Privacy Policy

General information

User data collected and processed through any of the versions of the Dubb platform is the responsibility of, and is controlled by: Dubb LLC, 25101 The Old Rd #245, Santa Clarita, CA 91381, United States.

Where we process personal data about other people on your instructions, such as the leads, contacts, and recipients you work with through Dubb Agent or the Dubb CRM, you are the controller of that data and we act as your processor, as described in section 3.12.

Consent and legal bases for processing

2.1. How you give consent

You give your consent to the collection and processing of your personal data as described in this policy when you do any of the following:

• Visit and browse our website.
• Download, install, and use our mobile application from Google Play or the App Store.
• Download, install, and use one of our Chrome extensions that connects to your Dubb account.
• Download, install, and use our desktop application.
• Use the platform's web control panel.
• Register as a user on the Dubb platform.
• Purchase a subscription plan.
• Use any of the features available on the platform, including, but not limited to, video messaging, live chat support powered by artificial intelligence (AI), email or SMS campaigns, the creation and execution of automated workflows, and CRM or CRM substitute features.
• Subscribe to our newsletter.
• Communicate with our team through the contact chat or the contact details provided.

You may withdraw your consent at any time by contacting us through the channels in section 17, without affecting the lawfulness of the processing carried out before the withdrawal.

2.2. Legal bases

Where the General Data Protection Regulation or a comparable law applies to you, we rely on the following legal bases, depending on the data and the purpose:

• Performance of a contract: to create and run your account, provide the features you use, process payments, and provide support.
• Legitimate interests: to keep the platform secure, prevent fraud and abuse, fix errors, understand how the platform is used so we can improve it, and communicate with you about the services you use. We rely on this basis only where those interests are not overridden by your rights, and you may object to it as described in section 10.
• Consent: for marketing communications where the law requires consent, for optional analytics and tracking technologies where the law requires consent, for SMS messages, and for creating a voice or likeness model.
• Legal obligation: to keep billing and tax records, respond to lawful requests from authorities, and honor opt-outs and other rights requests.

Under the California Consumer Privacy Act as amended by the California Privacy Rights Act, the rights available to you, including the right to opt out, are described in section 10.

Types of data collected

Dubb collects and processes different types of personal data when users interact with the platform through its various versions (mobile application, desktop application, connected Chrome extensions, and web control panel) and when using its features. The data collected falls into the following categories:

3.1. Personal data

This includes any information that directly or indirectly identifies the user, such as full name, email address, phone number, profile picture, job title, company or business name, and other similar information that the user voluntarily provides when interacting with the platform or in communications with the Dubb team.

3.2. Registration and user account data

This is collected when the user creates an account on the platform and includes access credentials such as email address, username, encrypted password, time zone, preferred language, notification settings, active subscription information, account activity history, and any other settings established by the user.

3.3. Payment and billing data

When the user purchases a subscription plan, Dubb collects the information necessary to process the payment, including credit or debit card details, which are handled by our payment service providers as described in section 6.1, the cardholder name, billing address, type of plan purchased, transaction history, and other information related to billing and the automatic renewal of subscriptions.

3.4. Platform usage data

This includes information generated through the use of the platform's features, such as creating, editing, sending, and viewing videos, setting up email and SMS campaigns, creating workflows, using the messaging system, interacting with the CRM or similar features, and records of actions taken by the user within the platform.

3.5. Data collected automatically by versions of the platform

When you use the platform from any of its versions (mobile, desktop, connected browser extension, or web), technical information is collected automatically, such as device type, operating system, IP address, internet service provider, browser type and version, screen resolution, unique device identifiers, approximate location based on IP address, and performance or technical failure data. This does not apply to Dubb Capture, which collects no data, as described in section 16.

3.6. Analytical and navigation data

This includes data about user behavior when interacting with the platform, such as pages visited, time spent, navigation paths, clicks, usage patterns, frequency of access, traffic sources, and metrics related to interaction with campaigns, videos, emails, and other tools provided by Dubb. This data may be obtained through built-in analytics tools or third-party analytics services, as described in section 6.4.

3.7. Contact and communication data

This includes information that the user provides when contacting us through contact forms, support chat, or email, including name, email address, the subject of the inquiry, message content, and any additional information that the user provides during the interaction.

