal basis: contract performance.

Who we share data with

• Hosting and backend (Lovable Cloud / Supabase) — to host the application, database, and file storage.
• AI providers (OpenAI, Google, ElevenLabs via Lovable AI Gateway) — to transcribe, translate, and synthesise the audio you submit.
• Payment processor — to handle subscriptions, invoicing, and tax compliance.
• Email delivery providers — to send account notifications.
• Authorities — where required by law.

We do not sell your personal data. We do not use your audio, transcripts, or translations to train AI models.

International transfers

Some of our providers process data outside Canada (including in the United States and the EU/UK). Where applicable, transfers rely on standard contractual clauses or adequacy decisions.

Retention

We keep account and project data while your account is active. If you delete a project or your account, we delete or anonymise the associated personal data within 90 days, except where we must retain records for legal, tax, or fraud-prevention purposes.

Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict processing of your personal data, to object to processing, and to withdraw consent. EU/UK residents have the right to complain to their supervisory authority. To exercise any right, email [email protected]. We aim to respond within 30 days.

Security

We use appropriate technical and organisational measures including encryption in transit, hashed passwords, row-level access controls, and least-privilege backend access.

Cookies

We use essential cookies and local storage to keep you signed in and remember your preferences. We do not use third-party advertising cookies.

Contact

Questions about this notice? Email [email protected].