Privacy Policy

Last updated: June 26, 2026

Bumblebee.buzz ("Bumblebee", "we", "our", or "us"), operated by HiveTech LLC, provides the Bumblebee companion, Honeycomb dashboard, stream overlays, Discord/Twitch/YouTube bots, store, affiliate and artist tools, Hivewire workspace features, diagnostics, and related services. This Privacy Policy explains what we collect, where it comes from, why we use it, who receives it, how long we keep it, and the choices you have.

Plain-English Summary

We process data to run the features you enable, not to build a data-broker profile.
We do not sell Google, YouTube, Twitch, Discord, partner, payout, or customer data.
We do not use connected-platform data for unrelated ads, credit decisions, data brokering, or generalized AI model training unrelated to Bumblebee's user-facing features.
Bumblebee voice commands are bounded by the voice features you enable. The keyword detector only recognizes trained keyword phrases; it does not transcribe or understand normal room conversation.
You can disconnect platforms, turn features off, manage memories, cancel subscriptions, and request access, correction, export, or deletion.

Controller and Contact

Controller: HiveTech LLC, based in Utah, USA.
Privacy requests: support@bumblebee.buzz.
Primary processing location: United States, using Microsoft Azure and related providers.

Information We Collect

The exact data depends on which features you use, which accounts you connect, and which settings you enable. We collect information from you, connected platforms, payment providers, devices/browsers, Bumblebee services, and optional local bridge clients.

Account details: email, username, display name, profile image, password hash, and preferences.
Connected-platform data from Google/YouTube, Twitch, and Discord, including account IDs, channel or guild metadata, OAuth scopes, access or refresh tokens, chat messages and participant IDs from enabled channels, membership or role signals, and posting permissions.
Settings and usage data: bot settings, overlay settings, voice and puppet choices, AI model choices, enabled tools, durable memories, generated content, TTS events, transcription events, usage-meter events, diagnostics, logs, and support context.
Voice and audio data: Discord voice signals, wake/cancel/stop keyword results, temporary listen-window audio, voice-bubble transcription text when enabled, timing metadata, and diagnostic metadata needed to operate and debug voice features.
AI and tool data: prompts, responses, image prompts, generated images, code-interpreter or web-search tool use, action confirmations, tool results, and context Bumblebee needs to answer or act on an enabled request.
Hivewire data: bridge pairing state, bridge status, workspace layout, terminal input/output, Codex prompts, pasted text or images, local app window state, and overlay visibility settings when you pair or use Hivewire.
Commerce data: subscription tier, store purchases, Stripe customer or subscription IDs, cart and checkout state, discount usage, referral attribution, and payment status. We do not store card numbers.
Partner data: affiliate applications, artist applications, accepted terms timestamps, promo codes, referral visits and conversions, payout ledger entries, royalty rates, Stripe Connect IDs, payout statuses, and admin review notes.
Artist content: puppet drafts, source art, rendered previews, metadata, submission status, review history, store listing details, and files needed to render or sell approved assets.
Analytics and security data: IP address, user agent, device information, request metadata, page views, and coarse operational metrics from services such as Cloudflare and Google Analytics.

Why We Use Data

Provide accounts, authentication, dashboards, overlays, bots, store, and partner tools.
Run connected Twitch, YouTube, and Discord features you authorize.
Generate AI responses, images, TTS, transcripts, captions, puppets, and stream actions.
Remember durable preferences or facts when the memory feature is enabled.
Process subscriptions, digital goods, affiliate attribution, artist royalties, and payouts.
Measure usage, enforce caps, prevent abuse, investigate errors, and keep the service secure.
Comply with tax, accounting, payment, platform, legal, and safety obligations.

Voice Privacy

Bumblebee voice features are optional and controlled by bot/server settings. Discord voice audio must reach Bumblebee's voice worker for enabled Discord voice features to work, but not all voice processing is the same:

Keyword detection is limited. The keyword model can only identify trained phrases such as wake, cancel, or stop keywords. It is not a general speech-to-text system, and it does not summarize, understand, or send ordinary room conversation to the LLM.
For wake-word commands, normal room audio is processed for keyword detection and temporary buffering. Only audio inside an accepted listen window is sent for transcription and LLM processing.
Rejected, canceled, or timed-out voice command audio is discarded except for limited operational metadata needed for diagnostics, support, security, abuse prevention, and usage accounting.
Voice bubbles, captions, or voice puppet features are separate from wake-word commands. If you enable those features, Bumblebee may transcribe enabled speakers so their words can be shown on the overlay, animate puppets, or power the configured stream experience.
Server and stream owners are responsible for giving participants any notices or obtaining any permissions required by their platforms and local law before enabling voice, transcription, TTS, or overlay caption features.