3.8. Data collected or generated through artificial intelligence (AI) features

When the user uses AI-powered features within the platform, such as live chat support (SIA), script generation, message automation, or content personalization, Dubb may collect and generate data such as user-entered content, AI-generated suggestions or responses, records of interactions with AI systems, behavior patterns, and derived data used to personalize the experience and improve the performance of those features. Content submitted to and generated by these features may be processed by third-party artificial intelligence and machine learning service providers acting on our behalf, as described in sections 6.1 and 6.7, solely to deliver the requested functionality.

3.9. Voice, likeness, and avatar data

When you enroll a voice, a face, or a likeness for the avatar and voice features, we create and store a model derived from the audio or images you provide. That is a voice model and a likeness model, and both are personal data. You may upload your own, or on some plans select a stock avatar or voice from our library, which involves no personal data about you.

This data is sensitive, and depending on where you live a voice model or a facial image may be classified as biometric or biometric-adjacent information with specific legal protections. We therefore commit to the following: we only create a voice or likeness model for the person who owns it, or where you have provided documented consent from the person concerned; we never create a model of a public figure, of a third party, or of a minor for the purpose of impersonation; the model is stored encrypted, is tied to your workspace, and is never shared with other customers; you can delete a voice or likeness model from your account settings, which removes the source samples and the derived model; and we do not use a voice or likeness model to train general-purpose models or to improve the platform for other customers. Where you enrolled a person who is not you, you must tell us if that person withdraws their consent, and we will delete the model.

3.10. Video, audio, and recording data

This includes the videos you record or upload, screen recordings, narrated screen recordings, webcam recordings, mobile recordings, voiceovers, the transcripts we generate from them, the thumbnails and preview images derived from them, and the metadata attached to them. It also includes recordings of visitors to the pages you build where you have enabled interactive features, and any video or audio you upload that contains other people.

3.11. Data from connected integrations and third-party platforms

When you connect an integration, we receive the data that integration's permissions allow, and we store what we need to keep it working, which typically includes an access token, a refresh token, an account identifier, and a display name. Depending on what you connect, this may include your CRM contacts and activity, your email and calendar data, your help desk tickets, your project records, and your financial records. You can disconnect an integration at any time, and we delete the associated tokens.

3.12. Lead, contact, and prospect data processed on your behalf

Dubb Agent and the Dubb CRM can find, enrich, verify, and contact people on your instructions. When they do, we process personal data about those people on your behalf and under your instructions. This may include business contact details, company and role information, publicly available professional information, telephone numbers and email addresses, verification and deliverability results, compliance flags such as do-not-call or litigator status, and the history of outreach sent to them.

In this role you are the controller and we are the processor. You are responsible for having a lawful basis to collect and contact those people, for honoring their opt-outs, and for complying with the telemarketing, email, and privacy laws that apply to you. We provide the tooling, the suppression lists, and the compliance flags, and the decision to contact is yours. See section 7.1 of our terms and conditions.

3.13. Social publishing data

When you connect a social account, we store the platform account identifier, handle, display name, profile image, follower count, the access and refresh tokens, the content you schedule, the post identifiers and public URLs the platform returns, the engagement metrics we read back, and any error the platform reports. We never receive your social platform password, we never read your private messages, and we do not read data from accounts you have not connected.

How long we keep your data

We retain personal data for as long as necessary to provide the functionalities available on the platform and to fulfill the purposes described in section 5, or until the user closes their account or requests the deletion of their data. We may retain personal data for longer where the user has consented to it, for as long as that consent is not withdrawn, or where a longer period is required to comply with a legal obligation or an order of an authority. Once the retention period has expired, the personal data is deleted, after which it can no longer be accessed, corrected, exported, or deleted on request, because we no longer hold it.

Retention periods vary by category of data. The schedule below applies unless a longer period is required by law, by an order of an authority, or to establish or defend a legal claim.

