Privacy Policy

Last updated 1 August 2026

This explains what Neo Dub Studio (neodubstudio.com) stores about you, why, how long it stays, and who else can see it. The data controller is Neo Dub Studio. For anything in this policy, write to [email protected].

What we store

Account

  • Your email address, and your name if you give one.
  • A cryptographic hash of your password — never the password itself.
  • Whether your account is an administrator, and your credit balance.

Material you upload

  • The audio or video files you upload, and the audio extracted from them.
  • Everything derived from them: per-line clips, transcripts, translations, generated takes, and exported mixes.
  • Project settings — target language, per-line voice references, seeds, pacing.

Your material may contain other people’s personal data — their voices, their names, what they said. You decide what to upload, and you are responsible for having the right to do so (see section 3 of the Terms of Service). In relation to that material we act on your instructions: you are the controller, we process it for you.

Usage

  • A record of each job you run: its type, when it started and finished, and whether it succeeded.
  • A ledger of every credit charged and granted, so a balance can always be explained.
  • Server logs, including IP addresses, kept for security and troubleshooting.

Payments

We never see or store your card details. Payments are handled by Paddle, which acts as merchant of record and is a separate controller for the payment data it collects. We receive only what we need to run your subscription: that a payment succeeded, which plan, and when it renews.

We do not look at your material

The application gives no one — including us — a way to open, play or download someone else’s project.

Our administrative tools deal in numbers, not content: which accounts exist, how many projects and jobs each has, credit balances, when someone last ran something. They cannot show a transcript, play a take, or reveal what a project is about. An administrator opening another account’s project is refused by the service in the same way any stranger would be.

We built it this way on purpose. We do not want access to what you are working on — a great deal of it is confidential before release, and the safest position for both of us is one where we could not look even if asked to.

Being straightforward about the limit: your files sit on a server we operate, so technical access to the disk exists, as it does for every hosted service in the world. We do not use it to view customer material, and nothing in the product surfaces it. Anyone who tells you their hosted service is technically incapable of this is describing something else, usually end-to-end encryption, which is not compatible with a service that has to process your audio.

Because we neither review nor screen what you upload, we are not in a position to judge whether you hold the rights to it — that responsibility is yours, and section 3 of the Terms of Service sets it out.

Why we store it, and on what basis

  • To provide the service — account, projects, processing your material, delivering results. Basis: performance of our contract with you.
  • To bill accurately — job timings and the credit ledger. Basis: performance of the contract, and our legal obligation to keep accounting records.
  • To keep the service secure — logs, failed-login tracking. Basis: our legitimate interest in preventing abuse and unauthorised access.
  • To answer you — messages sent through the contact form. Basis: our legitimate interest in responding to enquiries.

We do not use your material to train models. We do not sell your data, and we do not use it for advertising or profiling.

How long we keep it

  • Free plan projects: until the session ends. Projects and all their files are deleted shortly after you close the tab. Nothing is retained.
  • Paid plan projects: while your subscription is active. We store your work because you are paying us to. If the subscription ends — whether you cancel or a payment stops — the projects are kept for 3 days and are then deleted along with every file in them. That window is a grace period, not storage.
  • Projects you delete yourself: immediately. Deleting a project removes its files from disk and its records from our database in the same operation. There is no bin to empty and no copy kept aside.
  • Account: until you ask us to close it, after which it and its projects are deleted.
  • Credit ledger and invoices: retained after account closure for as long as accounting and tax law requires.
  • Server logs: a short rolling window, then overwritten.

Where it is processed

The application and your files are hosted on servers in the European Union.

Generation, transcription and translation on the free plan run on hardware located in Ukraine, operated by us.

This means material processed on the free plan is transferred outside the European Economic Area. It is transferred only for the processing you asked for, it is not retained there after the job completes, and it is not shared with anyone. If you are subject to EU data protection law and this transfer is unacceptable to you, do not use the free plan for material containing personal data.

Paid plans are processed on rented infrastructure; where that infrastructure sits outside the EEA, the transfer is made under the provider’s standard contractual clauses.

Who else sees it

We do not sell or share your data, and your material is never passed to anyone.

Running the service needs a hosting provider for the servers and a network provider for traffic; neither reads your projects. Payments go through Paddle as merchant of record, which is why its name is on your receipt. Nothing goes to advertisers, data brokers or analytics companies.

We will disclose data where the law requires it, or to establish or defend a legal claim.

Cookies

We set one cookie: a session cookie that keeps you signed in. It is marked HttpOnly and Secure, so it cannot be read by scripts and is only sent over an encrypted connection. It expires when your session does, or when you sign out.

We use no advertising cookies, no analytics cookies, and no third-party trackers.

Your rights

If you are in the European Union or the United Kingdom, you have the right to:

  • See what we hold about you, and receive a copy.
  • Have inaccurate data corrected.
  • Have your data deleted.
  • Receive your data in a portable format.
  • Object to processing based on legitimate interest, and to restrict processing while an objection is considered.
  • Withdraw consent where processing relies on it.

Write to [email protected] and we will respond within one month. You can export your projects yourself from within the application at any time.

If you believe we have handled your data wrongly, you may complain to the data protection authority in the country where you live.

Security

Connections to the site are encrypted. Passwords are stored as bcrypt hashes and are never recoverable, by us or anyone else. Repeated failed sign-in attempts are throttled. Access to the servers is by cryptographic key only; password login is disabled.

No system is perfectly secure. If we become aware of a breach that puts your rights at risk, we will tell you and the relevant authority as the law requires.

Children

The service is not intended for anyone under 16, and we do not knowingly create accounts for them.

Changes

If we change this policy materially we will notify you by email or in the application before the change takes effect.