AI, Memories, and Generated Content

Bumblebee may send prompts, voice transcripts, chat context, tool results, images, and related request context to OpenAI or other AI providers when you enable AI features.
TTS and speech features may use Microsoft Azure Speech or other speech providers to generate audio, detect speech activity, or transcribe enabled audio.
Web search, code interpreter, image generation, and similar tools are controlled by settings. When enabled, those tools can process the request content and tool output needed for the task.
Durable memories store concise facts or preferences for a bot. Memories may be created manually or by enabled AI tools. Chat and voice users can manage memories they created; bot owners can manage the full bot memory ledger.
Do not put secrets, passwords, payment data, medical or legal identifiers, sensitive personal data, or private third-party data into prompts, memories, Hivewire, or generated-content features unless you have the right to do so.

Connected Platforms

Google and YouTube

Authenticate you and link your Bumblebee account to your YouTube channel.
Detect live streams, read enabled live chat, animate overlays, and speak messages.
Identify members or supporters when you grant scopes for member-aware features.
Post messages on your behalf when you enable chat posting or announcements.
Requested scopes may include Google profile/email data, YouTube read-only access, channel membership access, and YouTube channel actions needed for enabled posting or moderation-like features.
Store tokens so authorized features can keep running until you revoke access.
Use of information received from Google APIs follows the Google API Services User Data Policy, including Limited Use requirements.

Twitch

Authenticate you and link your Bumblebee account to your Twitch channel.
Read enabled live chat so Bumblebee can animate puppets and speak messages.
Post messages or announcements when you enable that feature.
Store tokens so listeners and posting automations can continue running.
Support owner tools you enable, such as polls, raids, shoutouts, clips, stream category/title updates, commercials, chat settings, bans, follower/subscriber/member-aware behavior, bits, redemptions, and charity event handling.

Discord

Authenticate you and link your Bumblebee account to Discord users and guilds.
Read enabled messages or voice signals for relay, TTS, voice puppets, and automation.
Post messages, welcome notices, or role updates when enabled.
Use guild membership and role data to apply the permissions and settings you configure.
Store server, channel, role, voice-channel, and bot-configuration metadata needed to reconnect and run enabled features.

How We Use Partner and Artist Data

Operate affiliate codes, attribution, conversion tracking, fraud checks, and dashboards.
Operate Puppet Studio, review artist submissions, render previews, publish approved store items, and calculate artist royalties.
Administer payouts, payout eligibility, reversals, refund adjustments, dispute handling, and tax or accounting records.
Investigate abuse, platform complaints, payment risk, or intellectual property reports.

Hivewire and Local Bridge Features

Hivewire is optional. It can pair a local bridge with Bumblebee so the dashboard, overlay, AI tools, or Codex workspace can interact with local workspace and terminal features.
When paired, Bumblebee may transmit bridge status, workspace settings, terminal input and output, prompts, pasted text/images, and command results between your browser, the local bridge, and Bumblebee services.
If you show Hivewire on a stream overlay, viewers may see code, terminal output, file names, secrets, private project data, or other local-machine content. Use overlay sharing only when you are comfortable with that risk.

Cookies, Local Storage, and Referral Tracking

We use cookies and local storage for authentication, OAuth security checks, route flow, preferences, carts, checkout state, usage warnings, Hivewire theme and pairing keys, and other first-party product behavior.
Referral links and promo codes may set referral state so we can attribute eligible signups, conversions, discounts, and partner earnings.
Google Analytics and Google Ads may measure page views, signups, purchases, and conversion events where configured. Cloudflare may process traffic and security telemetry for performance, bot defense, and service protection.
We collect device, IP, user agent, and request metadata in access logs for security and operations. Typical log retention is up to 90 days unless longer retention is needed.

What We Do Not Do

We do not sell or rent Google, Twitch, Discord, partner, artist, or payout data.
We do not use connected-platform data for targeted or interest-based ads.
We do not transfer data to data brokers or use it for credit-worthiness decisions.
We do not use Google, Twitch, or Discord data to train generalized AI models unrelated to Bumblebee's features.

