Babbiting…
Babbiting…
Legal
Effective: August 7, 2026
BabbitAI ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights. By using BabbitAI, you agree to this policy.
Account data: Your name, email address, and password hash (stored via Supabase Auth). If you sign up via OAuth (e.g. Google), we receive your name and email from that provider.
Voice profile data: Writing samples you submit to train your voice ("Voice Profiles"). These are stored in our database and processed by the Anthropic Claude API to extract stylistic patterns. We store the resulting voice profile, not the raw samples in an identifiable form beyond what you submit.
Generated content: The social media posts we generate for you ("Babbits") are stored in our database so you can review your history and regenerate.
Media uploads: Photos and video frames you upload for media-input generation are processed by Claude Vision in memory and are not permanently stored on our servers.
Audio for transcription: If you record or upload a voice memo, or upload a video, an audio clip is sent to Groq's Whisper API to produce a text transcript, which we use to enrich caption/script generation. For video, only the audio track — extracted in your browser — is sent, never the full video file. Audio is processed in memory and is not permanently stored on our servers.
Media you attach for direct posting: Videos/photos you attach to post directly to Instagram or TikTok are stored in cloud storage (Supabase) so those platforms can fetch them, and are retained while your account is active.
Payment data: We use Stripe to handle all payments. We never store your card number or CVV. Stripe provides us with a non-sensitive token and your billing email only.
LinkedIn OAuth tokens: When you connect LinkedIn, we store an encrypted OAuth access token (AES-256-GCM) so we can post on your behalf. We do not store your LinkedIn password or access any data beyond what is required to post content.
Usage data: Standard server logs including IP address, browser type, pages visited, and error events. Used to diagnose issues and improve the product.
Anti-abuse signals: When you sign up, we collect limited device and browser signals (such as device type, browser characteristics, and signup timing). We use these signals solely to prevent abuse, fraud, and duplicate free-credit claims — for example, detecting attempts to create multiple accounts to repeatedly claim free-tier Babbits. We do not use these signals for advertising, marketing, or cross-site tracking, and we do not sell or share them with third parties for those purposes.
We do not sell your data to third parties. We do not use your writing samples or generated content to train AI models outside of providing your personal voice profile.
BabbitAI uses the Anthropic Claude API to analyse your writing samples and generate content. Your data is sent to Anthropic's servers for processing. Anthropic processes this data under their own Privacy Policy. Anthropic does not use API inputs to train their models by default. We do not enable model training on your data.
Your data is stored in Supabase (PostgreSQL), hosted on AWS infrastructure in a region appropriate for your location. OAuth tokens are encrypted at rest using AES-256-GCM. We use HTTPS for all data in transit.
No method of transmission or storage is 100% secure. We take commercially reasonable steps to protect your data, but cannot guarantee absolute security.
Depending on your location, you may have the right to:
To exercise these rights, email us at privacy@babbitai.com. We will respond within 30 days.
We use session cookies required for authentication and secure operation of the Service. We do not use third-party advertising cookies, and we do not use cookies or device signals for advertising, marketing, or cross-site tracking. As described in Section 1 ("Anti-abuse signals"), we use limited device and signup signals for the narrow purpose of preventing abuse, fraud, and duplicate free-credit claims.
BabbitAI is not directed to children under 18. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.
We rely on the following third parties to operate BabbitAI:
We may access, preserve, or disclose your information — including personal data received from third-party platforms such as Meta — if we believe in good faith that doing so is required by law, subpoena, court order, or other valid legal process, or is necessary to protect the rights, property, or safety of BabbitAI, our users, or the public.
Where we receive such a request, our practice is to review it for legal validity before responding, disclose only the minimum information necessary to satisfy the specific request, and notify the affected user where we are legally permitted to do so. Where legally permitted, we will attempt to notify you before complying with such a request.
We may update this Privacy Policy. We will notify you by email at least 14 days before material changes take effect. The effective date at the top of this page always reflects the current version.
Questions or requests? Email privacy@babbitai.com.
BabbitAI does not sell or share your personal information with third parties for monetary or other valuable consideration, and we do not engage in cross-context behavioral advertising. This applies regardless of your location, including under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).
If our practices change in the future, we will update this section and provide a mechanism for you to opt out before any sale or sharing begins. Until then, there is nothing to opt out of — we simply don't sell your data.
California residents also have the right to know, delete, and correct their personal information, and the right to non-discrimination for exercising these rights. To exercise any of these rights, email privacy@babbitai.com.