Security
Your login stays
on your computer.
SleepyBid works inside your own Chrome, on your own Upwork session. Your password, cookies and login never leave your machine — there's simply nothing for us to store or leak. Here's exactly how the data moves.
How your data moves
Never leaves this box
SleepyBid servers & trusted processors
SleepyBid’s servers never connect to Upwork. Every Upwork action happens in your browser.
What stays inside your browser
By design, these never touch our servers:
Your Upwork password
We never see it, receive it, or store it. There is no login-sharing and no password field anywhere in SleepyBid.
Your cookies & session
No cookie upload, no session export, no proxy in the middle. Your logged-in session stays in your browser.
Your identity & connection
Everything runs on your own account, from your own home IP. We don’t spoof fingerprints or route you through anyone else.
Direct access to Upwork
Our servers never call Upwork. If it can reach Upwork, it’s your browser doing it — the way you would.
What leaves your browser
To score jobs and draft proposals, SleepyBid sends a small, specific set of text to your account on our servers:
Job postings you’re considering
The text of jobs captured from your own Upwork browsing, so the AI can score them for fit.
Your freelancer profile
The profile details you choose to import, so proposals sound like you.
The proposals we draft
The cover letters and screening answers written for you.
Usage counters
How many jobs were scored and drafts written — to show your activity and enforce your plan limits.
Why the Chrome extension asks for what it does
SleepyBid requests the minimum a background assistant needs — and it only runs on Upwork.
Runs only on upwork.com
The extension’s scripts are limited to
upwork.com. It cannot read your other tabs, sites, or browsing.Tabs
To open and refresh your saved-search tabs in the background so it can spot new jobs.
Alarms
To schedule those background checks on a gentle timer instead of running constantly.
Storage
To remember your pairing and settings locally on your machine.
Who processes your data
A small set of trusted providers, each receiving only what it needs:
Anthropic (Claude)
Scores jobs and drafts proposals from the job and profile text. Not used to train models for anyone else.
Voyage AI
Generates the text embeddings used to match jobs to your profile.
Stripe
Handles billing. Your card details go straight to Stripe — we never see or store your card number.
Our hosting provider
Runs the servers and database that store your account data.
How it’s protected — and the controls you keep
You stay in charge of everything, at every moment:
Encrypted in transit
All traffic between the extension, our servers and our providers runs over HTTPS/TLS.
One-tap kill switch
Pause every action instantly from the dashboard, your phone, or Slack.
It stops when unsure
If Upwork shows a verification screen or anything unexpected, it pauses and pings you — a person decides, not the machine.
Delete anytime
Ask us to delete your data at any time and we remove it from our systems.
Found something? Tell us
Security is never finished. If you spot a vulnerability or have a concern, email hello@sleepybid.com and we’ll respond quickly.