Last updated: 12 October 2026
01Overview
This policy explains what personal information DAAB INC ("Daab", "we", "us") collects, why, who we share it with and what you can do about it. It covers this website (daab.app) and the Daab app (space.daab.app). DAAB INC is a Delaware corporation at 8 The Green, Suite 5445, Dover, DE 19901, United States.
We handle personal information in two roles:
- For our own purposes. For account, billing, usage, website and contact information, Daab decides how and why it is used. Under European and UK law we are the controller of that information.
- On behalf of our customers. Videos, comments, brand guidelines and other content that an org puts into Daab belong to that org. If that content contains personal information, for example a person who appears in a video, the org decides what happens to it and we process it only on the org's instructions, under our Data Processing Addendum. If your request is about content in someone else's org, we will refer you to that org.
02Information we collect
Information you give us
- Account. Your name, email address, profile picture if you set one, and sign-in details. Sign-in is run by our authentication provider; we do not see or store your password.
- Org and workspace. The orgs and workspaces you belong to, your role in each, and the invitations you send and receive.
- Content. Videos and their versions, comments, annotations, attachments, brand guidelines, logos and other files you or your org upload, and the results of AI reviews you run.
- Guest reviewers. If you review through a share link without an account: the display name you enter, your email address if you give one, and your comments and attachments.
- Billing. Your plan, purchases, invoices and billing contact. Card details are collected and held by our payment provider. We do not receive or store your full card number.
- Messages. What you send us when you ask for help or contact us.
Information collected when you use Daab
- Device and log information. IP address, browser and device type, pages and features used, dates and times, and error reports. We use this to run and protect the service and to fix problems.
- Product usage. Where it is enabled and where the rules of your region allow, or you have agreed, we record events such as "a video was uploaded" or "a review was started" against internal identifiers. These events do not contain your content, your name or your email address. We do not record your screen.
- Email delivery. Whether an email we sent was delivered, bounced or marked as spam.
- Settings stored in your browser. Such as your theme, sidebar state and, for guests, your display name and unsent comment drafts.
Information from others
- From the person who invited you to an org or sent you a share link: your email address.
- From a sign-in provider you choose to sign in with, such as Google: your name, email address and profile picture.
- From our payment provider: confirmation of payments, refunds and disputes.
We do not ask for sensitive information such as health data or government identifiers, and Daab is not designed to hold it. Please do not put it in your account details.
03How information is used
We use personal information for the purposes below. Where European or UK data protection law applies, the legal basis is shown in brackets.
- To provide the service: create and secure your account, store and play your video, show comments, run the reviews you start, send invitations and share links, and give support. (Performance of our contract with you or your org.)
- To take payment and keep accounts: charge for plans and credit packs, issue invoices and refunds, and keep tax records. (Contract; legal obligation.)
- To send service messages: notifications about activity on your work, account and billing notices, and security messages. (Contract; legitimate interests.)
- To keep Daab secure and reliable: detect and prevent abuse and fraud, investigate incidents, monitor errors and performance. (Legitimate interests in running a secure service.)
- To understand and improve Daab: measure which features are used and where people get stuck. (Consent where the law of your region requires it; otherwise legitimate interests, with a way to opt out.)
- To tell customers about Daab: occasional emails about getting started and product news. (Legitimate interests or consent, depending on your region. You can stop these at any time.)
- To meet legal obligations and protect rights: respond to lawful requests, enforce our terms and defend claims. (Legal obligation; legitimate interests.)
We do not sell personal information. We do not share it for cross-context behavioural advertising. We do not use it to make decisions about you by automated means that have a legal or similarly significant effect on you.
04AI review
When someone runs an AI review, the video, the brand guidelines linked to it and any instructions are processed by automated systems that we run and by AI models run for us by our model provider. The output is a set of notes about the video, such as a logo, colour, font, text or watermark that does not match the guidelines. AI review assesses the video, not the people in it: it is not used to identify individuals or to draw conclusions about them.
Daab does not use your content to train AI models.
Working copies made for a review are deleted when the review finishes. Files held by the model provider for analysis are removed by the provider within 48 hours.
05Sharing and service providers
We share personal information only as follows.
