Privacy Policy
1. What We Collect
- Email address — used for magic-link sign-in and transactional emails (report alerts, billing notices).
- VOD URLs you submit — used to run the analysis pipeline.
- Processed chat data and reports — compressed chat statistics and AI-generated reports are stored to power your history, dashboard, and auto-monitoring. Raw, unprocessed chat replay logs are discarded after analysis; we do not retain the original message-by-message feed.
- Monitored channels (Pro users) — the streaming channel handles you register for daily auto-monitoring.
- Anonymous session ID — a browser cookie used to track the one-free- analysis quota without requiring sign-up.
- IP address — used for rate-limiting anonymous users.
We do not collect passwords, payment card numbers, or video content of any kind.
2. How We Use Your Data
- To deliver, cache, and display your coaching reports.
- To send magic-link sign-in emails and daily new-report notification emails.
- To enforce the free-tier quota via cookie and IP address.
- To run daily auto-monitoring and live alerts on your behalf (Pro).
- To detect and prevent abuse of the Service.
We do not sell, rent, or share your personal data with third parties for their own marketing purposes.
3. Third-Party Processors
The following companies process data on our behalf to operate the Service:
- Anthropic — Compressed chat data is sent to Anthropic's Claude Haiku model to generate your coaching report. Anthropic processes this data under its API terms. (anthropic.com/privacy)
- Stripe — Handles payment processing and subscription management. We never see your card number. (stripe.com/privacy)
- Resend — Delivers transactional emails (magic links, report notifications). (resend.com/privacy)
- Fly.io — Cloud hosting provider where all Service data is stored and processed. (fly.io/legal/privacy-policy)
- Pusher (Pro live features only) — Provides the WebSocket infrastructure used to receive real-time live chat data from Kick. (pusher.com/legal/privacy-policy)
Each processor is bound contractually to process data only as instructed and to maintain appropriate security standards.
4. Cookies
- Session cookie — Authenticates your logged-in session. Cryptographically signed and HTTP-only. Valid for a rolling 30 days.
- Anonymous session cookie — Tracks the one-free-analysis quota for visitors who are not signed in. Expires after 90 days.
We do not use advertising cookies, tracking pixels, or third-party analytics scripts.
5. Data Retention
- Account data, report history, and monitored channels are retained as long as your account is active.
- After cancellation, your data is retained indefinitely so your history is available if you return. You may request deletion at any time (see §6).
- Anonymous session data expires with the cookie (90 days).
6. Your Rights
You may request access to, correction of, or deletion of your personal data at any time by emailing admin@bunshin.io. We will respond within 30 days. Account deletion removes your email address, report history, and monitored channels from our database.
7. Security
All data in transit is encrypted via TLS. Session tokens are cryptographically signed and HTTP-only. Stripe handles all payment credentials — we never store card numbers or bank details.
8. Children's Privacy
The Service is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, contact us at admin@bunshin.io and we will delete it promptly.
9. Changes to This Policy
We will notify users by email at least 14 days before material changes to this Policy take effect.