• Account and profile data: while your account is active, and for up to 90 days after closure to allow recovery, then deleted.
• Video, audio, and generated media: until you delete it, or for the life of your account, whichever ends first. Deleted media is removed from serving within 30 days and purged from backups within 90 days.
• Voice and likeness models: until you delete the model or your account closes, then deleted together with the source samples.
• Publishing records and outbound message history: for the life of the account, so records and audience history remain accurate.
• Contact and prospect data: until you delete it or your account closes, subject to any suppression list we must keep in order to honor an opt-out.
• Billing, invoice, and tax records: for the period tax and accounting law requires, typically seven years.
• Support and communication records: up to three years from the last interaction.
• Security and audit logs: 12 months.
• Analytics and navigation data: up to 26 months, and never longer than the retention period our analytics provider allows.
• Backup copies: rolling 90 days.

Purposes of data collection

Dubb collects, stores, and processes user data in order to provide an efficient, secure, personalized, and functional experience when using the platform. The specific purposes of processing depend on the type of information collected, as detailed below. The legal basis for each is described in section 2.2.

5.1. Personal data

Personal data is collected to identify the user, manage their relationship with the platform, personalize their experience, facilitate direct communication, and send them relevant information related to the use of the services, platform news, technical assistance, or contractual updates. It also allows us to carry out internal identity verification when necessary.

5.2. Registration and user account data

This information is used to create, maintain, and administer the user's account, enable secure access to the platform, retain their preferences, configuration history, and active subscriptions, enable personalized features, and manage access to contracted content or services.

5.3. Payment and billing data

Payment and billing data is collected to process transactions, issue payment receipts, keep proper records of contracted plans, manage automatic subscription renewals, apply pricing and discount policies, and respond to requests related to billing history or collection issues.

5.4. Platform usage data

This data allows us to provide and optimize the performance of the tools and features offered by Dubb, including video management, messaging campaigns, SMS campaigns, automated workflows, and CRM tools. It is also used to detect failures, improve the user experience, implement technical improvements, and offer features tailored to individual use.

5.5. Data collected automatically by different versions of the platform

This information is used to ensure the technical functioning of the platform, adapt to the characteristics of the user's device or environment, identify possible errors or vulnerabilities, maintain system security, and provide a smooth and compatible experience across the different versions (mobile, desktop, connected extension, and web).

5.6. Analytical and browsing data

Navigation data is processed for statistical and analytical purposes: to understand how users interact with the platform, evaluate campaign performance, identify usage patterns, develop product improvements, segment audiences, optimize internal processes, and make data-driven decisions aimed at growing the service.

5.7. Contact and communication data

The information collected through chat, forms, or email is used exclusively to manage user requests, provide technical or commercial assistance, resolve queries, offer personalized support, maintain a service history, and follow up on specific cases.

5.8. Data collected and generated through artificial intelligence (AI) features

Data entered or generated through AI tools available on the platform, such as intelligent chat (SIA), content generation, or message automation, is used to provide personalized responses, recommendations, and dynamic features, improve the accuracy and performance of AI tools, and tailor content to the user's sales and communication objectives. It also allows us to record interactions with AI systems and analyze the use of these features to improve the overall experience and performance of the platform.

AI output disclaimer. Output produced by AI features is generated by artificial intelligence, may be inaccurate or incomplete, and is provided for reference only. You should not rely on AI-generated output as a substitute for professional advice, including legal, medical, financial, or tax advice, and you remain responsible for reviewing output before relying on it or sharing it with others. You agree not to submit sensitive regulated data into AI features, including protected health information, payment card data, government-issued identifiers, or export-controlled information, unless we have agreed otherwise in writing. We do not authorize our AI service providers to use the content you submit through these features to train their own general-purpose models, except as needed to provide the service to you.

5.9. Voice, likeness, and avatar data

To render the avatar or narrate the script you have asked for, and for nothing else. We do not use it to improve models across customers, and we do not use it to represent anyone other than the person whose consent we hold.

5.10. Video, audio, and recording data

To record, store, edit, transcribe, host, and serve your videos; to generate thumbnails and previews; to power the interactive and analytics features on your pages; to deliver your video by email, SMS, iMessage, LinkedIn, and social posts; and to allow your recipients to watch it.

5.11. Data from connected integrations

To perform the actions you trigger inside the integration, such as creating a CRM record when a video is watched, importing contacts, syncing activities, booking a meeting, or posting to a channel. We request the narrowest permissions a feature needs, and we do not read the rest.

