Information we collect

• Account information: your email address, and the name and phone number you add in “My account”.
• Billing information: your plan, payment history and billing details. Card numbers are collected and stored by Stripe, not by us; we only see the card type and last four digits.
• Domain registrant information: when you buy a domain, the owner's name, organization, address, email and phone, which domain rules require us to collect.
• Your content: the instructions you give the AI, your site's text, photos, logos, videos and every version of your sites.
• Team information: the email addresses of people you invite, and their roles.
• Records of your consent: which version of our terms you accepted, when, and the IP address and browser used, so we can prove it.
• Technical information: IP address, browser and device type, pages requested, and errors, recorded by our hosting provider to deliver the service and keep it secure.
• Cookies and local storage: cookies that keep you signed in, remember your language and when you last used the studio; and local storage in your browser for your cart and language. We do not use advertising cookies in the studio today. If we add advertising or analytics tags to saydabar.com, we will update this policy first and offer the choices the law requires.

How we use it

• To provide Dabar: create, edit, host and publish your sites, register and connect your domains, and run your plan.
• To send you sign-in codes, receipts, renewal reminders, invitations and important notices.
• To keep Dabar secure, prevent fraud and abuse, and enforce our terms.
• To improve Dabar, for example by fixing errors and understanding which features are used.
• To send occasional news about Dabar. You can unsubscribe from these at any time.
• To meet legal obligations, such as tax, accounting and domain-registration rules.

We do not sell your personal information, and we do not share it with others for their own advertising. We do not use your content to train AI models. Anthropic, which runs Dabar's AI, does not use content sent through its business API to train its models.

Who helps us

These service providers process information only on our behalf and under contract:

• Vercel hosts the website, the studio and the sites you publish.
• Supabase stores accounts, sites and files.
• Stripe processes payments and subscriptions.
• Anthropic runs the AI that designs and writes your sites.
• fal.ai creates AI images and enhances photos, when you use those features.
• Pixabay receives the search words you type in the photo bank (not your identity).
• Resend sends our emails, such as sign-in codes and invitations.
• Tucows (OpenSRS), our domain registrar, receives the registrant information of domains you buy and shares it with the domain's registry and with ICANN as domain rules require. Privacy protection is turned on, so your details are not shown in public WHOIS where the registry allows it.

We may also disclose information when the law requires it, to protect people's safety or our rights, or as part of a merger or sale of our business, under this policy.

Your sites' visitors

When someone visits a site built with Dabar, our hosting records basic technical information to deliver the page and keep it secure. The site's owner decides what the site asks its visitors for and is responsible for its own privacy notice. If you visited a Dabar site and have a question about your information, please contact that site's owner first; you can also write to us.

How long we keep it

• Account and site information: while your account is active, and up to 30 days after a paid plan ends or you ask us to delete it, plus limited backups.
• Billing, tax and domain-registration records: as long as the law requires, generally up to 7 years.
• Records of your consent: at least 3 years, or 1 year after our contract ends, whichever is longer.
• Technical logs: usually no more than 90 days.

Your choices and rights

• You can update your email, name and phone in “My account”.
• You can ask us to give you a copy of your information, correct it or delete it by writing to privacy@emethel.com. We will answer within 30 days, or sooner if the law requires. We may need to confirm your identity, and we may keep information the law requires us to keep.
• You can unsubscribe from news emails with the link in each email. Service emails, like sign-in codes and receipts, are part of the service.
• California residents have the right to know, access, correct and delete their personal information, to limit the use of sensitive information, and not to be treated differently for using these rights. We do not sell or share personal information for cross-context behavioral advertising. You or an authorized agent can use these rights by writing to us.
• Residents of other states and countries may have similar rights. Write to us and we will honor them as the law requires.

Security

Information travels over encrypted connections (HTTPS). Access to your sites is controlled by account and role, sign-in uses one-time codes, sessions end after a period without use, and sensitive actions ask you to confirm your identity again. No system is perfectly secure, but we take reasonable steps to protect your information, and we will notify you of a security incident that affects it as the law requires.

Where we process information

Dabar is operated in the United States, and information is stored and processed in the United States. If you use Dabar from another country, your information will be transferred to the United States.

Children

Dabar is for adults 18 and older who run a business or project. We do not knowingly collect information from children under 13. If you believe a child has given us information, contact us and we will delete it.

Changes to this policy

We will post any change on this page with a new version date. If the change is important, we will tell you by email or in the app before it takes effect.