Privacy Policy

1. Information We Collect

Account information: When you register, we collect your username, email address, and password (stored securely hashed). You may optionally provide a bio and avatar.

Content data: Videos you upload, including metadata (title, description, prompt, tool used, source URL), AI verification results, and engagement data (views, likes).

Usage data: We collect watch history, interaction patterns, and recommendation preferences to improve your experience.

Technical data: IP addresses for rate limiting and security. We do not use tracking cookies or third-party analytics.

Date of birth: We collect your date of birth during registration to verify that you meet our minimum age requirement of 13 years, in compliance with COPPA. Your date of birth is not shared with third parties.

Google account data: If you sign up or log in with Google, we receive your name, email address, and profile picture from Google. We use this information solely to create or authenticate your account.

2. How We Use Your Information

We use your information to: operate and improve the Platform; verify uploaded content via AI detection; personalize your feed and recommendations; send email verification codes; enforce our Terms of Service and Community Guidelines; and prevent abuse through rate limiting.

3. Information Sharing

We do not sell, rent, or share your personal information with third parties for their marketing purposes. We do not share your video viewing history or personally identifiable viewing information with any third party without your separate, explicit consent, in compliance with the Video Privacy Protection Act (VPPA). Public information (username, bio, uploaded videos) is visible to other users. We may share information with law enforcement when required by law or to protect the safety of our users.

4. Data Retention

Account data is retained as long as your account is active. Deleted accounts have their data removed within 30 days. Video content is stored on our servers and removed when you delete it. IP addresses and server logs are retained for 90 days for security and abuse prevention, then automatically purged. Watch history and engagement data may be retained in anonymized form for analytics.

5. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right to access: Request a copy of your personal data (available via Settings > Export Data)
• Right to correction: Update inaccurate personal information through your profile settings
• Right to deletion: Delete your account and all associated data (Settings > Delete Account). We process deletion requests within 30 days
• Right to data portability: Export your data in machine-readable JSON format
• Right to opt out: You may opt out of personalized recommendations through your settings
• Right to object: You may object to certain data processing by contacting us

California Residents (CCPA/CPRA): We do not sell or share your personal information as defined under the California Consumer Privacy Act. You have the right to know what personal information we collect, request its deletion, and not be discriminated against for exercising your rights.

To exercise any of these rights, contact us at privacy@sentboson.com. We will respond within 30 days.

6. Cookies

We use a single authentication token stored in your browser's local storage to maintain your login session. We do not use third-party tracking cookies or advertising cookies.

7. Security

We implement security measures including: password hashing with bcrypt; JWT authentication with expiration; HTTPS encryption; rate limiting on sensitive endpoints; and security headers (HSTS, X-Frame-Options, etc.).

8. Children's Privacy

The Platform is not intended for children under 13. We do not knowingly collect information from children under 13. If we discover such data, it will be deleted immediately.

9. AI-Generated Content

All content on Sent Boson is intended to be AI-generated. We may label content with AI-generation indicators in compliance with applicable regulations. We store metadata about the AI tools used to generate uploaded content (tool name, source URL, AI confidence score). This information may be displayed publicly on the Platform.

10. Geographic Availability

Sent Boson is currently available in the United States and India. All data is stored and processed within the United States. By using the Platform, you acknowledge that your data is subject to United States federal and state privacy laws, and the Digital Personal Data Protection Act (DPDPA) 2023 where applicable to Indian residents.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify users of material changes via email or Platform notification.

12. Contact Us

For privacy questions: privacy@sentboson.com