Privacy Policy

01Who we are

xDub is operated by FutureFist Tech Solutions LLP, Thane, Maharashtra, India ("we", "us"). For the purposes of the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, we are the data fiduciary for the personal data described in this policy.

02Data we collect

• Account data: your mobile number, and if you add them, your name, email address, business name and GSTIN.
• Your content: videos, audio, voice samples, scripts, documents and subtitle files you upload, and the outputs we generate from them.
• Voice data: voice samples you provide for cloning and the resulting voice models, which may be personal data of the person speaking.
• Billing data: credit purchases, invoices, payment references and wallet history. Card, UPI and bank details are handled by our payment gateway, not stored by us.
• Usage and technical data: projects, settings, job history, IP address, device and browser type, and logs needed to run and secure the Service.
• Communications: messages you send us and notifications we send you.

03How we use your data

We use personal data, on the basis of your consent and for the legitimate uses permitted by law, to:

• sign you in with a one-time password and keep your account secure;
• process Your Content to deliver the dubs, voices, transcripts and translations you request;
• reserve, charge and refund credits, issue invoices and meet tax and accounting obligations;
• send service messages such as OTPs, job updates, low-balance reminders and policy changes;
• prevent fraud and abuse, enforce our Terms, and respond to lawful requests;
• diagnose problems and improve reliability and quality of the Service.

We do not sell your personal data. We do not use Your Content or your voice to train our own AI models, and we do not use it in our marketing without your written permission.

04Who we share data with

We share personal data only with parties that help us provide the Service, under contracts that limit their use of it:

• AI processing partners that perform speech recognition, translation, voice synthesis and related processing on our instructions;
• payment gateway to process purchases and refunds;
• messaging providers to deliver OTPs and notifications;
• hosting and infrastructure providers that store and run the Service;
• authorities where we are legally required to, or to protect the rights and safety of users and the public.

Our servers are located in India. Some AI processing partners may process data outside India; where they do, we rely on transfers permitted under Indian law and require appropriate safeguards.

05How long we keep data

• Source videos: deleted 30 days after the project's last delivery (or creation, if nothing was delivered).
• Outputs and other project files: deleted 90 days after the last delivery.
• Saved voices: kept until you delete them or close your account.
• Account, billing and wallet records: kept while your account is active and afterwards for as long as tax, accounting and other laws require.
• Security logs: kept for a limited period for security and legal purposes.

06How we protect data

We use encrypted connections, signed and expiring download links, access controls, secret management and monitoring to protect your data. Access by our staff is limited to what is needed to run and support the Service. No system is perfectly secure; if a personal data breach affects you, we will notify you and the authorities as required by law.

07Cookies and local storage

We use essential cookies to keep you signed in, and your browser's local storage to remember preferences such as your colour theme. We do not use advertising or cross-site tracking cookies.

08Your rights

Subject to applicable law, you can:

• access a summary of the personal data we hold about you and how it is processed;
• correct, complete or update your personal data;
• delete your projects and saved voices, or ask us to erase your account and personal data;
• withdraw consent, which will not affect processing already carried out;
• nominate another person to exercise your rights in the event of death or incapacity;
• raise a grievance with us, and then with the Data Protection Board of India.

Write to hello@xdub.si from or quoting your registered mobile number. We may need to verify your identity first.

09Children

The Service is meant for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has used the Service, contact us and we will delete the data.

10Data about other people

If Your Content includes the voice, face or other personal data of other people, you are responsible for having a lawful basis, including their consent where required, to share it with us for processing and, for voice cloning, their explicit consent.

11Changes to this policy

We may update this policy as the Service or the law changes. We will update the date at the top of this page and, for significant changes, notify you in the app.

12Grievance officer and contact

Questions, requests or complaints about your personal data can be sent to our Grievance Officer at hello@xdub.si with the subject line "Privacy". We aim to respond within 15 days. FutureFist Tech Solutions LLP, Thane, Maharashtra, India.