1. Who handles your information
The Attention Machine is operated by SUNSTORY LLC, a Wyoming limited liability company (referred to in this policy as "The Attention Machine", "we", "us" or "our"). This policy covers our websites, app, editing tools, research, reports and connections to other assistants and services. It applies to members, visitors and people whose information appears in material we process.
We are responsible for the personal information we use for the purposes described here. Contact us about this policy or a privacy request at rob@robinebers.com. Our mailing address is at the end of this page.
2. Information we collect
- Account and billing information. Your name, email, account identifiers, business details, invite requests, support messages, plan, payment status and billing records. Stripe processes payments and sends us information about customers, transactions and subscriptions.
- Uploaded media and documents. Videos, audio, images and files, including voices, faces and anything you say or show in them. We also create transcripts, previews, edits, captions and related details about the files and their processing.
- Chats and saved business context. Your messages, instructions, feedback, business and audience information, plans, preferences, assistant responses and records of work carried out for you. This can include material provided through a connected assistant.
- Connected social accounts. Depending on the network and permissions granted, account and profile details, posts, media, comments, audience and performance information, scheduled posts and publishing records. We and our connection providers also handle the permissions and credentials needed to maintain the connection. This does not give us unrestricted access to everything on an account.
- Public-source research. Public profiles, posts, videos, captions, comments, usernames, links and engagement figures, including information about people who are not members. We may obtain this from social platforms, public websites and research providers such as Apify.
We also receive technical information such as IP addresses, browser and device details, page visits, errors and activity records. Please share only material you have permission to provide and avoid including sensitive personal information that is not needed for your work.
3. How we use it
We use information to:
- Run accounts, take payments, respond to invite requests and provide support.
- Understand your business and create plans, scripts, edits, captions and other work for you.
- Connect social accounts, analyze performance, make reports and carry out authorized scheduling and publishing.
- Research public content and share findings, trends and examples.
- Find problems, investigate errors, protect accounts and prevent misuse.
- Test, evaluate, improve and develop The Attention Machine and related products for you and other members.
- Keep business records, comply with law and handle disputes.
Improvement can involve people and AI reviewing selected recordings, transcripts, edits, chats, instructions, feedback and performance information. We may keep examples and run changes against them to compare results and check that problems are fixed.
Connected social information is used only as allowed by the relevant permissions, platform rules and applicable law. A broad description of improvement in this policy does not override limits on how that information can be used. YouTube connections use YouTube API Services through Zernio or Metricool.
4. Our reasons under privacy law
Where EU or UK privacy law applies, we rely on the following legal bases, depending on the information and purpose:
- Our contract with you: information necessary to provide the service you request, manage your account and payments, and carry out your instructions.
- Legitimate interests: running and securing our business, support, public research, and testing and improving our products, where those interests are not outweighed by your rights and interests. This requires considering the nature of the information and reasonable expectations; it is not permission to use any information for any purpose.
- Consent: where required for a particular use, communication or browser technology. You may withdraw consent for future processing without affecting earlier lawful processing.
- Legal obligations: records and disclosures required for matters such as accounting, tax and lawful requests.
Accepting our Terms is not blanket consent to every use of personal information. You may object to processing based on legitimate interests as explained below.
5. Providers and other recipients
We use other companies to run the service. The information a provider receives depends on the feature: for example, an audio tool needs audio, while a payment provider needs billing information. The providers named below are examples of companies we use or may use, not a complete list. We may add or replace providers within these categories for the purposes described in this policy:
- Hosting, storage and processing: Vercel, Convex, Cloudflare and Modal.
- AI, speech and media tools: Anthropic, OpenAI, Google, Z.ai, ElevenLabs and Replicate. AI requests may also pass through Vercel.
- Sign-in and account management: Clerk.
- Social connections, analytics and publishing: Zernio, Metricool and the social platforms you connect.
- Public research: Apify and Exa.
- Error monitoring and support operations: Sentry and Slack.
- Email and invite requests: Kit.
- Payments and subscription records: Stripe.
AI and media providers may receive your messages, instructions, recordings, transcripts, images and other context needed for a task. Providers can retain inputs, outputs and service records under the terms and settings that apply to their services. Some permitted settings or services may allow information to be used for a provider's own model improvement. We do not promise that every provider keeps nothing or never uses information for that purpose. For example, ElevenLabs explains its practices in its information about data and AI improvement.
When you connect an outside assistant, information it requests or sends through that connection may pass between us and the assistant's provider. Its own privacy policy also applies. Our staff and people helping us operate, support or improve the service may access relevant information for those purposes.
