Privacy Policy

1. What we collect

Account data: your email address, and your name and profile picture if you sign in with Google. Settings: your app language, timezone, Series and Schedules. Content: the prompts, scripts, images, narration and Videos we produce for you, and voice samples if you create a Voice Clone. Connected channels: the access tokens and basic profile data needed to publish for you. Billing: Paddle handles your payment details; we only receive your plan, country and payment status. Usage: basic logs and product analytics to fix bugs and improve Sombi.

2. How we use it

To run your account, produce and publish your Videos, bill you, send you service emails, keep Sombi secure, and improve it. We don't sell your personal data, and we don't use your content to train our own AI models.

3. Who processes it

We share data only with the providers that help run Sombi: Supabase (database and sign-in), Vercel (hosting), Cloudflare (media storage), Trigger.dev (background jobs), Amazon Web Services (video rendering), Anthropic (script writing), fal.ai (images), ElevenLabs (narration and Voice Clones), Paddle (payments), and the platforms you connect (YouTube, TikTok, Instagram, Facebook) when we publish for you. Some of these providers process data outside your country, under appropriate safeguards.

4. YouTube and Google data

Sombi uses YouTube API Services. When you connect a YouTube channel, Google asks you to let Sombi upload videos to it and view your YouTube account. Sombi uses that access only to read the channel's id and name, so you can pick it for your Series, and to upload your Videos to it at the times you schedule. Sombi doesn't read your other videos, comments, subscribers or analytics.

Sombi stores the channel's id and name and the access tokens Google gives it. The tokens are encrypted before they are stored and are used only to publish for you. This data isn't shared with anyone except the providers listed above that store and run Sombi, and Google itself when we publish.

You can stop Sombi's access at any time by disconnecting the Channel in Sombi, which deletes its tokens and tells Google to revoke the access, or in your Google account's security settings: https://myaccount.google.com/permissions. Google's Privacy Policy also applies: https://policies.google.com/privacy.

Sombi's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy.

5. How long we keep it

Rendered Videos are deleted 120 days after they're produced; scripts and settings are kept while your account exists so you can re-render. Voice samples are stored encrypted, are never public, and are deleted with the Voice Clone. When you delete your account we delete your data within 30 days, except records we must keep by law, such as invoices.

6. Your rights

You can access, correct, export or delete your data, and object to or restrict how we use it. Write to support@sombi.app and we'll answer within 30 days. You can also complain to your local data protection authority.

7. Cookies

We use cookies to keep you signed in and remember your language. Analytics cookies are only set with your consent where the law requires it.

8. Changes

If we change this policy in a way that matters, we'll tell you by email or in the app before it takes effect.