Privacy Policy

Sunnyside Video ("Company," "we," "us," or "our") is a content strategy service based in Connecticut. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website and services (collectively, the "Service").

We are committed to compliance with all applicable privacy laws, including the Connecticut Data Privacy Act (CTDPA), effective July 1, 2023 (Conn. Gen. Stat. § 42-515 et seq.), the federal CAN-SPAM Act (15 U.S.C. § 7701 et seq.), the Children's Online Privacy Protection Act (COPPA) (15 U.S.C. § 6501 et seq.), and other applicable Connecticut and federal regulations.

By accessing or using our Service, you agree to the collection and use of information as described in this Policy. If you do not agree, please do not use our Service.

a. Information You Provide Directly

• Email address — collected when you submit the intake form or sign up for newsletter updates.
• Business and profile information — information you provide through the structured online intake form (business name, niche, target audience, platform preferences, goals, etc.).
• Contact form submissions — name, email address, and message content when you contact us via our website.

b. Information Collected Automatically

• Log data — IP address, browser type, pages visited, timestamps, referring URLs, and device information via standard server logs.
• Cookies and local storage — session identifiers necessary to deliver the Service. We do not currently use third-party advertising cookies.

c. Information We Do Not Collect

We do not collect Social Security numbers, financial account information, health data, or biometric identifiers. We do not knowingly collect personal information from individuals under the age of 13.

We use the information we collect to:

• Deliver and personalize your AI-generated video content strategy;
• Generate and provide access to your private web Playbook;
• Communicate with you about your playbook, account, or service updates;
• Send newsletter updates when you sign up to receive them;
• Respond to contact form inquiries;
• Improve and develop our Service;
• Comply with applicable legal obligations;
• Detect, investigate, and prevent fraudulent or harmful activities.

We do not sell your personal information to third parties, and we do not use your personal data for behavioral advertising without your explicit consent.

If you are a Connecticut resident, the CTDPA (Conn. Gen. Stat. § 42-515 et seq.), effective July 1, 2023, grants you the following rights with respect to your personal data:

• Right to Access: You may request confirmation of whether we process your personal data and obtain a copy of that data.
• Right to Correction: You may request that we correct inaccuracies in your personal data.
• Right to Deletion: You may request that we delete personal data we hold about you, subject to certain legal exceptions.
• Right to Data Portability: You may request a copy of your personal data in a portable, readily usable format.
• Right to Opt Out: You have the right to opt out of the sale of personal data, targeted advertising, and certain profiling activities. We do not engage in these activities.
• Right to Appeal: If we decline to act on your request, you may appeal by contacting us at the address below. You may also file a complaint with the Connecticut Attorney General's office.

To exercise any of these rights, contact us at Jamil@sunnysidevideo.com. We will respond within 45 days as required by the CTDPA, with a possible 45-day extension when reasonably necessary.

a. CAN-SPAM Act

Any commercial email we send complies with the CAN-SPAM Act (15 U.S.C. § 7701). Each email includes a clear identification of the sender, a legitimate physical postal address, and an unsubscribe mechanism. We honor opt-out requests within 10 business days.

b. COPPA

Our Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately so we can delete it.

c. FTC Act — Unfair or Deceptive Practices

We comply with the FTC Act (15 U.S.C. § 45), which prohibits unfair or deceptive acts in commerce. Our data practices are transparent, and we do not make deceptive claims about how we handle your information.

We do not sell your personal data. We may share your information only in the following circumstances:

• Service providers: Third-party vendors who assist us in operating the Service (e.g., cloud hosting, AI processing). These providers are contractually obligated to protect your data and use it only to perform services on our behalf.
• Lead records: We keep email addresses, signup dates, the form or resource requested, and names or business names you provide in our database and a private Google Workspace spreadsheet used to manage inquiries and signups. Requesting a playbook or submitting an inquiry does not, by itself, sign you up for our newsletter.
• AI processing: Your intake form data is transmitted to OpenAI's API to generate your content strategy. OpenAI's use of data submitted via API is governed by their API data usage policies and is not used to train models without consent.
• Legal requirements: If required by law, court order, or governmental authority, or to protect the rights, property, or safety of Sunnyside Video, our users, or the public.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before such a transfer occurs.

We retain personal information in our operational systems for as long as it is needed to provide and operate the Service, respond to requests, and meet applicable legal obligations. New private Playbook links are available for 15 days; previously issued links retain their original 180-day expiry. These access periods are distinct from deletion of the underlying information and are not a promise that records are erased when a link expires. Data may remain stored until you request deletion or it is removed as part of operational retention practices; we do not currently guarantee a fixed automatic deletion schedule for intake information, playbook outputs, or contact submissions. You may request deletion by contacting us at the address below. We may retain information when required for legal obligations or legitimate operational needs.

We implement commercially reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. This includes encrypted data transmission (TLS), access controls, and regular security reviews.

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach affecting Connecticut residents, we will notify affected individuals in accordance with the Connecticut Identity Theft Prevention Act (Conn. Gen. Stat. § 36a-701b).

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this Privacy Policy periodically. When we do, we will revise the "Last updated" date at the top. For material changes, we will provide notice via email or a prominent notice on our website. Your continued use of the Service after any changes constitutes your acceptance of the updated Policy.

If you have questions, concerns, or requests regarding this Privacy Policy, or to exercise your rights under the CTDPA or other applicable laws, please contact us: