Privacy Policy

The short version

• Your chats are stored in your browser by default, not on our servers.
• We don’t sell your personal data, and we don’t use advertising trackers.
• We don’t use your prompts or replies to train AI models.
• You can ask us for a copy of your data, or to delete it, at any time.

Who we are

Bleepless AI (https://bleepless.com) is run by Smoltech, LLC, a Delaware limited liability company, 131 Continental Dr, Suite 305, Newark, DE 19713, USA. We decide how your personal data is used, so we are its “controller”. You can reach us at support@bleepless.com.

What we collect

• Account: your email address and how you sign in (email link or Google). If you subscribe without an account, we create one with the email you give at checkout.
• Plan and billing: your plan, subscription status and Stripe customer ID. Stripe handles your card details. We never see your full card number.
• Usage: for each reply, its length in tokens and how long it took to generate, to apply weekly usage limits.
• Prompts and replies: what you type is sent to our servers and our AI model hosting provider to generate a reply. By default, the conversation is then stored only in your browser.
• Saved stories: if you sync stories to your account, we store them in our database.
• Technical data: IP address, browser and device type, and request details, recorded in our hosting provider’s server logs.

Cookies and browser storage

• Guest cookie: if you use Bleepless AI without an account, a signed first-party cookie identifies your browser so we can apply the daily message limit.
• Sign-in cookies: keep you signed in to your account.
• Local storage: your chats, stories, settings and age confirmation are kept in your browser’s local storage. They stay on your device unless you sync them.

We don’t use advertising or cross-site tracking cookies, and we don’t run third-party analytics. Vercel keeps standard server logs (such as IP address and pages requested) for security and debugging.

How we use it

To run the service and generate replies, apply plan limits, take payments, screen prompts for safety, prevent abuse and keep the service secure, answer support requests, and meet our legal obligations.

If you are in the EU or the UK, our legal bases are: our contract with you (your account, plan and replies); legal obligations (for example tax records); and our legitimate interests (safety screening, preventing abuse and keeping the service secure). You can object to any use based on legitimate interests.

Who processes it

We use these service providers (“processors”). They handle data only on our instructions, to provide their service to us:

• Vercel: website hosting and server logs.
• Supabase: sign-in and our database (email, account and plan status, daily message counts, and saved stories if you sync them).
• Stripe: payments and the billing portal.
• AI model hosting provider: runs the model that generates replies. Your prompts are sent there to produce a response.

We don’t sell your personal data or share it for targeted advertising. We may disclose data if the law requires it, to protect people from harm, or to a buyer if our business is sold, in which case this policy keeps applying to your data.

International transfers

We are based in the United States, and our providers process data in the US and possibly other countries. For data from the EU, the UK or Switzerland, we rely on the safeguards in our providers’ data processing terms, such as the EU Standard Contractual Clauses.

How long we keep it

• Account data: while your account exists, and up to 30 days after you delete it.
• Server logs: about 30 days.
• Billing records: as long as the law requires, up to 7 years, for tax and accounting.
• Chats in your browser: until you delete them or clear your browser storage.

Deleting your data

Browser data: go to Account → “Clear local stories”, or clear your browser’s storage for bleepless.com.

Account data: email support@bleepless.com from the address on your account and ask us to delete it. If you have a paid plan, cancel it first from Account → “Manage or cancel”, or we’ll cancel it when we delete your account.

Your rights

Depending on where you live (for example the EU, the UK, or US states such as California), you have the right to:

• know what personal data we hold about you, and get a copy in a portable format;
• correct it or delete it;
• restrict or object to some uses;
• opt out of the sale or sharing of your data (we don’t sell or share it);
• not be treated differently for using these rights.

To make a request, email support@bleepless.com with the subject “Privacy request”, from the address on your account so we can confirm it’s you. We reply within 2 business days and complete your request within the time the law that applies to you allows. You can use an authorised agent where the law permits. If we can’t do what you ask, we’ll explain why, and you can appeal by replying to our answer. You can also complain to your local data protection authority.

Security

Data is encrypted in transit, and access to our systems is limited to what is needed to run the service. No system is perfectly secure, so please keep the email or Google account you sign in with secure, and tell us if you notice anything wrong.

Children

Bleepless AI is not for anyone under 18. We don’t knowingly collect data from anyone under 18. If you think someone under 18 has used the service, email us and we’ll delete their data.

Changes

If we change this policy in a way that matters, we’ll tell you by email or on the site before the change takes effect. The date at the top shows the current version.

Contact

Email support@bleepless.com. Postal address: Smoltech, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, USA.