Privacy Policy

1. Introduction

SleepyBot ("we", "us", or "our") operates the SleepyBot platform — an AI-powered video generation service available at sleepybot.one. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our service.

By using SleepyBot, you agree to the collection and use of information as described in this policy. If you have questions, contact us at support@sleepybot.one.

2. Information We Collect

Account Information

When you register, we collect your email address, name, and a hashed password. You may optionally provide a profile picture and display name.

Content You Create

We store the prompts, scripts, Story Bibles, series configurations, and generated video files you create on our platform. This content is private to your account by default.

Usage Data

We collect information about how you interact with SleepyBot — including pages visited, features used, generation requests made, and token consumption — to improve the service and detect abuse.

Payment Information

Payments are processed by Stripe, Inc. ("Stripe"), our payment processor. We do not store your credit card number or full payment details. We receive confirmation of successful payments and subscription status from Stripe.

Device and Technical Data

We automatically collect your IP address, browser type, operating system, referring URLs, and device identifiers for security and analytics purposes.

3. How We Use Your Information

• To provide, operate, and improve the SleepyBot service
• To process your subscription payments via Stripe
• To generate AI video content using your prompts and configuration
• To send transactional emails (account verification, billing receipts, generation completion notifications)
• To detect, prevent, and respond to fraud, abuse, or violations of our Terms of Service
• To comply with applicable laws and legal obligations
• To respond to your support requests

We do not use your content to train AI models. We do not sell your personal data to third parties.

Legal basis for processing (GDPR): We process your personal data on the basis of (a) contract performance — processing necessary to provide the Service you signed up for; (b) legitimate interests — fraud detection, security, and service improvement; and (c) legal obligation — compliance with applicable laws.

4. Third-Party Service Providers

We share limited information with trusted third parties to operate our service:

• Stripe — Payment processing and subscription management.
• OpenAI — We use OpenAI's APIs for script generation and AI voice synthesis. Prompts and content you submit may be processed by OpenAI subject to their privacy policy.
• Replicate — We use Replicate's infrastructure to run AI image and video generation models. Prompts and style configuration are processed on Replicate infrastructure.
• Cloudflare R2 — Generated video files and assets are stored on Cloudflare R2 object storage.
• Resend — We use Resend to send transactional emails including account verification, billing receipts, and generation completion notifications.
• Dub.co — We use Dub.co for link analytics and tracking. Dub.co may collect anonymized click and referral data.

International Data Transfers: Some of our service providers (including OpenAI and Replicate) are based in the United States. If you are located in the European Economic Area (EEA) or United Kingdom, your data may be transferred to the US. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission as the transfer mechanism for such transfers.

5. Data Retention

We retain your account data and generated content for as long as your account is active. If you cancel your subscription, your data remains accessible until you request deletion. Generated videos are stored for 90 days after creation or until you delete them, whichever comes first. After account deletion, all your data is permanently removed within 90 days. See our data deletion instructions for the process to request deletion.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your personal data ("right to be forgotten")
• Object to or restrict processing of your personal data
• Receive a copy of your data in a portable format

To exercise these rights, email us at support@sleepybot.one. We will respond within 30 days.

California Residents (CCPA/CPRA): If you are a California resident, you have the right to know what personal information we collect, request deletion, and opt out of the sale or sharing of your personal information. SleepyBot does not sell or share your personal information for cross-context behavioral advertising. To exercise your rights, contact support@sleepybot.one.

7. Cookies

We use essential cookies to keep you logged in and maintain session state. We do not use tracking cookies for advertising. You can disable cookies in your browser settings, though this may impair functionality.

8. Security

We implement industry-standard security measures including HTTPS encryption, hashed passwords, and access controls. However, no system is completely secure. If you discover a security vulnerability, please report it to support@sleepybot.one.

9. Children's Privacy

SleepyBot is not directed to children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you via email and provide at least 30 days notice before the changes take effect. Non-material changes (such as clarifications) may take effect immediately with notice posted on our website. Your continued use of SleepyBot after material changes take effect constitutes your acceptance of the updated policy.

11. Contact

For privacy-related questions or requests, contact us at:

SleepyBot
Email: support@sleepybot.one