- Within your org and with people you share with. Members of your org can see your name, email address, profile picture and what you add. People who open a share link can see the content shared and the names shown on its comments.
- Service providers. Companies that process information for us under contract, only to provide their service to us. They are listed below.
- Legal reasons. Where we are required to by law or a valid legal process, or where it is needed to protect the rights, property or safety of Daab, our customers or others. Where the law allows, we tell the affected customer first.
- Business transfer. If Daab is involved in a merger, acquisition or sale of assets, information may pass to the successor, which must continue to honour this policy until it tells you otherwise.
The companies that process personal information for us, what each one does and where, are listed on our Sub-processors page. We tell org owners before we add one.
06Where information is kept
Daab is operated from the United States, and the information described in this policy is stored and processed there. Some providers and members of our team may access it from other countries to support the service.
If you are in the European Economic Area, the United Kingdom or Switzerland, this means your information is transferred to countries whose laws may not protect it to the same standard as yours. Where we make such a transfer we rely on a mechanism recognised by law, such as the European Commission's standard contractual clauses and the UK addendum to them. You can ask us for a copy of the safeguards that apply.
07How long we keep it
We keep personal information for as long as we need it for the purposes above, and then delete it or make it anonymous.
- Account information: while your account is open. To close your account, write to hello@daab.app; we delete your account information within 30 days. We may close a Free plan account that nobody has signed in to for 6 months, after two warning emails.
- Content: for as long as the org keeps it. Items moved to Trash can be restored for 30 days. After that they cannot be restored, and we remove the video, its stored file and its comments from our live systems.
- Backups: copies of deleted information may remain in our backups for a time.
- Billing records: for as long as tax and accounting law requires, usually 7 years.
We may keep information for longer where the law requires it or where we need it to resolve a dispute.
08Security
We protect information with measures that include encryption in transit and at rest, access checks on every request for content, private file storage reached only through short-lived signed links, and access to production systems limited to the people who need it. Share links can be protected with a password and an expiry date and can be revoked.
No service can promise absolute security. If we learn of a breach that affects your personal information, we will tell you and the relevant authorities as the law requires.
09Your choices and requests
Depending on where you live, you may have the right to:
- know what personal information we hold about you and receive a copy of it;
- have information corrected if it is wrong;
- have information deleted;
- object to, or ask us to restrict, how we use it;
- receive information you gave us in a portable format;
- withdraw consent you have given, without affecting what was done before;
- not be treated unfairly for using these rights.
To make a request, write to hello@daab.app. We will ask for enough information to confirm who you are. You can ask someone you have authorised to make the request for you. We answer within one month, or within 45 days where US state law sets that period, and tell you if we need longer. There is no charge. If we refuse a request, we tell you why and how to appeal.
If you reviewed work as a guest without an account, tell us the name and email address you used and, if you can, the link you reviewed through.
If your information is in content that belongs to an org, such as a video you appear in, ask that org. We will help it respond.
European Economic Area, United Kingdom and Switzerland. You also have the right to complain to the data protection authority where you live or work. We would like the chance to put things right first.
California and other US states. In the last 12 months we collected the categories of information described in section 2, from the sources and for the purposes described there, and disclosed them to the service providers in section 5. We do not sell personal information or share it for cross-context behavioural advertising, and we do not knowingly do so for anyone under 16. We do not use sensitive personal information for purposes other than providing the service.
Global Privacy Control. If your browser sends this signal, we treat it as a refusal of analytics on this website and in the app.
10Email from Daab
We email you about activity on your work (comments, replies and reviews) and about your account (invitations and billing). Activity emails can be turned off in notification settings or with the unsubscribe link in the email.
Some messages are needed to run your account, such as sign-in codes, security notices and receipts. These cannot be turned off while your account is open.
12Children
Daab is for business and professional use and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, tell us and we will delete it.
13Changes and contact
We may update this policy. If a change is material, we tell account holders by email or in the app before it takes effect. The date at the top of this page shows when the policy last changed.
For questions about this policy or your information, write to hello@daab.app or by post to DAAB INC, 8 The Green, Suite 5445, Dover, DE 19901, United States.
Have a question?
Visit our contact page to find out more.