Last updated: April 16, 2026
Dubable is an AI-powered website builder operated by Dubable AI Cloud Services and Computer Systems - FZCO, a company registered in the IFZA Free Zone, Dubai, United Arab Emirates. This Privacy Policy explains how we collect, use, and protect your personal data when you use dubable.dev and related services.
By using Dubable, you agree to this policy. If you do not agree, please do not use our services.
We collect the following categories of data:
Account Information: Your name, email address, and encrypted password when you register. If you sign up via Google or GitHub, we receive your name and email from those services.
Business Profile: Optional details you choose to share (what your business does, who your customers are, services and prices, brand tone, goals). Used only as context for AI generations in your workspace.
Payment Information: Processed by Stripe. We store only the last 4 digits of your card and card type. We never store full card numbers.
Usage Data: Websites you build, AI models you use, credits consumed, features accessed, and session activity.
Website Content: Sites and documents (invoices, proposals) you create using Dubable are stored on your behalf in Cloudflare R2 storage.
CRM Contacts and Lead Data: Contacts, companies, deals, tasks, and notes you add to your CRM, plus any analytics from your published sites (page views, WhatsApp clicks, form submissions).
Meta Ads Lead Data (when connected): If you connect a Meta (Facebook/Instagram) Page, leads submitted to your ad forms flow into your workspace CRM. See Section 5 for details.
Technical Data: IP address, browser type, device information, operating system, and cookies as described in Section 9.
Communications: Support requests and emails you send to our team.
We use your data to:
We do NOT sell your personal data to any third party under any circumstances.
We do NOT use your generated content or prompts to train our AI models without your explicit written consent.
When you build a website with Dubable, your prompts and instructions are sent to AI providers for processing:
Each provider processes your prompts under their own privacy policies. We recommend reviewing these policies.
Your generated websites are stored securely in Cloudflare R2 storage associated with your account. You retain full ownership of all content you generate using Dubable. We do not claim any intellectual property rights over your generated websites.
If you connect a Facebook or Instagram Page to your Dubable workspace via Settings → Connectors, Meta notifies our webhook whenever someone submits a Lead Ad form. We then fetch that lead (name, email, phone, form fields) via the Meta Graph API using the access token you authorised, and create a CRM contact inside your workspace.
Where it is stored: only inside your workspace CRM database row. It is tagged with the source “meta-ads” so you can filter it.
Who can see it: only you and members of your workspace with CRM access. It is never shared with other Dubable users, other workspaces, or third parties.
Advertising: we never use Meta lead data for advertising, retargeting, profiling across services, or sale to third parties.
Access: we only obtain access when you explicitly authorise the OAuth connection. You can revoke access any time via Settings → Connectors → Meta Ads → Disconnect, which unsubscribes our webhook and deletes the integration credentials.
Deletion: disconnect any time to stop receiving new leads; delete your workspace to remove all existing leads. Meta-specific lead fields are removed from our database within 24 hours of disconnection.
This integration complies with Meta's Platform Terms and Developer Policies. Our Meta app uses the scopes pages_manage_metadata, leads_retrieval, pages_read_engagement, pages_show_list, and ads_read.
We share data only with these service providers, solely to operate Dubable:
We do not share your data with advertisers, data brokers, or any other third parties. We do not display advertising in Dubable.
We retain your data as follows:
Account data: Retained while your account is active, plus 90 days after deletion to allow for account recovery requests.
Generated websites: Deleted immediately when you delete a project or close your account.
Payment records: Retained for 7 years as required by UAE VAT and financial regulations.
Support communications: Retained for 2 years.
After retention periods expire, data is permanently deleted from all systems.
Under UAE Federal Decree-Law No. 45 of 2021 (UAE PDPL) and applicable data protection laws including GDPR for EU residents, you have the following rights:
Right to Access: Request a copy of all personal data we hold about you.
Right to Correction: Request correction of inaccurate or incomplete data.
Right to Deletion: Request deletion of your account and all associated data.
Right to Data Portability: Export your data in JSON format via Settings → Export Data.
Right to Withdraw Consent: Withdraw consent for any optional data processing at any time.
Right to Lodge a Complaint: Contact the UAE Telecommunications and Digital Government Regulatory Authority (TDRA) at tdra.gov.ae
To exercise any right: email [email protected]. We will respond within 30 days.
We protect your data with:
Despite these measures, no system is 100% secure. If you discover a security vulnerability, please email [email protected] responsibly.
Dubable is not intended for users under 18 years of age. We do not knowingly collect personal data from minors. If we discover we have collected data from a minor, we will delete it immediately. If you believe we have collected data from a minor, contact us at [email protected].
We will notify you by email at least 30 days before making material changes to this policy. Continued use of Dubable after changes take effect constitutes acceptance of the updated policy. The “Last updated” date at the top of this page reflects the most recent revision.
Privacy Officer: [email protected]
Legal inquiries: [email protected]
Dubable AI Cloud Services and Computer Systems - FZCO
IFZA Business Park, Dubai Silicon Oasis
Dubai, United Arab Emirates
UAE Data Protection Authority:
Telecommunications and Digital Government Regulatory Authority (TDRA)