5.12. Lead, contact, and prospect data

To find and enrich leads on your instructions, verify email addresses and telephone numbers before you contact them, flag numbers against do-not-call and litigator lists, run your outreach sequences, log the results, and keep your suppression lists accurate.

5.13. Social publishing data

To publish what you scheduled, to report what happened, to read engagement back so your reporting is accurate, and to tell you when a platform rejects or limits something.

How we share information

Information about our users is an important part of our business, and we are not in the business of selling it to third parties. We share customer information only as described below.

6.1. Third-party providers

We use third-party services to perform certain functions on our platform. These include website creation and hosting, cloud infrastructure and storage, payment processing, email and SMS delivery, analytics, and the artificial intelligence and machine learning processing that powers the AI features of the platform.

These providers may access personal information only as needed to perform their functions on our behalf, and may not use it for their own purposes. Information shared with them is handled in accordance with their respective privacy policies and this privacy policy. The categories of service providers and sub-processors we use, and the function each performs, are set out below. Where a provider is named, it processes data on our behalf under a data processing agreement. We keep this list current and will notify users before adding a new category of processing.

• Cloud infrastructure and hosting: Amazon Web Services. Application hosting, storage, backups, and transactional email delivery.
• Media storage and delivery: Cloudflare (R2 and CDN). Video, image, and file storage and edge delivery.
• Analytics warehouse: Snowflake. Product analytics and business reporting.
• Payments and subscriptions: Stripe, and our subscription management platform. Card processing, subscription billing, invoicing, and tax.
• Email delivery: Twilio SendGrid. Transactional and broadcast email delivery, and delivery events.
• SMS and messaging: Twilio, and our messaging provider. Two-way SMS delivery and delivery events.
• AI voice synthesis and voice cloning: ElevenLabs. Generating narrated audio, and building voice models from samples you provide.
• AI avatar video generation: HeyGen. Generating talking-avatar video from the script and avatar you select.
• AI video generation: ByteDance Seedance, through BytePlus ModelArk or an authorized API provider. Generating video from a text prompt or a reference image.
• AI language models and assistants: our large language model providers. Generating and analyzing text for the assistants, Dubb Agent, and Dubb AI.
• Error monitoring: our error monitoring provider. Crash and error reports.
• Customer support: Intercom. Support conversations and help center delivery.
• Lead sourcing, enrichment, and verification: our sourcing, enrichment, verification, and skip trace providers. Finding, enriching, and verifying business contact data on your instructions.
• Direct mail and print fulfillment: Lob and Printful. Physical mail and merchandise fulfillment, only when you use those features.
• Code hosting and deployment: GitLab. Source code and deployment, no customer content.

6.2. Integrations

Dubb offers integrations with third-party services that extend the platform's functionality. These integrations may involve the transfer, access, or exchange of certain personal data with those services, in a controlled manner and for the purposes of the platform's operation.

These integrations are activated only by the user, who connects or authorizes them from their Dubb account. Below are some of the main integrations Dubb supports:

• LinkedIn: Dubb integrates with key LinkedIn features, including messaging, comments, connection requests, Sales Navigator, and Recruiter, so the user can link their activity on Dubb to their professional network on LinkedIn.
• YouTube: YouTube videos can be embedded in Dubb action pages, so content from YouTube can be viewed, inserted, or linked within the platform.
• Login services: users can register and log in with their Facebook, Google, or LinkedIn credentials. When they do, Dubb receives certain profile data, such as their name, email address, and profile photo.
• External CRM platforms: HubSpot, Salesforce, and others, to import contacts, synchronize activities, and send personalized communications with video content.
• Real estate CRM platforms: Follow Up Boss, kvCORE, Lofty, Wise Agent, Real Geeks, LionDesk, and others.
• Email and calendar: Gmail, Google Workspace, Outlook and Microsoft 365, Google Calendar, Calendly, and others.
• Sales engagement platforms: Outreach, Salesloft, Apollo, Klenty, Woodpecker, and others.
• Marketing and automation: Mailchimp, Constant Contact, Brevo, GetResponse, AWeber, Drip, Marketo, Pardot, Eloqua, and others.
• Automation platforms: Zapier, Make, and similar tools, which allow data to be routed to further services at the user's discretion.
• Communication and collaboration: Slack, Zoom, Microsoft Teams, Dubb Messaging, and others.
• Project and operations: Asana, Trello, ClickUp, Notion, and others.
• Help desk and support: Zendesk, Intercom, and others.
• Commerce and forms: Shopify, WordPress, ClickFunnels, Eventbrite, and others.
• Electronic signature and documents: PandaDoc and others.
• Social platforms: LinkedIn, Facebook, Instagram, YouTube, TikTok, and X.
• Financial systems: QuickBooks and others.

The full catalog of supported integrations is published in our marketplace. The categories above are the principal ones, and the list grows as new integrations are released.

Information obtained through integrations is used only for the purposes of the feature you enabled and within the functional framework of the platform. Dubb does not access or share user personal data with third parties without prior authorization, nor does it use it for purposes other than those specified. We recommend reviewing the privacy policies of any external services you choose to connect.

6.3. Marketing

We may use your name and email address to send you marketing communications about our platform and services, where the law allows or with your consent where the law requires it. We do not share this information with unaffiliated third parties for their own marketing. You can unsubscribe at any time with the "unsubscribe" link in any marketing email, or by contacting us using the details in section 17.

6.4. Analytics, cookies, and similar technologies

Dubb uses analytics and similar technologies, such as Google Analytics, to understand how visitors and users interact with our website and platform, improve our services, and personalize the experience. These technologies collect data about activity on our site, such as pages visited and interactions, which also helps us measure and improve the effectiveness of our marketing campaigns.

You can manage cookie and tracking preferences through your browser settings, and, where we offer one, through our cookie settings. Where the law requires your consent for non-essential cookies, we ask for it before setting them.

Our website does not currently respond to "Do Not Track" browser signals, because there is no common industry standard for them.

6.5. Business transfers

If Dubb creates, merges with, or is acquired by another entity, your information will likely be transferred. Dubb will send you an email or post a prominent notice on our platform before your information becomes subject to another privacy policy.

6.6. Protection of Dubb and others

We release personal information when we believe release is appropriate to comply with the law, enforce or apply our terms and conditions and other agreements, or protect the rights, property, or safety of Dubb, our users, or others. This includes exchanging information with other companies and organizations for fraud protection and credit risk reduction.

6.7. Artificial intelligence providers

Our AI features call third-party model providers. This is the part of Dubb most likely to be misunderstood, so we set it out plainly: we send the provider only the prompt or source material needed for the specific request, which may include your script text, an image of a consented avatar, a voice sample, a video, or a CRM field you asked the agent to work with. The provider may process that material to return the result and for nothing else. It may not train or improve its models with it, and it may not use it for its own purposes.

We require this contractually. Our agreements with AI providers prohibit training on customer data, require enterprise or API terms rather than consumer terms, treat submitted input as confidential, include a data processing agreement, and incorporate standard contractual clauses for international transfers. We do not send content to a provider whose default terms permit training, and we do not use your outputs to fine-tune general-purpose models. Retention at the provider is limited to what it needs for abuse monitoring and legal compliance, typically a short fixed window, after which the material is deleted.

6.8. No sale of personal information

We do not sell personal information as that term is defined by the California Consumer Privacy Act and comparable legislation, and we do not share it for cross-context behavioral advertising. We do not rent, trade, or otherwise disclose your data to third parties for their own marketing purposes. We do not use your videos, your contact lists, your recordings, or your generated content for advertising.

Data breach notifications

If a security breach compromises the confidentiality of our users' personal data, Dubb will notify those affected in a timely manner and in accordance with applicable law, using the contact details the user has provided on our platform. We will take all reasonable measures to protect the information and remedy any situation that compromises the security of your data.

International data transfer

Dubb is based in the United States. To operate the platform, we rely on hosting, storage, and processing services provided by third parties. As a result, your personal data may be processed and stored in the United States and in other jurisdictions whose data protection laws differ from, and may offer a lower level of protection than, the laws of your home jurisdiction. These transfers are necessary to provide the platform and the services you request.

Where such transfers occur, Dubb is committed to ensuring they comply with applicable data protection law and are subject to appropriate safeguards. These safeguards may include standard contractual clauses, assessments of the level of protection in the receiving jurisdiction, and contractual data protection obligations imposed on the third parties that process data on our behalf.

