Privacy Policy

1. About Dúbal

Dúbal is a done-for-you AI avatar content and digital marketing agency that helps brands, coaches, and course creators produce high-quality videos, voiceovers, and avatar-driven media using artificial intelligence. Our services include AI avatar creation, online course production, GoHighLevel multi-step funnel builds, Facebook Ads management, multilingual content delivery in 175+ languages, and SMS and email automation. We work with technology partners like HeyGen to power features such as synthetic avatars and voice replication. This Privacy Policy outlines how we collect, use, store, and share personal data, and what rights you have over your information.

2. Scope of This Policy

This Privacy Policy applies to all users of our website at dubal.ai, our services, and any information provided to us through onboarding forms, booking calls, video submissions, or content generation requests.

When using AI avatar features, you also agree to data processing by our third-party provider, HeyGen, which has its own Privacy Policy at heygen.com/privacy.

3. What Data We Collect

Contact & Account Information

Full name, email address, company name, and location. Payment details (processed via Stripe). Communications and support messages.

Creative Inputs

Videos, voice recordings, facial images, and likeness data. Text scripts, prompts, and brand content provided for video and avatar generation.

Technical & Usage Data

IP address, browser type, device type, and pages visited. Time zones and engagement data collected via cookies or analytics tools.

Biometric Data

When you submit content for avatar creation, we (via HeyGen) may collect and process biometric identifiers, including facial geometry and voiceprint data. These are used solely to generate synthetic media and are not used or shared for any unrelated purpose.

4. Legal Basis for Processing

We process personal data based on your consent, the performance of a contract, our legitimate business interests (such as service improvement and security), and compliance with legal obligations.

5. How We Use Your Data

• Create and manage your AI avatar and media content
• Script, design, and edit branded videos
• Deliver Facebook Ads management and GoHighLevel funnel services
• Provide technical support and account communication
• Process payments and manage your relationship with us
• Improve Dúbal's services
• Comply with legal requirements

6. Avatar Processing via HeyGen

When you submit your likeness for avatar creation, we transmit that data to HeyGen, who acts as the data controller for avatar rendering and AI model training. They may process facial and voice data to create synthetic avatars, store that data to support ongoing content production, and use anonymised data to improve their models unless you opt out.

See HeyGen's full Privacy Policy: heygen.com/privacy

7. Consent for Biometric Data

By using Dúbal's avatar services, you explicitly consent to the capture, processing, and storage of biometric identifiers. This data is only used for the creation of synthetic content and will not be sold or shared. You may withdraw this consent at any time by contacting [email protected]. Withdrawing consent may limit your ability to use avatar-based features.

8. AI Model Training Opt-Out

To improve avatar quality and realism, our partner HeyGen may use anonymised data for training its AI models. You can opt out at any time by emailing [email protected] with the subject line "Model Training Opt-Out."

9. Who We Share Data With

We do not sell your personal information. We may share your data with:

• HeyGen — for avatar generation and voice cloning
• Stripe — for secure payment handling
• Meta (Facebook/Instagram) — where we manage advertising campaigns on your behalf
• GoHighLevel — for CRM, funnel, and automation services
• Hosting and analytics providers — for site performance and user insights
• Creative contractors or editors — under NDA where applicable
• Legal authorities — when required by law

A list of our authorised subprocessors is available upon request.

10. Data Retention

We retain your data only as long as needed to fulfil the purposes outlined in this policy or as required by law. Avatar data and likeness inputs can be permanently deleted at your request by emailing [email protected].

11. Security

We implement appropriate technical and organisational safeguards including encryption, access controls, and secure cloud storage. While no system is completely secure, we take the privacy and protection of your data seriously.

12. Cookies and Analytics

Our site uses cookies and analytics tools such as Google Analytics to improve functionality, measure performance, and understand user behaviour. Visitors in the EU/UK will be shown a cookie consent banner to manage preferences. You may disable cookies in your browser settings at any time.

13. Children's Privacy

Our services are not intended for individuals under the age of 13. We do not knowingly collect personal data from minors. If we become aware that a child has submitted information, we will delete it promptly.

14. International Data Transfers

Dúbal operates in Ireland and the United States. Your data may be processed in either country or by third-party providers in other locations. We rely on Standard Contractual Clauses, Data Privacy Framework certifications, and other lawful mechanisms to ensure safe cross-border transfers in compliance with GDPR and applicable data protection law.

15. Your Rights

Depending on your location (e.g., EU, California, Illinois), you may have the right to:

• Access your data
• Request corrections or deletions
• Withdraw consent to biometric processing
• Opt out of model training or profiling
• Request data portability

To exercise any of these rights, email [email protected]. We may require identity verification before processing your request.

16. Enterprise Clients and Data Processing Agreements

If your organisation requires a signed Data Processing Agreement (DPA), please contact us at [email protected] to initiate the process.

17. Changes to This Policy

We may update this policy periodically. Any changes will be reflected on our website with an updated effective date. If changes are material, we will communicate them to users directly. Continued use of our services implies acceptance of the updated terms.

18. Contact Us

If you have questions, requests, or complaints about this policy or your data, please contact:

This Privacy Policy was last reviewed in March 2026.