People with a download or share link may be able to access the linked file. Keep those links private unless you intend to share the content.
We may also disclose information when reasonably necessary to comply with law, protect people or our rights, resolve disputes, or as part of a business sale, financing or reorganization with appropriate confidentiality protections. We may share information when you ask us to, such as publishing a post or sharing a report.
6. Private work and public research
Your private workspace and uploaded content are used to deliver your work and for the support, testing and improvement purposes described here. They do not automatically become public reports or testimonials.
Public research is different. We may analyze public Instagram and other social content and make reports available to members or the public. Reports can include quotes, usernames, post links and examples from public comments. These reports are not necessarily anonymous: someone may be identifiable from a name, link, quote or context. Public availability does not remove applicable privacy rights; contact us if a report includes your information and you have a concern.
7. How long we keep information
Project video files may be deleted once the project is 90 days old. This is measured from when the project was created, not from your most recent visit or upload. It is not a promise that every file will be deleted on day 90. Keep your own copies of videos you want to save.
Files can remain longer while edits are processing, posts are being scheduled or published, another project or shared asset still needs them, or cleanup is waiting to run or finish. Cleanup can be delayed or paused. The 90-day period describes when project video files can become eligible for removal, not a maximum storage period.
Other information has a different lifespan. Removing project video files does not by itself delete chat history, account and billing records, saved business context, public research or separate testing examples. We may keep:
- Chats and saved context while needed to continue your work and provide the service.
- Selected recordings, transcripts, edits, instructions and feedback while needed to reproduce problems, compare results and check improvements, including after the original project files are removed.
- Public research and reports while they remain useful for research, reporting and product development.
- Account, payment, support and security records while needed to operate the business, meet legal obligations, prevent misuse or handle disputes.
The appropriate period depends on the purpose, sensitivity of the information, whether it is still needed, applicable platform rules, legal requirements and any valid privacy request. Backups and providers' copies can follow different deletion schedules. We may retain information that no longer identifies a person for longer.
8. Your choices and requests
Email rob@robinebers.com to ask about your information or request access, a copy, correction or deletion. Depending on where you live, you may also have rights to restrict processing, receive information in a portable format, object to uses based on legitimate interests, withdraw consent, or appeal a decision about a request. Requests can also cover retained testing examples or information in public reports.
We may need to verify your identity or authority before acting. We will respond within the period required by applicable law and explain any lawful reason we cannot fulfill all of a request. Some records may need to be kept, for example to meet legal obligations or resolve a dispute. You can complain to your local privacy regulator, including an EU supervisory authority or the UK Information Commissioner's Office, where applicable.
Disconnecting social accounts: use the connection settings available through the app or the social platform, or ask us for help. For YouTube, you can remove the Zernio or Metricool connection through your Google Account permissions. Revoking access stops future access through that permission. It does not delete your content from YouTube itself. Information already received remains subject to the platform's deletion requirements; email us for a broader deletion request. YouTube information is also governed by the Google Privacy Policy.
Closing an account: deleting your sign-in account or ending your subscription does not by itself erase every record, project, provider copy or testing example. Contact us for a broader deletion request. Billing cancellation is separate and is explained in our Terms.
You can unsubscribe from marketing emails using the link in those emails or by contacting us. We may still send necessary account, service or legal messages.
10. International processing
We are a United States company. We and our providers may process information in the United States and other countries where we or they operate. Those countries may have different privacy laws from your own. International transfers remain subject to any protections required by applicable law. You can contact us for information about the destinations and transfer arrangements relevant to your data.
Wyoming law in our Terms does not replace mandatory privacy protections, including EU or UK requirements where they apply. Using the service or reading this policy is not, by itself, consent to a transfer that legally requires separate consent or safeguards.
11. Security and children
We use access controls and other technical and organizational measures to protect information. No service, storage system or internet connection can be guaranteed completely secure. Contact us promptly if you believe your account or information is at risk.
The service is for business users aged 18 or over and is not directed to children. If you believe a child has provided personal information directly to us, please contact us so we can investigate and take appropriate action. Members are responsible for having the rights and permissions needed for any people featured in their uploads.
12. Changes and contact
We may update this policy as the service and our practices change. We will publish the updated version and date and give notice of material changes through the service or by email. If a new use requires consent or another step under applicable law, publishing a policy does not replace that step or retroactively change promises made when we collected the information.
For privacy questions and requests, contact:
The Attention Machine
Operated by SUNSTORY LLC
30 N Gould St, Ste R
Sheridan, WY 82801, United States
rob@robinebers.com