Privacy notice

Current demo

The public demo keeps widget customization in your browser. Demo generation returns a reviewed fixture and does not call an AI model or save a cloud project. File download is unavailable to anonymous and Starter users; when a Pro entitlement is configured, its ZIP is assembled locally in the browser.

Operational data

The hosting layer may process standard request information such as IP address, time, path, user agent, response status, and security diagnostics. Do not place secrets, access tokens, or sensitive personal information in a widget brief.

Live integrations

Live accounts and projects use Supabase. When you use the live AI builder, Anthropic processes your instructions, relevant project files, conversation context and any reference image you attach. Server secrets are not included in widget downloads.

Builder conversation memory

The builder keeps a private, project-specific agent conversation, including attached reference images, for a fixed 24-hour session window so follow-up changes retain context. Expired sessions become unavailable immediately and are removed by the worker cleanup process. Deleting the project also removes its agent conversation. Reference images are not published as widget assets. Your visible project chat and saved widget files have a separate project lifetime; the 24-hour limit applies to the agent working transcript, not all account records or provider-side retention.

Links you share and rights confirmations

When you paste a public link in the builder, the assistant may open it in an isolated browser. That produces five screenshots and a technical description of the page. We keep them for 48 hours, and only you can see them.

If you confirm that an overlay is yours (“This is my overlay”), we record the confirmation text, which overlay it was (without its private share link), which of its files the assistant may use, and your IP address and browser (user agent) at that moment. While this feature is on, we also keep the IP address and browser of your ten most recent signed-in visits.

We use these records only as evidence of your confirmation and to prevent and investigate misuse, such as copying someone else’s work. The legal basis is our legitimate interest. We keep them for 12 months, also if you delete your account, and then delete them automatically. Only administrators can see them.

Contact and deletion

For privacy questions or deletion requests, email hello@streamoverlays.io. This notice will be revised before payments, analytics, advertising, or additional processors are enabled.