LEGAL

Privacy Policy

Privacy Policy

Last updated: July 2, 2026

This Privacy Policy explains how Dubot (“Dubot,” “we,” “us,” or “our”) collects, uses, and discloses information when you visit dubot.ai or use the Dubot product.

Who we are

Dubot is provided by Dubot, Inc. For any privacy question, contact security@dubot.ai.

Information we collect

Information you give us: contact and demo-request details on the site (name, work email, company, message), and account/workspace information when you sign up (name, email, company, authentication credentials).

Information collected automatically: analytics via Google Analytics on the site, and product usage data when you use Dubot — actions taken, session and turn logs, and performance/error telemetry used to operate, secure, and improve the service.

Information processed on behalf of customers: if your organization is a Dubot customer, we may process that organization’s own end-user data strictly as instructed by them, under our agreement with them. In that relationship, the customer is the data controller and Dubot is the data processor.

How we use information

We use information to provide and secure the service, respond to inquiries, send account and service communications, monitor and improve reliability, and comply with legal obligations. We do not sell personal information.

Where data is hosted

Application data (accounts and workspace data) is hosted on Amazon Web Services in the us-east-1 region, in a managed PostgreSQL database (Amazon Aurora Serverless). Product usage and event data is hosted on Amazon DynamoDB, also in AWS us-east-1. Edge and API delivery is served via Cloudflare, which may process request metadata such as IP address to route traffic globally. Authentication is handled by Better Auth, self-hosted on our own infrastructure. Transactional email is sent via Postmark.

Cookies

We use Google Analytics to understand how visitors use dubot.ai. Google Analytics sets cookies (such as _ga) to measure and report site usage, and shares limited data such as your IP address with Google. We do not use cookies for advertising, and we do not sell personal information. You can opt out with Google’s browser add-on.

Sharing and subprocessors

We share information only with service providers who process it on our behalf, under contract, and only as needed to provide the service: Amazon Web Services (hosting, database, compute), Cloudflare (edge network and CDN), Google (website analytics via Google Analytics), and Postmark (transactional email). We do not sell personal information, and do not share it for third-party advertising.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict certain processing. To exercise these rights, contact security@dubot.ai.

Data retention

We retain personal information for as long as needed to provide the service and for legitimate business or legal purposes, then delete or anonymize it. Customer data retention is governed by the applicable customer agreement.

Security

See our Trust & Security page for details on how we protect data.

Children’s privacy

The service is not directed to children under 16, and we do not knowingly collect personal information from them.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

Contact us

Email: security@dubot.ai