Privacy Policy

Introduction

We at daydream Labs, Inc. (dba Sunbeam) (“Sunbeam,” “we,” or “us”) are strongly committed to respecting your privacy and keeping your data secure. This privacy policy (“Privacy Policy”) explains how we collect, use, disclose, and process your personal data when you use Sunbeam’s software, platform, APIs, Documentation, related tools and software, and website at www.sunbeam.ai (collectively, the “Service”). It also tells you how you can access and update your personal information and describes the data protection rights that may be available under your country’s or state’s laws. Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge you have been informed of and consent to our practices with regard to your personal information and data.

1. Personal data we collect

We collect the following categories of personal data:

A. Personal data you provide to us directly. This includes:

• Account Information: Sunbeam collects identifiers, such as your name and email address, when you sign up for a Sunbeam account or to receive information about our Service.
• Payment Information: We collect your payment information if you seek to access any paid Sunbeam products and services.
• Inputs and Outputs: The Service allows you to submit content (“Inputs”), which generates responses (“Outputs”) based on your Inputs. If you include personal data or reference external content in your Inputs, we will collect that information and it may be reproduced in the Outputs we provide.
• Communications Information: If you communicate with us, we collect your name, contact information, and the contents of any messages you send.
• Feedback: While using the Service, you may provide feedback, including ideas and suggestions for improvement or acting a Suggestion in response to an Input (“Feedback”). If you provide Feedback on the Service, we may store the entire exchange as part of your Feedback.

B. Personal data we receive from your use of the Service

When you use the Service, we also receive certain technical data automatically. This includes:

• Device Information. Your device or browser automatically sends us information about when and how you install, access, or use our Service. This information may include your device type, browser information, operating system, and mobile network or ISP. This information may depend on your settings and the type of device you use to access the Service.
• Log Information. We collect information about how our Service is performing, including your IP address, browser type and settings, error logs, and other ways that you interact with the Service.
• Usage Data. We collect information about your use of the Service, such as the dates and times of access, browsing history, search information, information about the links you click, pages you view, and other information about how you use the Service, and technology on the devices you use to access the Service.
• Cookies & Similar Technologies. We and our service providers utilize cookies, pixels, scripts, or similar technologies to operate and manage the Service and improve your experience. These technologies help us to recognize you, customize or personalize your experience, market additional products or services to you, and analyze and optimize your use of the Service, for example to help maintain your preferences. For more details about how we use these technologies, visit our Cookie Policy.
• Location Information. For security and performance reasons, for example to detect unusual login activity or provide more useful Outputs, we may determine the geographic location from which your device accesses our Service using information such as your IP address.

C. Personal data from Third Parties

We may interact with Sunbeam through a third-party, including by connecting a third-party account or other integration, we may receive personal data from that third party when you have provided that data to them and consented for them to share it with us, may be the controller of your information and have shared it with us, or the connection is otherwise authorized. We may also use third-party services to supplement, validate or increase the accuracy of personal data that is given to us. When you connect your account to a third party and us, we may collect authorization tokens, access credentials, third-party account information, and data necessary to create, maintain, and enhance the connection.

When a third party has shared your personal data with us or you have authorized us to connect with a third party using your personal data, the third party is the controller of your personal data that they have shared with us. Similarly, where you have authorized the connection for us to obtain the personal data from them. Specifically, the personal data that you share with such third parties or allow us to receive from them, is not controlled by us or covered by our privacy practices. We encourage you to review third-party policies and privacy settings so that you understand how the personal data you share with them may be used or shared with others.

D. Information We Do Not Collect

Sunbeam does not knowingly collect sensitive or special category personal information, such as genetic data, biometric data or the purposes of uniquely identifying a natural person, health information, or religious information. Additionally, Sunbeam does not knowingly collect information from or direct any of our Service or content to children under the age of 18. If we learn or have reason to suspect that a user is under the age of 18, we will investigate and, if appropriate, delete the personal data and/or the account.

2. How we use personal data

We may use personal data for the following purposes:

• To provide and maintain the Service, including optional features that enhance functionality and user experience.
• To create, manage, and administer your account, including facilitating payments and responding to inquiries.
• To improve and develop the Service and conduct research, including debugging and identifying or resolving issues that impair functionality.
• To communicate with you, including sending updates, information about the Service, and events.
• To prevent, detect, and investigate fraud, abuse, security incidents, and violations of our Terms of Service.
• To comply with legal obligations and protect the rights, safety, privacy, and property of users, Sunbeam, or third parties.
• To investigate and resolve disputes or security issues.
• To enforce our Terms of Service and other applicable agreements.

We do not use Inputs or Outputs to train our models, or permit third parties to use them for training.

We may aggregate or de-identify personal data so that it no longer identifies you, and use that information for the purposes, such as analyzing how the Service is used, improving or adding features, and conducting research. We will maintain de-identified information in its de-identified form and will not attempt to re-identify it, except as required by law.

