Privacy Policy

• Account data — your name, email address, hashed password (never stored in plain text), and subscription status when you sign up.
• Chat content — messages you send and responses you receive, stored so you can access your history. File and image uploads are stored temporarily for processing and deleted after 30 days.
• Usage data — token counts, feature usage, and session metadata used to enforce plan limits and billing.
• Desktop activity — when using computer control features, command outputs and screenshots are transmitted to our servers solely to generate Bubble's response. They are not stored beyond the conversation context.
• Payment data — processed entirely by Stripe. We never see or store your card number. We receive and store your Stripe customer ID and subscription status.
• Log data — IP address, browser type, and request timestamps for security and debugging. Retained for 30 days.

• To operate the product — serve your chats, enforce plan limits, process payments.
• To improve reliability — diagnose bugs and monitor service health.
• To communicate with you — transactional emails (receipts, password resets, plan changes). We don't send marketing emails unless you opt in.
• To prevent abuse — rate limiting, fraud detection, and policy enforcement.

We do not use your chat content to train AI models. We do not sell your data to advertisers or third parties.

Your messages are processed by Bubble AI, our proprietary AI system, to generate responses. We do not use your conversations to train AI models.

Images you generate are stored on our servers for up to 30 days, then permanently deleted.

Voice responses are synthesized server-side. Text sent for speech synthesis is not stored beyond the request.

We share data only with:

• Stripe — payment processing.
• ElevenLabs — voice synthesis (text sent for TTS only, not stored).
• Law enforcement — when required by valid legal process.

We do not sell, rent, or trade your personal data.

• Your account and chat history are retained as long as your account is active.
• Uploaded files and screenshots: deleted after 30 days.
• Log data: deleted after 30 days.
• After account deletion: all personal data is permanently deleted within 30 days.

You can:

• Access — export your chat history from Settings.
• Delete chats — delete individual chats or all chats from Settings → Profile.
• Delete your account — permanently delete your account and all associated data from Settings → Profile.
• Update your info — change your name and email in Settings.
• Request a copy — email us at [email protected] to request a full export.

If you're in the EU or UK, you also have rights under GDPR/UK GDPR including the right to erasure, data portability, and to lodge a complaint with your supervisory authority.

We use a single session cookie to keep you signed in. We do not use advertising cookies or third-party tracking. See our Cookie Policy for details.

We use TLS encryption for all data in transit. Passwords are hashed using bcrypt. We store data in a password-protected SQLite database on our servers. Payment data never touches our servers — it goes directly to Stripe.

Bubble is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, contact us at [email protected] and we will delete the account.

We'll notify you by email of material changes before they take effect. Minor changes (typos, clarifications) may be made without notice. The "last updated" date at the top reflects the most recent revision.

Privacy questions or requests: [email protected].

GrapeLabs, LLC — grapelabs.us