asmrsleep.app ("we", "us", "our") is operated by ASMRsleep, a company registered in South Africa. We are committed to protecting your privacy and complying with the Protection of Personal Information Act, 2013 (POPIA), and other applicable laws.
This Privacy Policy explains how we collect, use, disclose, and protect Personal Information when you visit asmrsleep.app, create an account (artists), book a session (customers), or interact with our services.
We collect Personal Information that is necessary for providing our marketplace services:
- From Customers (guests or registered): Name (optional), email address, payment details (processed securely via PayFast/PayPal; we do not store full card info), selected triggers/focus areas, booking preferences, timezone, and any messages/notes in booking form.
- From Artists: Full name/pseudonym, email (via Google sign-in), YouTube channel URL (verified via public API), bio, triggers offered, sample links, availability slots, pricing, payout details (bank/Wise info for EFT/transfers), and profile photo (optional).
- Automatically: IP address, browser type, device info, timezone, pages visited, referral source, session duration (via Vercel analytics or similar), cookies for essential functions (e.g., session management).
- From Zoom: Meeting IDs, start/end times, participant details (limited; we use Zoom's schedule_for to create private meetings).
We do not collect sensitive information (e.g., health data, racial/ethnic origins) unless voluntarily provided in booking notes (and only processed with your consent).
We use Personal Information for legitimate purposes under POPIA:
- To operate the platform: process bookings, create Zoom links, match artists/customers, handle payments/commissions/payouts.
- To communicate: send booking confirmations, Zoom links, reminders, rescheduling/cancellation notices (via Resend), support queries.
- To verify artists: check YouTube subscriber count (public API), manual approval.
- To improve services: analytics (aggregated/anonymized), fraud prevention, dispute resolution.
- Marketing: occasional emails about platform updates or promotions (opt-out always available; no spam).
- Legal compliance: respond to subpoenas, protect rights/safety.
We share only as necessary:
- With artists/customers: limited details (e.g., customer's selected triggers to artist; artist's pseudonym/bio to customer) for session delivery.
- Payment processors: PayFast/PayPal/Wise for transactions/payouts (they have their own policies).
- Zoom: to schedule/host private meetings.
- Service providers: Vercel (hosting), Neon (database), Resend (emails), Google (auth) — all with data protection agreements.
- Legal: if required by law, to enforce terms, or protect against harm.
We do not sell your Personal Information.
4. Data Security
We implement reasonable technical and organizational measures (e.g., encryption in transit/rest, access controls, secure hosting) to protect against unauthorized access or loss. However, no system is 100% secure.
5. Data Retention
We keep Personal Information only as long as needed: booking data approximately 12 months post-session (for disputes/payouts), account data until deletion request, logs per legal requirements.
6. Your Rights (Under POPIA)
You have the right to:
- Access or correct your Personal Information.
- Request deletion (subject to legal retention needs).
- Object to processing or withdraw consent (where consent is the basis).
- Lodge a complaint with the Information Regulator at inforeg@justice.gov.za.
Contact us at support@asmrsleep.app to exercise your rights.
7. International Transfers
Data may be processed outside South Africa (e.g., Vercel/Zoom US servers). We ensure adequate protections via contracts and standard clauses.
8. Children
Our services are not for persons under 18. We do not knowingly collect data from children.
9. Changes
We may update this policy; changes will be posted here with an updated date.