Legal Bases for EU and UK Users

Contract: to provide Bumblebee, overlays, bots, store purchases, and partner programs.
Legitimate interests: security, fraud prevention, abuse prevention, analytics, diagnostics, and service improvement.
Consent: optional platform posting, optional platform scopes, optional marketing, and some cookies where consent is required.
Legal obligations: billing, tax, payout, dispute, and compliance records.

We disclose data only as needed to operate Bumblebee, including:

Microsoft Azure for hosting, storage, databases, queues, and speech services.
OpenAI for LLM, transcription, image, and related AI features you enable.
ElevenLabs for selected text-to-speech voices used in first-party experiences.
Stripe for billing, checkout, customer portal, subscriptions, tax, fraud, and payouts.
Cloudflare for security, traffic protection, performance, and operational telemetry.
Google/YouTube, Twitch, and Discord when you authorize Bumblebee to read, post, moderate, or otherwise act through their APIs.
Google Analytics and Google Ads for analytics and conversion measurement where configured.
Legal, safety, compliance, payment, or abuse-prevention disclosures when necessary.

Provider and Platform Policies

Some features also depend on third-party platform or provider rules. The main public policy pages are:

International Transfers

Data is processed and stored in the United States. For EU/UK users, we rely on standard contractual clauses or other appropriate safeguards where applicable.

Retention and Deletion

We keep data only as long as needed for the purposes described here, unless a longer period is required for security, abuse prevention, accounting, tax, payout, dispute, platform, or legal reasons.

Account and profile data: while your account is active, plus a reasonable backup period.
OAuth tokens and connected account metadata are kept while that connection remains active; removing the connection deletes or disables those records unless retention is required.
Voice command audio: processed transiently for accepted requests and not retained long term unless a diagnostic or support workflow explicitly requires limited capture or metadata.
Voice bubble or caption text: processed for enabled overlay behavior and retained only as needed for recent context, diagnostics, usage accounting, or logs.
Live chat and Discord channel content: generally processed in real time, recent context, and limited logs or diagnostics rather than kept as a permanent chat archive.
Durable memories: retained until deleted by an authorized user, disabled/removed with the bot, or removed during account deletion where applicable.
Generated images, artist submissions, store assets, and previews: retained while needed for drafts, reviews, listings, purchases, royalties, support, disputes, or takedowns.
Partner ledgers, referral records, payout records, tax records, purchases, and billing records may be retained for accounting, fraud prevention, disputes, and legal compliance.
Request deletion by emailing support@bumblebee.buzz. We will delete or anonymize data unless we must retain it for legitimate or legal reasons.

Security

Data is transmitted over TLS and stored in access-controlled infrastructure.
Production access is limited to personnel who need it for operations, support, or security.
We use scoped OAuth permissions and rotate or revoke credentials when needed.

Your Choices and Rights

Disconnect Google/YouTube, Twitch, or Discord from Bumblebee or platform settings.
Turn off voice, TTS, chat relay, voice bubbles, AI tools, memories, image generation, web search, code interpreter, Hivewire, or overlay-sharing settings where available.
Review, edit, or delete bot memories through Bumblebee where the dashboard allows it.
Manage billing and subscriptions through Stripe customer portal links.
Manage affiliate codes, artist drafts, and partner status through partner tools where available.
Depending on where you live, you may have rights to access, correct, delete, export, restrict, object to, or appeal decisions about personal data. You may also opt out of sale, sharing, or targeted advertising where those rights apply; Bumblebee does not sell connected-platform or customer data.
Make privacy requests by emailing support@bumblebee.buzz.

Children

Bumblebee is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Users must be at least 13, and may need to be older if required by their platform, local law, purchase terms, or payout terms. If we learn we have collected personal information from a child under 13, we will delete it.

Sensitive Data

Bumblebee is not designed for medical records, government identifiers, financial account secrets, biometric identification databases, precise-location tracking, or other sensitive regulated data. Do not intentionally provide sensitive data unless the feature clearly requires it and you have the right to provide it.

Changes to This Policy

We may update this policy to reflect product, legal, or operational changes. For material changes, we will provide notice in-product or by email when practical.

Contact

Questions or concerns? Email support@bumblebee.buzz.