Privacy Policy

1. Information we collect

We collect the following categories of information:

• Information you provide. Name, business email address, company name, job title, and the contents of messages you send us through contact forms, email, or during an engagement. If you become a customer, we may also collect billing and contract information.
• Information collected automatically. IP address, browser type and version, device and operating system information, referring URLs, pages viewed, and dates and times of access. We collect this through cookies and similar technologies.
• Customer data. Forecasts, historical outcomes, and related data that a customer submits to the Services under a separate agreement. We process this data on the customer's behalf and in accordance with that agreement.
• Information from third parties. Information from analytics providers, marketing platforms, and publicly available business sources.

2. How we use information

We use personal information to:

• Provide, operate, maintain, and improve the Services
• Respond to your inquiries and provide customer support
• Evaluate and discuss potential engagements with your organization
• Send administrative information, service updates, and, where permitted, marketing communications
• Monitor usage, perform analytics, and develop new features
• Detect, prevent, and address fraud, security incidents, and technical issues
• Comply with legal obligations and enforce our agreements

Where required by law, we rely on your consent, the performance of a contract, our legitimate business interests, or compliance with a legal obligation as the legal basis for processing.

3. Cookies and similar technologies

We use cookies and similar technologies to operate our websites, remember your preferences, and understand how the Services are used. You can control cookies through your browser settings. Disabling cookies may affect the functionality of the Services.

We do not respond to "Do Not Track" browser signals at this time.

4. How we share information

We do not sell your personal information. We share information only as follows:

• Service providers. Vendors that perform services on our behalf, such as hosting, analytics, email delivery, payment processing, and customer support, under contractual confidentiality and security obligations.
• Business transfers. In connection with a merger, acquisition, financing, reorganization, or sale of assets.
• Legal and safety. When required by law, subpoena, or legal process, or to protect the rights, property, or safety of SoranoAI, our users, or others.
• With your direction. When you ask us to share information or otherwise consent.

5. Data retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary depending on the type of information and the context in which it was collected.

6. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. Residents of California and certain other jurisdictions may also have the right to opt out of the sale or sharing of personal information and of targeted advertising, and not to be discriminated against for exercising these rights.

To exercise these rights, contact us at contact@sorano.co. We may need to verify your identity before responding. You may designate an authorized agent to make a request on your behalf.

You can unsubscribe from marketing email at any time using the link in those messages. We may still send you administrative messages about the Services.

8. International transfers

We are headquartered in the United States and may process and store information in the United States and other countries. Where required, we use appropriate transfer mechanisms, such as standard contractual clauses, to protect personal information transferred across borders.

9. Children's privacy

The Services are intended for business users and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

10. Third-party links

The Services may link to third-party websites and services that we do not control. This Policy does not apply to those properties, and we are not responsible for their practices. Review their privacy policies before providing information.

11. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above. If changes are material, we will provide additional notice as required by law. Your continued use of the Services after an update constitutes acceptance of the revised Policy.