Privacy Policy

Last updated: April 16, 2025

This Privacy Policy describes how Novatrix Consulting LLC SPC ("Company", "we", "us", "our"), operating DoHub at dohub.online ("Service"), collects, uses, stores, and protects your personal data. This policy is designed to comply with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and the EU General Data Protection Regulation (GDPR) where applicable.

1. Data Controller

The data controller responsible for your personal data is:

Novatrix Consulting LLC SPC
Shakhbout City, Abu Dhabi, UAE
Email: support@dohub.online

2. Data We Collect

Data type	What we collect	Why
Account data	Name, email, profile picture (from Google OAuth)	To create and manage your account
Voice recordings	Audio of your speech during translation	To transcribe, translate, and provide conversation history
Transcriptions	Text of what you said and its translation	To display in your conversation history
Usage data	Credits used, turns taken, languages used	To track your balance and improve the service
Payment data	Transaction records (not card numbers — handled by Stripe)	To process purchases and maintain billing records
Technical data	IP address, browser type, session cookies	For security, authentication, and service operation

3. How We Use Your Data

We use your data exclusively to:

Provide the translation service (transcribe, translate, generate audio)
Maintain your conversation history and allow replay
Process credit purchases and manage your account balance
Authenticate you via Google OAuth
Communicate with you about your account (if needed)
Improve service quality and fix bugs
Comply with legal obligations

        We do NOT: sell your data, use your voice recordings for AI training, share your data with advertisers, or process your data for profiling or automated decision-making.
    

4. Legal Basis for Processing

We process your data under the following legal bases:

Contract performance — processing necessary to deliver the Service you requested
Legitimate interest — improving service quality, fraud prevention, security
Consent — for any processing beyond the above, we will request your explicit consent
Legal obligation — where required by UAE law or applicable regulations

5. Third-Party Services

We use the following third-party services to operate DoHub:

Service	Purpose	Data shared	Privacy policy
OpenAI	Speech-to-text transcription	Voice audio (processed, not stored by OpenAI per their API policy)	Link
Google	OAuth authentication, translation	Name, email, profile photo (for auth); text (for translation)	Link
Amazon Web Services	Cloud hosting, audio file storage (S3)	Voice recordings (encrypted at rest)	Link
Stripe	Payment processing	Payment card details (handled by Stripe, not by us)	Link

6. Data Storage and Security

6.1 Where is your data stored?

Account data and conversation text — PostgreSQL database hosted on our servers
Voice recordings — AWS S3 (Singapore region), encrypted with AES-256 server-side encryption
Payment records — stored in our database; card details are held by Stripe

6.2 Security measures

All data transmitted over HTTPS (TLS encryption in transit)
Voice recordings encrypted at rest (AES-256) in AWS S3
Database access restricted to application-level credentials
Session cookies are HTTP-only, secure, and SameSite=Lax
Pre-signed URLs for audio playback (time-limited, per-user)
Admin access restricted to authorized personnel only

7. Data Retention

Data type	Retention period
Account data	Until you delete your account
Conversation text	Until you delete the conversation or your account
Voice recordings	Until you delete the conversation or your account
Payment records	7 years (UAE financial record-keeping requirements)
Session cookies	30 days from last login

When you delete a conversation, both the text records and associated audio files are permanently removed from our database and cloud storage.

8. Your Rights

Under the UAE PDPL and GDPR (where applicable), you have the right to:

Access — request a copy of all personal data we hold about you
Rectification — correct inaccurate data (your profile is synced from Google)
Erasure — delete your account and all associated data ("right to be forgotten")
Data portability — receive your data in a structured, machine-readable format
Restriction — request that we limit how we process your data
Objection — object to processing based on legitimate interest
Withdraw consent — where processing is based on consent, you may withdraw at any time

To exercise any of these rights, email support@dohub.online. We will respond within 30 days.

9. Cookies

We use a single essential session cookie to keep you logged in. We do not use tracking cookies, analytics cookies, or advertising cookies. No cookie consent banner is required because our cookie use is strictly necessary for the Service to function.

10. Children's Privacy

The Service is not intended for children under 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will delete it promptly.

11. International Data Transfers

Your data may be processed in the following jurisdictions:

United Arab Emirates — our primary servers
Singapore — AWS S3 storage for voice recordings
United States — OpenAI API processing, Stripe payment processing

Where data is transferred internationally, we ensure appropriate safeguards are in place, including the use of standard contractual clauses and the security measures described in this policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the Service. The "Last updated" date at the top indicates the most recent revision.

13. Contact

For privacy-related inquiries or to exercise your data rights:

Novatrix Consulting LLC SPC
Shakhbout City, Abu Dhabi, UAE
Email: support@dohub.online