Privacy

Privacy policy

What we collect, why, and how to have it deleted. Last updated 27 October 2026.

What we collect

  • SORAEN Chat account: your email address, and your name if you sign in with Google.
  • Waitlist: the email address you enter.
  • SORAEN Personal reservation: your name, email, and the preferences and notes you enter, which we use to reply to you and set up your profile.
  • Subscription: your email address and Stripe customer and subscription IDs. Card details go directly to Stripe and never reach us.
  • API keys: stored only as a one-way hash, so even we can't read them.
  • Usage: for each request, the time and the number of tokens used, so we can show your usage and enforce plan limits.
  • Documents you upload: kept in your account so SORAEN can answer from them.

What we don't keep

Through the API, your messages, the model's answers, images and voice recordings are processed to answer you and then discarded. In SORAEN Chat, the text of your conversations is saved to your account so you can come back to it; images and voice recordings are not stored. You can delete any conversation, or your whole account, and download a copy of your data, from Settings in the chat app. If you create a share link, anyone with that link can read that copy of the chat until you remove it. Temporary chats aren't saved at all. We don't use any of your content to train our models. The website sets no cookies and has no analytics or advertising trackers; the dashboard keeps your API key in your own browser only if you ask it to, and SORAEN Chat keeps your sign-in in your browser's local storage.

Why we use it

To provide the Service, bill your subscription, enforce limits, prevent abuse, reply to you, and send you access and important service updates. We don't sell your data or share it for advertising.

Who processes it

Stripe handles payments. Resend delivers sign-in codes by email, and Google handles sign-in if you choose it. Netlify hosts the website and stores waitlist sign-ups and reservations. Our API runs on servers we rent; customer data stays there. Google Fonts receives your IP address when your browser loads the site's fonts. Each follows its own privacy policy.

How long we keep it

Documents: until you delete them, or 30 days after your account ends. Usage records and billing details: as long as tax and accounting law requires. Waitlist emails and reservations: until you ask us to remove them or we no longer need them to send you access or set up your profile.

Your rights

You can ask at any time to see, correct, export or delete the personal data we hold about you, and you can unsubscribe from any email. Email founder.soraen.ai@gmail.com; we reply within 30 days.

Security

Traffic is encrypted with HTTPS, keys are hashed, and each account's documents are isolated from every other account. If a breach affects your data, we'll tell you without undue delay.

Changes

We'll update the date at the top when this policy changes and email subscribers about significant changes.

Contact

SORAEN ยท founder.soraen.ai@gmail.com