By using Dubb's services, you acknowledge the transfer, storage, and processing of your data in jurisdictions outside your country of residence as necessary for the operation of the platform and our services. Dubb will take all reasonable steps to protect the integrity and security of personal data during such international transfers.

Protection of your information

We grant access to your personal information only to those persons or services that have a legitimate need to know it, and in accordance with this privacy policy. We follow industry-recognized security standards to protect your personal information, both in transit and in storage. However, no method of transmission over the internet or electronic storage is completely secure. While we implement commercially reasonable data protection measures, we cannot guarantee the absolute security of your personal information.

We will not sell, distribute, or transfer your personal data to unauthorized third parties unless we have your explicit consent or are required by law to do so. Our commitments on the sale and sharing of personal information are set out in section 6.8.

Your rights

Users who provide information through our platform have the right to access, correct, download, or delete their information, and to restrict or object to certain processing of it. Some of these rights apply generally, and others apply only in certain circumstances or in certain places. They are described below:

• Access and portability: to know what information we hold about you and to receive a copy of it, send us a request using the details in section 17.
• Correction, restriction, and deletion: you may correct, restrict, or delete much of your information, as described in section 11.
• Right to be informed: on request, we will tell you what data we collect about you, how it is used, how long it is kept, and whether it is shared with third parties.
• Objection: where we process your data on the basis of our legitimate interests, described in section 2.2, you may object to that processing. In that case we will stop, unless we have compelling legitimate grounds to continue or the processing is necessary to establish, exercise, or defend legal claims. You can always object to marketing, and we will stop.
• Withdrawal of consent: where you have given your consent, you may withdraw it at any time, for example by updating your settings or contacting us. We may continue to process your information after you withdraw consent where we have another lawful basis for doing so, or where your withdrawal was limited to certain processing activities.
• Automated decision-making: we do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. If you believe we have, you may contact us to request human review and an explanation.
• Complaint: if you wish to complain about our use of your information, and without prejudice to any other rights you may have, you have the right to do so with your local data protection authority. We would welcome the chance to address your concern first, through the contact details in section 17.
• California residents: you have the right to know what personal information we collect and how we use and disclose it, to request access to and deletion of your personal information, to correct inaccurate personal information, and to opt out of the sale or sharing of personal information. As stated in section 6.8, we do not sell or share personal information. You also have the right to limit the use of sensitive personal information, which we process only to provide the service you requested; where you have enrolled a voice or likeness model, that data may constitute sensitive personal information, and we process it only to provide the feature to you. You may designate an authorized agent to make a request on your behalf. We will not discriminate against you for exercising any of these rights.

You may exercise these rights at any time by sending a request using the contact details in section 17, or, where available, through the controls in your account settings. We verify your identity before acting on a request. We confirm receipt within 10 business days and respond within 45 days, or within one month where the General Data Protection Regulation applies. Where the law allows, we may extend that period once, and if we do, we will tell you why.

Right of editing and deletion

We are committed to ensuring that our users maintain full control over their data, and we give users the right to modify or delete any information they have provided to the platform.

Users can edit or delete much of their data, such as personal and profile information, directly through their user account. Where a request cannot be handled through the account, users may contact us using the details in section 17 to make the necessary edits or deletions.

The following specific outcomes apply to the features of the platform:

• Deleting a video removes it from your library, from the pages it appeared on, and from our content delivery network.
• Disconnecting an integration revokes the token and stops the data flow immediately.
• Deleting a voice or likeness model removes the source samples and the derived model.
• Deleting your account removes your account data, your content, your contacts, and your connected integrations, and starts the backup purge.
• Some records survive deletion where the law requires it, such as invoices, tax records, and the suppression lists needed to honor an opt-out. We tell you what is retained and why.

Requests may be sent to support@dubb.com, or made through the settings of your account. A dedicated deletion process is published at dubb.com/data-deletion.

Protection of children's online privacy

The Dubb platform is not directed at children. Our terms and conditions require users to be at least sixteen (16) years old and of sufficient legal age to enter into a binding contract where they reside, and we do not knowingly collect personal data from anyone under sixteen. We do not create voice or likeness models of minors, and such enrollment is prohibited.

