Security
Your login stays
on your browser.
SleepyBid works inside your own Chrome, on your own Upwork session. Your Upwork password, cookies and session tokens never leave your browser, so we have no Upwork credentials to store or expose. Here's exactly how the data moves.
How your data moves
Never leaves this box
SleepyBid servers & trusted processors
SleepyBid’s servers never connect to Upwork. Every Upwork action happens in your browser.
What stays inside your browser
By design, these never touch our servers:
Your Upwork password
We never see it, receive it, or store it. There is no login-sharing and no password field anywhere in SleepyBid.
Your cookies & session
No cookie upload, no session export, no proxy in the middle. Your logged-in session stays in your browser.
Your identity & connection
Everything runs on your own account, using the same network and IP address as your browser. We don’t spoof fingerprints or route you through anyone else.
Direct access to Upwork
Our servers never call Upwork. If it can reach Upwork, it’s your browser doing it — the way you would.
What leaves your browser
To score jobs and draft proposals, SleepyBid sends a small, specific set of text to your account on our servers:
Job postings you’re considering
The text of jobs captured from your own Upwork browsing, so the AI can score them for fit.
Your freelancer profile
The profile details you choose to import, so proposals sound like you.
The proposals we draft
The cover letters and screening answers written for you.
Usage counters
How many jobs were scored and drafts written — to show your activity and enforce your plan limits.
Why the Chrome extension asks for what it does
SleepyBid requests the minimum a background assistant needs — and it only runs on Upwork.
Runs only on upwork.com
The extension’s scripts are limited to
upwork.com. It cannot read your other tabs, sites, or browsing.Tabs
To open and refresh your saved-search tabs in the background so it can spot new jobs.
Alarms
To schedule those background checks on a gentle timer instead of running constantly.
Storage
To remember your pairing and settings locally on your machine.
How it’s protected — and the controls you keep
You stay in charge of everything, at every moment:
Encrypted in transit
All traffic between the extension, our servers and our providers runs over HTTPS/TLS.
One-tap kill switch
Pause every action instantly from the dashboard, your phone, or Slack.
It stops when unsure
If Upwork shows a verification screen or anything unexpected, it pauses and pings you — a person decides, not the machine.
Delete anytime
Ask us to delete your data at any time and we remove it from our systems.
Found something? Tell us
Security is never finished. If you spot a vulnerability or have a concern, email hello@sleepybid.com and we’ll respond quickly.