Privacy Policy

Last updated: 14 August 2026

Who is responsible for your data

Bubixo. You can reach us at ademcordukoglu@gmail.com for anything on this page.

Tools that never send your file anywhere

31 of our tools do all their work inside your browser using standard web technology. Your file is opened by your own device, processed there, and saved back by you. It is never uploaded, never reaches our server, and we never see it.

Each of these tools says so on its own page. If a tool page does not say this, assume it uploads.

Tools that process your file on our server

The remaining tools need computing power a browser cannot provide — video encoding, speech recognition, machine learning models. For these:

• Your file is uploaded over an encrypted connection and stored under a randomly generated name.
• It is processed, and the result is made available for you to download.
• Both the original and the result are deleted within 24 hours. In normal operation deletion happens as soon as your job finishes, usually within minutes. The 24 hours is the outer limit we guarantee, enforced by a scheduled sweep that runs independently of the tools themselves.
• Two exceptions, both shorter: our video privacy tool deletes within 1 hour because it processes faces, and our petition drafting tool deletes within 3 hours.

We do not open your files, we do not index their contents, and we do not use them to train anything.

What we do not do

• No advertising. There are no ad networks on this site.
• No analytics. We do not run Google Analytics or any equivalent. We do not know how many people visit a page.
• No cookies on our tools. Our tool pages set no cookies at all. Cookies exist only in the administrator login area, which is used by us and not by visitors.
• No external requests. Our pages do not load fonts, scripts, or images from other companies' servers. Your browser talks to us and to nobody else.
• No tracking, no profiles, no data sales. We do not build a picture of who you are, and we have never sold data to anyone.

The companies that process some of your data

Three, each with a specific and limited role:

OpenAI — used by nine tools for work on text: translating, summarising, and generating written content. Only text is sent. No audio file, no video, and no image is ever sent to OpenAI. Our speech recognition runs on our own servers, so when you transcribe a recording, the audio does not leave our infrastructure.

ElevenLabs — used by our voice tools. For most of them, only the text to be spoken is sent. In two tools — voice preview and dubbing — the audio file itself is sent, because the work happens on their side. Those two tools say so on their own pages.

Dodo Payments — handles payment for the six tools that charge. Your card details are entered on their side and never reach our servers; we never see or store a card number.

We have no other processors. No analytics provider, no advertising network, no content delivery network, no cloud storage service.

Accounts and payments

We do not offer user accounts. There is nothing to register for and no password to lose.

Where a tool needs to remember that a job belongs to you, it stores a one-way cryptographic hash of a token your browser holds. That hash cannot be turned back into anything that identifies you.

For the tools that accept payment, we store the e-mail address you provide for your receipt, and a record of the transaction. Card details are never stored by us.

Server logs

Our web server keeps standard access logs including IP addresses for 14 days, to detect abuse and diagnose faults. System logs are kept for up to six months. These logs are not used to analyse visitors or build profiles.

Faces, voices and other sensitive data

Some of our tools work with photographs of people, and with recorded speech. Both are treated as sensitive under Turkish (KVKK) and European (GDPR) data protection law, and we handle them accordingly:

• We do not store facial recognition data. Our video privacy tool detects and blurs faces; the mathematical representation it computes to track a face across a video exists only in memory during processing and is never written to disk or to a database.
• Files handled by that tool are deleted within one hour.
• Voice cloning requires your confirmation that you have the right to use the voice you upload. Cloning someone's voice without their permission may be unlawful where you live, and is not something we permit.

Your rights

Under KVKK and GDPR you have the right to know what personal data is held about you, to have it corrected or erased, and to object to its processing.

There is a practical limit worth being honest about: because we do not have accounts and do not identify our visitors, in most cases we have no way to link a file to a person. A request to delete "my data" cannot be matched to anything, because nothing is stored under your name. We will not collect additional information from you purely to make identification possible. In practice, this means: your files are already gone within 24 hours, and there is nothing else about you to erase.

If you have paid for something, we can act on requests relating to that transaction using the e-mail address on the receipt. Write to ademcordukoglu@gmail.com.

You also have the right to complain to the Turkish Personal Data Protection Authority (KVKK) or, if you are in the EU, to your national supervisory authority.

Where your data is processed

Our servers are hosted with OVH, in France and Germany — both within the European Economic Area. The three companies named above process data on their own infrastructure, which may be outside Turkey and outside the European Economic Area.

Children

Our tools are not designed for children and we do not knowingly process data belonging to them.

Changes to this policy

If this policy changes, the date at the top changes with it. We do not make silent changes.

Contact

ademcordukoglu@gmail.com