Privacy Policy

1. Introduction

deBub (“we”, “us”, “our”) operates the deBub service at debub.io. This Privacy Policy explains what data we collect, why we collect it, and how we protect it.

2. Data We Collect

2.1 Account Data

When you create an account, we collect your email address and name via our authentication provider (Clerk). We also store a Stripe customer ID for payment processing.

2.2 Bubble App Data (Scan Data)

When you submit your Bubble app for scanning, we use your exported .bubble app file that you upload, along with your app's public URL. During scanning, we collect:

• Page screenshots (visual captures of your app's UI)
• Element structures and layout information
• Workflow logic and data type definitions
• Design tokens (colors, fonts, spacing)
• Plugin and integration inventory

We do NOT collect your end-user data, including user emails, passwords, personal information, or any records stored in your Bubble database tables. Our scanner reads only the application structure, not the data within it.

2.3 Payment Data

Payment is processed by Stripe. We never see or store your full credit card number. We only store the Stripe customer ID and transaction metadata (amount, date, status) in our database.

2.4 Usage Data

We collect basic analytics data such as page views and feature usage to improve the service. This data is aggregated and does not include personally identifiable information.

3. How We Use Your Data

• Scan data is used solely to generate your Clone (Next.js codebase). It is processed on secure servers.
• Account data is used for authentication, email notifications about your project, and customer support.
• Payment data is used to process your purchase and issue receipts.

We do not sell, rent, or share your data with third parties for marketing purposes.

4. Data Retention

• Scan data (screenshots, element structures, workflow exports) is retained for 30 days after delivery of your Clone, then permanently deleted from our servers.
• Generated code (your Clone) is stored until you download or receive it via GitHub. After delivery, we retain a backup for 90 days in case you need re-delivery, then delete it.
• Account data is retained as long as your account is active. You may request account deletion at any time.
• Payment records are retained for 7 years for accounting and tax compliance.

5. Third-Party Services

We use the following third-party services to operate deBub:

• Clerk — authentication and user management
• Stripe — payment processing
• Supabase — database and file storage
• Vercel — web application hosting
• Resend — transactional email delivery
• Anthropic — code generation processing (scan data is sent to Anthropic for processing; Anthropic does not retain input data for training)
• GitHub — code delivery (only when you choose GitHub delivery)

Each service has its own privacy policy. We encourage you to review them.

6. Bubble App File

We use your exported .bubble app file that you voluntarily upload. This means:

• We never access your Bubble editor
• We cannot modify your application in any way
• We cannot access your end-user database records
• We cannot deploy or publish changes to your app

You can request deletion of your uploaded app file at any time. Files are automatically deleted within 30 days after delivery.

7. Security

We take reasonable measures to protect your data, including:

• HTTPS encryption for all data in transit
• Encrypted database storage (Supabase with row-level security)
• Isolated processing environments for each scan job
• Access controls limiting which team members can view scan data

No system is 100% secure. If we become aware of a data breach affecting your information, we will notify you within 72 hours.

8. Your Rights

You have the right to:

• Access — request a copy of the data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your account and associated data
• Data portability — receive your data in a machine-readable format

To exercise any of these rights, contact us at hello@debub.io. We will respond within 30 days.

9. Cookies

We use essential cookies for authentication (session management via Clerk). We do not use third-party tracking cookies or advertising cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our website. The version in effect at the time of your use governs.

11. Contact

If you have questions about this Privacy Policy, please contact us at hello@debub.io.