We comply with the Children's Online Privacy Protection Act and equivalent laws where they apply. If we learn that we have collected personal data from a child, and in particular from a child under thirteen (13), we will delete it promptly. If you believe a child has provided us with personal data, please contact us using the details in section 17.

Third parties

Except as expressly stated in this privacy policy, this policy covers only the use and disclosure of information Dubb collects from you. If you disclose your information to others, such as other users of the platform or sellers in the Dubb marketplace, different rules may apply to their use or disclosure of the information you disclose to them. Dubb does not control the privacy policies of third parties, and you are subject to those policies where they apply. Dubb is not responsible for the privacy or security practices of other websites or services, including those linked to or from the Dubb platform. Please review the privacy policies of the third-party websites and services you access through the Dubb platform.

Changes to this privacy policy

We may change this privacy policy from time to time. When we do, we will post the updated policy on our website, revise the date shown at the top, and notify users promptly. Where the law requires your consent to a change, we will ask for it. Otherwise, your continued use of our website and services after a change takes effect constitutes acceptance of the updated policy.

SMS terms & conditions

Product description

By providing your mobile phone number, you consent to receive SMS messages from Dubb related to account updates, promotional offers, or notifications.

Message frequency

Message frequency may vary. You may receive a varying number of messages per week or month depending on your interaction with the platform and selected preferences.

Message and data rates

Standard message and data rates may apply based on your mobile carrier plan.

Opting out

You may opt out of receiving SMS messages at any time by replying "STOP" to any SMS message you receive from us. After opting out, you will receive a confirmation message, and we will stop sending SMS messages to your number.

Help and support

If you need assistance or have questions about our SMS service, reply "HELP" to any SMS message you receive, or contact our customer support team at support@dubb.com.

Robocalls and automated messages

By providing your phone number, you also consent to receive prerecorded messages and/or autodialed calls (including through technologies such as artificial or prerecorded voice systems or automatic telephone dialing systems) from Dubb for the purposes stated above. Consent to receive automated calls or texts is not a condition of any purchase.

Your contacts and your messages

When you use the platform to send messages to other people, you are the sender, and you are responsible for obtaining the consent that applicable law requires and for honoring any request to stop receiving communications. The suppression tools we provide must be used for that purpose. Further obligations relating to outreach and contact data are set out in section 7.1 of our terms and conditions.

Privacy policy

Your phone number will be handled in accordance with our Privacy Policy. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Dubb Capture extension

Dubb Capture is our Chrome extension for taking screenshots and marking them up, picking colors from a page, copying the addresses of open tabs, and downloading a website's favicon. It works differently from the rest of the platform: it does not connect to a Dubb account, it collects no personal data, and everything it does happens inside your browser, on your computer. This section describes it completely, and where it differs from the rest of this policy, this section applies.

16.1. Information we collect

None. Dubb Capture has no server component and sends nothing about you anywhere. It does not collect, transmit, store remotely, or sell your screenshots or anything visible in them, the colors you pick, the addresses of your tabs, your browsing history, any identifier such as your name, email address, or IP address, usage or telemetry data, or cookies, advertising identifiers, or device fingerprints. It contains no analytics tools, advertising software, or trackers, so no third party receives any data from it.

16.2. Screenshots and colors

When you take a capture, your browser creates the image and holds it in the browser's own local storage under a single one-time key, only to pass it to the editor tab that opens a moment later. The editor deletes that entry as soon as it loads the image. If a capture is ever left behind, for example because you closed the editor before it finished loading, it is removed automatically the next time Chrome starts once it is more than 24 hours old.

As soon as a capture opens in the editor, the extension places the image on your clipboard so you can paste it straight away, which replaces whatever you had copied before. The extension only ever writes to your clipboard and never reads from it. When you choose Download PNG, your browser saves the file to your usual download location.

The color picker works from a screenshot of the visible part of the page, handed over the same way and deleted the moment it is read. The color under your pointer is read from that image on your computer, and when you click, its value is written to your clipboard.

