Privacy Policy for Dusono
Effective Date: November 20, 2025
Last Updated: November 20, 2025
Rasmussen Solutions ("we," "us," or "our"), located at Larvik, Norway, operates Dusono ("Service") at dusono.com. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By using the Service, you consent to the practices described here. We comply with the Norwegian Personal Data Act and EU GDPR as a data controller.
1. Data Controller
Rasmussen Solutions
Larvik, Norway
Email: hello@dusono.com
2. Information We Collect
Personal Data:
- Account Info (via Clerk): First name, last name, email, profile picture (if Google sign-up).
- Payment Data (via Stripe): Billing details (not full card numbers; Stripe tokenizes).
- Usage Data: Projects (uploads/dubs metadata: file names, durations, languages, credits used, timestamps).
Non-Personal Data:
- Device info, IP address, browser type (logs).
- Uploaded files (videos/audio) processed temporarily; Outputs downloadable/deletable.
Note on Uploaded Content:
We do not store full uploaded files long-term beyond plan limits (Lite: 30 days; Pro: 3 months; MAX: 24 months). Metadata only for billing/dashboard.
3. How We Use Your Information
- Provide/Improve Service (e.g., dubbing, account management). Legal Basis: Contract.
- Process payments. Legal Basis: Contract/Legitimate Interest.
- Communicate (support, updates). Legal Basis: Consent/Legitimate Interest.
- Analytics/Security (aggregate usage). Legal Basis: Legitimate Interest.
- Legal compliance. Legal Basis: Legal Obligation.
4. Sharing Your Information
We share only as necessary:
| Recipient | Data Shared | Purpose |
|---|---|---|
| Clerk | Auth data (name, email, pic) | Account management |
| Stripe | Billing info | Payments |
| AI Providers (ElevenLabs, OpenRouter, Replicate.com, Google AI Studio, Fish, etc.) | Upload metadata/content (temp for processing) | Dubbing/Translation |
| Hetzner Cloud | Project files (encrypted) | Storage/Processing |
No selling data. Shared data subject to their privacy policies.
5. Storage and Security
- Stored in EU (Hetzner servers in Germany). Retention: Account data while active + 30 days post-delete; Projects per plan limits.
- Security: Encryption (at rest/transit), access controls, regular audits. No password storage.
6. Your GDPR Rights
- Access, correct, delete data.
- Object/restrict processing; data portability.
- Withdraw consent. Contact us; response within 1 month.
- Complaints: Norwegian Data Protection Authority (Datatilsynet).
7. Cookies and Tracking
Minimal cookies: Essential (session/auth via Clerk). No analytics/marketing. Manage via browser settings.
8. International Data Transfers
Primarily EU. US providers (e.g., Stripe, Google) use Standard Contractual Clauses (SCCs)/EU adequacy.
9. Children's Privacy
Service for 18+. No knowing collection from children.
10. Changes to This Policy
Updates posted here with notice via email/Site. Continued use = acceptance.
11. Contact Us
Email hello@dusono.com for privacy requests.