3. How we share personal data

We may disclose your personal data in the following circumstances:

• Service Providers and Business Partners: We may disclose personal data to third-party vendors and service providers who support our business operations and help us deliver and improve the Service. This includes third-party hosting, cloud infrastructure, model, analytics, customer support, safety monitoring, communications, payment processing, compliance services, and IT providers. These parties process personal data only as necessary to perform services on our behalf, consistent with our instructions and applicable law.
• Business Transitions: In the event of a merger, acquisition, restructuring, bankruptcy, or other corporate transaction, personal data may be disclosed to counterparties and advisers as part of due diligence or transferred as a part of the transaction.
• Legal Compliance and Protection of Rights: We may disclose personal data to government authorities or other third parties if we believe doing so is necessary to: (i) comply with applicable laws, regulations, or legal processes; (ii) respond to lawful requests or investigations; (iii) detect, prevent, or address fraud, security, or privacy issues; (iv) protect the rights, property, or safety of users, Sunbeam, or the public; or (v) enforce our Terms of Service or other legal rights; or (vi) protect Sunbeam against legal liability.
• Affiliates: We may share personal data with affiliates, meaning an entity that controls, is controlled by, or is under common control with us. They may use your personal data in a manner consistent with this Privacy Policy.
• Third-Party Services and Integrations: The Service may include integrations with or links to third-party websites, applications, or services. If you choose to interact with these third parties, your personal data may be disclosed to them directly and governed by their own terms and privacy policies. Our linking or integrating with a third party does not imply endorsement of it or affiliation.
• Business Account Administrators: If you create an account or sign up using an email associated with an organization (e.g., your employer), we may disclose account-related information (such as your email address and account status) to that organization. If you are part of a business or enterprise account, administrators may access and manage your use of the Service.
• Other Users and Third Parties You Share Information With: Certain features of the Service may allow you to share Inputs, Outputs, or other content with other users or third-party applications. Any information you voluntarily share with these parties is subject to their respective terms and privacy policies.
• With Your Consent: We may disclose personal data when you give us permission to do so, including through features of the Service that are designed to share information.

Subprocessors: For commercial uses of the Service where Sunbeam acts as a data processor, you can review the third parties we engage on at www.sunbeam.ai/sub-processors.

4. Retention

Sunbeam retains your personal data only for as long as necessary to operate the Service effectively and to support legitimate business needs such as legal compliance, safety, dispute resolution, and enforcement of our agreements. The appropriate retention period varies depending on the purpose for which the personal data was collected, its sensitivity, potential risk associated with its use or exposure, and any applicable legal requirements.

Your settings may also influence how long we keep certain types of data. For instance, some temporary interactions with the Service may not appear in your history and could be stored for a limited duration for purposes related to safety and system monitoring.

When personal data is no longer needed, Sunbeam and its service providers will follow procedures to delete, erase, de-identify, or anonymize it in compliance with applicable laws.

5. Security

We implement commercially reasonable technical and organizational measures designed to protect personal data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, please remember that no method of transmission over the Internet or method of electronic storage is completely secure. You should use caution when deciding what information to share with the Service. We are not responsible for any circumvention of privacy settings or security features on the Service or on third-party sites linked through the Service.

6. Your rights and choices

Depending on where you live and the laws that apply in your country of residence, you may have certain rights in relation to your personal data. These may include the right to access, delete, correct, or transfer your personal data, to object to or restrict how we process it, or to withdraw your consent where processing is based on consent. You may also have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, you or your authorized agent may contact us at hello@sunbeam.ai. We may request information to verify your identity before processing your request. If we deny your request, you may appeal by emailing the same address. Sunbeam will not discriminate against you for exercising any privacy rights available under applicable law.

The rights available to you may include:

• Right to know what categories of personal data we collect, the purposes for which we use it, and the types of third parties with whom we share it.
• Access and portability: meaning you can request a copy of the personal data we hold about you and, where applicable, ask us to provide it in a portable format.
• Deletion of personal data collected from you in connection with your use of the Service, subject to certain exceptions.
• Correction of inaccurate personal data we maintain about you. Please note that while we will make reasonable efforts to address correction requests, due to the nature of our models, we cannot guarantee the accuracy of Outputs generated by the Service.
• Objection to certain types of processing. Where applicable, we will stop processing unless we have legitimate legal grounds to continue.
• Restriction of our processing of your personal data in limited circumstances, such as while a correction request is pending.
• Withdrawal of consent, where the legal basis for our processing is based on your consent. Withdrawal does not affect the lawfulness of prior processing.
• No automated decisions: Sunbeam does not make decisions based solely on automated processing that impact your legal rights or has similarly significant effects.
• No sale or targeted advertising: We do not “sell” or “share” personal data for cross-contextual behavioral advertising, and we do not process personal data for “targeted advertising” purposes (as those terms are defined under applicable US state privacy laws). We also do not process sensitive personal data for the purposes of inferring characteristics about a consumer.

Sunbeam processes your personal data for the purposes described in this Privacy Policy on servers located in various jurisdictions, including in the United States. While data protection laws vary by country, we apply the protections outlined in this policy to your personal data regardless of where it is processed, and we only transfer data in accordance with legally valid transfer mechanisms. For users in the European Economic Area (“EEA”), when you access our Service, your personal data may be transferred to our United States servers or other countries outside the EEA and the UK. Where information is transferred outside the EEA or the UK, we require an adequate level of protection.

7. Jurisdiction-Specific Disclosures

Some jurisdictions require specific disclosures regarding how we handle your personal data. If we are operating in jurisdictions outside of the United States, we will include a table below, which supplements this Privacy Policy to provide additional details about the purpose of data collection, type of data collected, and legal basis. For more information, see “Personal data collect” and “Retention” above.

8. Privacy policy changes

We may update this Privacy Policy from time to time. When we do, we will publish an updated version and effective date at the top of this page, unless another type of notice is legally required. Your continued use of this site after any change to this Privacy Policy will constitute your acceptance of such changes.

9. Contacting us

We encourage you to contact us at hello@sunbeam.ai if you have any questions about this Privacy Policy.