Effective Date
March 12, 2026
EchoMe (“EchoMe,” “we,” “our,” or “us”) is a product of BottleneckLabs.ai (“BottleneckLabs”). BottleneckLabs is the data controller responsible for your personal information. This Privacy Policy explains how we collect, use, store, and share your data when you use our platform and services.
By using EchoMe, you agree to the terms outlined here.
We collect the following categories of data:
A. Account Data
- • Name, email, social handles, login provider
- • Subscription status and plan info
B. Imported & Uploaded Content
- • Social media posts, captions, and metadata (with your consent via OAuth)
- • YouTube video transcripts imported via URL or connected account
- • Voice and audio recordings (transcribed via AI speech-to-text)
- • Uploaded files (audio, text, documents, email archives)
- • Video files processed through our Clip Finder tool
- • User-provided tags, prompt inputs, and form responses
C. Usage Data
- • Prompt history, feature usage
- • Device, browser, and session metadata
D. Payment Data
- • Processed securely via Stripe (we do not store your card details on our servers)
E. Third-Party Account Data
- • When you connect accounts via Google OAuth, we may access your YouTube channel data (video metadata, transcripts) and Google Drive files you explicitly select
- • When you connect Instagram, we access your public posts, captions, and profile metadata
- • We only access data within the scopes you authorize and do not access private messages, contacts, or unrelated account data
We use your data to:
- • Build Your Echo (your personalized voice profile)
- • Generate content (e.g., blogs, carousels, social posts, video clips)
- • Transcribe voice recordings and audio using AI speech-to-text
- • Process and analyze video content for clip extraction
- • Import and analyze YouTube transcripts and social media content
- • Provide account access and customer support
- • Process payments and manage subscriptions
- • Improve product functionality and user experience
- • Communicate updates, changes, or promotions
- • Ensure platform integrity and security
3. How We Store Your Data
Your data is stored securely using third-party services (e.g. Supabase, Pinecone, Railway) located in the U.S. and the EU. By using EchoMe, you consent to the transfer and processing of your data in these jurisdictions.
We encrypt all data in transit and at rest and restrict access through role-based permissions.
4. How Long We Keep Your Data
We retain user data while your account is active and for up to 24 months after inactivity, unless you request deletion sooner. You may delete your account at any time, which will trigger permanent deletion of all user-specific content and metadata.
You have the right to:
- • Access or download your data
- • Correct or update inaccurate information
- • Request deletion of your account and associated data
- • Withdraw consent for future data processing
To make any such request, email us at privacy@tryechome.com
6. Third-Party Access
We use trusted services to deliver EchoMe:
- • Authentication (Supabase, Google OAuth)
- • AI & Language Models (OpenAI, Anthropic Claude)
- • Speech-to-Text Transcription (OpenAI Whisper)
- • Vector Storage (Pinecone)
- • Database & File Storage (Supabase)
- • Payment Processing (Stripe)
- • Email Delivery (Resend)
- • Social Media Data (Instagram, YouTube)
- • Hosting & Infrastructure (Railway, Vercel)
- • Analytics (Plausible)
These vendors only access your data as needed to deliver their services. Each is contractually obligated to maintain confidentiality and security.
7. Use of Data for Model Training & Product Development
We may use anonymized, de-identified user data to:
- • Improve our AI prompts, workflows, and templates
- • Train custom models (not publicly available LLMs)
- • Conduct aggregated usage analytics
We do not sell, share, or publish your identifiable content without permission.
You can opt out of anonymized data use by contacting privacy@tryechome.com
8. Cookies & Tracking
We use first-party cookies to manage sessions and measure basic usage. We do not use invasive tracking or third-party ads.
9. Children's Privacy
EchoMe is not intended for users under 18. We do not knowingly collect data from children. If you believe we've collected data from a minor, contact us for immediate deletion.
10. Changes to This Policy
We may update this Privacy Policy. When we do, we'll post the updated version here and notify you via email or the app.
11. Governing Law
This policy is governed by the laws of The Commonwealth of The Bahamas. Disputes will be resolved via private discussion, followed by third-party mediation or arbitration as needed.