Privacy Policy

Last updated: March 2026

1. Introduction

Dobidy ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal data when you use our AI video advertising platform at dobidy.com ("the Service").

By using the Service, you consent to the data practices described in this policy. If you do not agree, please do not use the Service.

2. Data We Collect

Account Information

When you create an account (via email or Google sign-in), we collect your name, email address, and profile image through our authentication provider, Clerk.

Brand & Business Information

You may optionally provide your product name, product description, target audience, brand tone, visual style notes, competitor context, logo, and product images. This information is used to personalize the AI-generated advertising content.

Content You Provide

During the video creation process, we collect and process the information you provide in chat conversations, creative briefs, advertising scenarios, and product images you upload. This content is necessary to generate your video advertisements.

Payment Information

Payment processing is handled entirely by LemonSqueezy. We do not store your credit card numbers, bank details, or other financial information. LemonSqueezy collects and processes payment data in accordance with PCI-DSS standards. See LemonSqueezy's Privacy Policy.

Usage Data

We collect information about how you use the Service, including pages visited, features used, video generation history, and purchase records. We also collect technical data such as your IP address, browser type, and device information for security and abuse prevention purposes.

Error & Performance Data

We automatically collect error reports and performance data to diagnose issues and improve the Service. This may include browser console errors, failed API requests, and stack traces. Error data is stored in our database and in our error monitoring service (Sentry).

3. How We Use Your Data

  • To provide the video generation service and deliver your purchased videos
  • To personalize AI-generated content based on your brand information
  • To manage your account and process payments
  • To communicate with you about your account, purchases, and service updates
  • To prevent fraud, abuse, and enforce our Terms of Service
  • To diagnose technical issues and improve the Service
  • To analyze usage patterns and improve the platform (with your consent, where required)
  • To create anonymized, aggregated insights from creative patterns, scenario preferences, and usage trends to improve our AI models and services — this data cannot identify you personally
  • To comply with legal obligations

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your data based on:

  • Contract performance — Processing necessary to provide the Service you requested (account management, video generation, payment processing)
  • Legitimate interests — Security, fraud prevention, service improvement, and error monitoring
  • Consent — Analytics cookies and marketing communications (you can withdraw consent at any time)
  • Legal obligation — Tax records, regulatory compliance

5. Third-Party Services

We use the following third-party services to operate the platform. Each processes data as described below and under their own privacy policies:

  • Clerk — Authentication and user management. Processes your login credentials, email, name, and profile image. Privacy Policy
  • LemonSqueezy — Payment processing. Handles billing, tax calculation, invoicing, and payment data. Privacy Policy
  • OpenAI — AI text generation. Processes your product information, brand details, and chat conversations to generate advertising scripts and scenarios. Privacy Policy
  • Anthropic — AI text generation. Processes your creative brief and brand context to generate advertising scenarios. Privacy Policy
  • fal.ai — Video and image generation. Processes your prompts and uploaded images to generate video content. Privacy Policy
  • Vercel — Hosting and infrastructure. Serves the website and stores uploaded images (Vercel Blob). Privacy Policy
  • Neon — Database hosting (PostgreSQL). Stores your account data, projects, and purchase history. Privacy Policy
  • Sentry — Error monitoring and performance tracking. Receives error reports and diagnostic data. Privacy Policy
  • Google Analytics — Website analytics (loaded only with your explicit consent). Tracks page views and usage patterns. Privacy Policy
  • Resend — Email delivery. Processes your email address to send transactional notifications (video ready, reminders). Privacy Policy

6. Data Retention

  • Account data — Retained for as long as your account is active
  • Project data (briefs, scenarios, prompts) — Retained while your account is active
  • Generated videos — Stored temporarily on our infrastructure; permanent copies are kept in Vercel Blob storage while your account is active
  • Uploaded images — Stored in Vercel Blob while your account is active
  • Purchase records — Retained for up to 7 years after purchase for tax and legal compliance
  • Error logs — Retained for up to 90 days for debugging purposes
  • Account deletion — Upon account deletion, all personal data is removed within 30 days. Purchase records are anonymized (not deleted) for legal compliance

7. Anonymized & Aggregated Data

We may create anonymized, aggregated, and de-identified data from information collected through the Service, including creative patterns, scenario preferences, feature usage, and general trends. This data does not identify any individual user and is not subject to deletion requests or data portability rights.

We use this aggregated data to improve our AI models, analyze platform performance, develop new features, and for business purposes such as reporting and research. Because this data is fully anonymized, it may be retained indefinitely and used without restriction.

8. Your Rights

Under the General Data Protection Regulation (GDPR) and similar privacy laws, you have the following rights:

  • Access — Request a copy of all personal data we hold about you
  • Rectification — Correct inaccurate or incomplete personal data
  • Erasure — Request deletion of your account and all associated data
  • Data Portability — Export your data in a machine-readable format (JSON)
  • Restriction — Request that we limit how we process your data
  • Objection — Object to processing based on legitimate interests
  • Withdraw Consent — Revoke analytics consent at any time via the cookie settings

You can exercise most of these rights directly from your dashboard settings (data export and account deletion). For other requests, contact us at privacy@dobidy.com. We will respond within 30 days.

9. Cookies

Strictly Necessary Cookies

Session cookies set by Clerk for authentication are strictly necessary for the Service to function. These do not require consent and cannot be disabled.

Analytics Cookies

Google Analytics cookies are only loaded after you explicitly consent via our cookie banner. You can change your preference at any time using the cookie settings link. If you decline, no analytics cookies are set and no usage data is sent to Google.

10. International Data Transfers

Your data may be processed in countries outside your own, including the United States, where our third-party service providers operate. We ensure that such transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) where required by GDPR.

11. Data Security

We implement appropriate technical and organizational security measures to protect your data, including:

  • Encryption in transit (HTTPS/TLS) for all connections
  • Secure authentication via Clerk (with Google OAuth support)
  • Server-side API key storage — credentials are never exposed to the browser
  • Rate limiting to prevent abuse
  • Server-side input validation and sanitization
  • Webhook signature verification for payment events

While we take reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

12. Children's Privacy

The Service is not intended for children under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notification. The "Last updated" date at the top indicates the most recent revision. Continued use of the Service after changes constitutes acceptance.

14. Contact

For privacy-related questions, data requests, or to exercise your rights, contact us at privacy@dobidy.com.