Privacy Policy

This is a plain-English privacy policy for sizzledraft (sizzledraft.com), a product operated as part of the Opsibyte portfolio. It is written to be genuinely readable, not to bury the important parts, but it is not a substitute for legal advice, and if you have specific compliance requirements you should have a lawyer review it against your situation.

1. Who we are

This service is operated by Opsibyte, the trade name of Mel Maysson Owen, a self-employed professional (autónomo) registered in Spain, NIE Y7041891H. Contact: [email protected].

sizzledraft is the data controller for the information described below. You can reach us at [email protected] for any privacy question, request, or complaint.

2. What we collect

We collect only what the service actually needs to function:

• Account information: your email address, and anything else you provide when you sign up or sign in. Sign-in is passwordless (magic link), so we never store a password.
• The URL you submit: the web address you paste in so sizzledraft can produce a video from it.
• Screenshots and footage of your site: to build your video, we capture screenshots and screen recordings of the public pages at the URL you submit. These captures, and the video generated from them, are stored so you can access, re-download, or regenerate your video.
• Payment information: handled entirely by Stripe, our payment processor. We never see or store your card number; we only receive confirmation that a payment succeeded and basic billing metadata (amount, date, plan).
• Usage & device data: standard technical data every website collects, such as IP address, browser type, pages visited, referring URL, and timestamps, via server logs and privacy-respecting analytics.
• Cookies: a small number of strictly-necessary cookies for signing you in and remembering your session. We don't use third-party advertising or cross-site-tracking cookies.

3. Why we collect it, and our legal basis

We process your data to provide the service you signed up for (contract), to keep the service secure and working correctly (legitimate interest), to bill you where the service is paid (contract), and to comply with tax and accounting law where applicable (legal obligation). We don't use your data for anything beyond running the product you use.

4. Who we share it with

We don't sell your data, and we don't share it for advertising. We use a small set of service providers (subprocessors) to run sizzledraft, each of whom only receives what they need to do their specific job:

• Payment processing: Stripe (card handling, billing, invoices).
• Hosting & database: our infrastructure provider and managed database, to run the app, capture and store your video, and store your account data securely.
• Email delivery: Resend, our transactional email provider, to send you sign-in links, receipts, and service notifications only (never marketing you didn't ask for).

We may also disclose data if legally required to (for example a valid court order), or to protect the rights, safety, or property of sizzledraft, our users, or the public.

5. Cookies & analytics

We use strictly-necessary session cookies (to keep you signed in) and privacy-respecting, aggregate analytics to understand which pages are working and which aren't. We don't run third-party ad-tracking pixels, and we don't build cross-site advertising profiles.

6. Data retention

We keep your account data, and the screenshots, footage, and generated videos tied to it, for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we're legally required to retain billing records for tax/accounting purposes (typically several years, per local law).

7. Your rights

Wherever you're located, you can ask us to: access the personal data we hold about you; correct it if it's wrong; delete it; export it in a portable format; or object to / restrict certain processing. If you're in the EU/UK, these are your rights under GDPR; if you're in California, similar rights exist under the CCPA/CPRA. To exercise any of these, email [email protected], we'll respond within 30 days.

8. Children's privacy

sizzledraft is not directed at children under 16, and we don't knowingly collect personal data from anyone under that age. If you believe a child has provided us data, contact us and we'll delete it.

9. International data transfers

Our infrastructure and service providers may process data outside your country of residence, including in the United States. Where required, we rely on standard contractual clauses or equivalent safeguards recognized under applicable data-protection law for these transfers.

10. Security

We use industry-standard measures, including encryption in transit (HTTPS/TLS), access controls, and a managed database provider with its own security practices, to protect your data. No system is 100% secure, but we take reasonable steps appropriate to the sensitivity of what we hold, and we never ask for credentials or account access we don't need.

11. Changes to this policy

We may update this policy as sizzledraft evolves. The version at sizzledraft.com/privacy always governs, and we'll update the "Last updated" date above when we make a change. For material changes, we'll make reasonable efforts to notify active users by email.

12. Contact

Questions, requests, or complaints about this policy: [email protected].