16.3. Tab addresses

When you open Copy all URLs, or press its keyboard shortcut, the extension reads the addresses of your open tabs, in the current window or in all windows depending on the option you choose, and shows them in an editable box in the extension popup. It reads only the addresses, not the content of the pages, and only at that moment: it does not watch, record, or keep a history of the tabs you open. The list exists only while the popup is open. The lines you keep are written to your clipboard when you press Copy URLs to Clipboard, and nothing in the list is stored, logged, or sent anywhere.

Reading tab addresses requires a permission that Chrome describes as "Read your browsing history". It is optional: it is never requested when you install or update Dubb Capture, Chrome asks for it only the first time you use Copy all URLs, and declining it does not affect any other feature.

16.4. Favicons

When you open Download a Favicon, the extension reads the icon links in the page you are viewing and requests those icon files from the website, along with the site's web app manifest and its standard /favicon.ico. These are the same public files your browser already loads to show the icon in the tab. The requests are made with your cookies turned off and carry nothing from the extension, and each icon is checked and previewed from the copy that was downloaded, on your computer.

There is one exception. Some websites serve their icons from a separate host that does not allow extensions to read its files. Because such an icon cannot be downloaded, the extension shows its preview by loading it the way a web page loads any image, which means your browser may include any cookies it already holds for that host, exactly as it would on the website itself. If you then choose Open, the icon opens in a new tab like any link you follow. Nothing is stored by the extension, and nothing is sent to Dubb.

These icon requests are the only network requests Dubb Capture makes.

16.5. Link to dubb.com

The extension popup includes a "Made by Dubb" link. If you click it, your browser opens dubb.com in a new tab, and the address carries campaign tags that tell Dubb the visit came from Dubb Capture. It carries nothing else. Nothing happens unless you click it, and once you are on dubb.com, the rest of this policy applies.

16.6. What is stored on your device

Dubb Capture keeps a small amount of information in your browser's local storage, on your own computer. It is never synced to Dubb or across your devices, and it is all deleted when you remove the extension. It consists of the one-time handoff of a capture or color picker screenshot described in section 16.2, the color format you last chose (HEX, RGB, or HSL), whether Copy all URLs last showed one window or all of them, and a short-lived note, removed within seconds, that tells the popup which view a keyboard shortcut asked it to open.

16.7. Permissions and why each is needed

Dubb Capture requests no host permissions and no standing access to the content of any website. It cannot read a page until you invoke it, and that access ends when the tab navigates away or closes.

• activeTab: lets the extension capture, sample, or read the icons of the single tab you are viewing, and only after you click the Dubb Capture toolbar icon or press one of its keyboard shortcuts. No other tab's content is ever read.
• scripting: used for full page capture, the color picker, and Download a Favicon, and only in the tab you invoked the extension on. It reads the page's scroll height and scrolls between screenshots, places the color picker's magnifier over the page, and reads the page's icon link tags. None of these read the page's content or transmit anything about you.
• storage and unlimitedStorage: used for the brief local handoff of a captured image and the preferences listed in section 16.6. Unlimited storage is required because a full page screenshot of a long page can exceed the browser's default 10 MB local storage limit.
• clipboardWrite: lets the extension place what it copies on your clipboard: a screenshot, a finished image, a color value, or the list of addresses you kept. It never reads your clipboard.
• tabs (optional): used only by Copy all URLs, to read the addresses of your open tabs, as described in section 16.3. You can remove it at any time from the extension's details page in Chrome.

16.8. Limited use, remote code, and your rights

Dubb Capture's use of information complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Because it collects and transmits no user data, there is nothing to transfer, sell, share for advertising, use for credit assessment, or use to train artificial intelligence models. All of its code is included in the package that Google reviews and distributes, and it loads and runs no code from anywhere else.

We hold no personal information from Dubb Capture, so there is nothing for us to produce, correct, export, or delete in response to a rights request. Everything it keeps is on your own computer, and you can delete all of it at any time by removing the extension. If a future version were ever to collect or transmit data, we would disclose that here and in the extension's Chrome Web Store listing before the change took effect.

Contact information

If you have questions or concerns about this privacy policy or the treatment and security of your data, or want to exercise any of your rights, please contact us via our contact page or using the following contact information:

Dubb LLC, 25101 The Old Rd #245, Santa Clarita, CA 91381, United States
support@dubb.com