Privacy policy

Last updated September 2026

This policy covers two different groups of people: customers who hold an account with us, and website visitors who interact with a video bubble on a customer's site.

If you are a customer

What we collect

  • Account details you give us: name, business name, email, and a hashed password. We never store your password itself.
  • Content you create: videos, headlines, button configuration and site settings.
  • Billing details handled by Stripe. Card numbers go to Stripe directly and never touch our servers; we keep only a customer reference and your subscription status.
  • Basic operational logs, including IP address, needed to run and secure the service.

Why

To provide the service you are paying for, to take payment, to give support, and to send service messages about your account. We do not sell your data or share it for advertising.

If you are a website visitor

What is collected

  • An anonymous session identifier stored in your browser so the widget can remember where you were in a video sequence and whether you dismissed it. It is not shared between websites and contains no personal information.
  • Interaction events: that a bubble appeared, was opened, a video played or finished, and which buttons were tapped.
  • The page address the widget appeared on, the referring page, your country, and your browser's user-agent string.
  • Anything you actively submit: a name, email, phone number, typed answer, or a video or audio reply you chose to record.
  • If the business has transcription turned on and you record a video or audio reply, a text transcript of what you said is generated automatically so the business can read it. The transcript is stored with the reply, shared only with that business, and deleted when the reply is deleted.

Who it goes to

The business whose website you were on. They are the data controller for that information; we process it for them. If you want your data removed, contact that business — or contact us at admin@videochatbubble.com and we will pass the request on and act on it.

What is not done

No third-party advertising cookies are set. No cross-site tracking. No data brokers. Video replies you record are stored privately with signed, expiring links and are only playable by the business you sent them to.

Processors we use

  • Cloudflare — hosting, database, video storage and delivery, and the speech-to-text that transcribes replies.
  • Stripe — payment processing for customer subscriptions.
  • Resend — delivery of account emails and lead notifications when email delivery is enabled.

How long things are kept

We retain account details, content, analytics and response records to provide the service. Cancelling a subscription does not automatically delete these records. Contact us to request deletion; we will confirm the scope and any records that must be retained for billing, security or legal obligations.

Your rights

You may ask for a copy of your data, ask for corrections, or ask for deletion. Customers can export leads as CSV and delete content at any time from inside the app. For anything else, email admin@videochatbubble.com and we will respond within 30 days.

Security

Traffic is encrypted in transit. Passwords are hashed with PBKDF2. Sessions are signed. Visitor video replies require signed, expiring URLs. Public endpoints are rate-limited.

Children

The service is for businesses and is not directed at children under 13. We do not knowingly collect their data.

Changes and contact

If we change this policy materially we will email account holders. Questions: admin@videochatbubble.com, 602-878-6250, or write to us via https://videochatbubble.com/contact.

This document is a plain-language summary written for clarity. It is not legal advice, and you should have your own counsel review it before relying on it for your business.