Privacy Policy for Sonata AI

Introduction

Welcome to Sonata AI, an independent AI creation platform. We value your privacy and are committed to protecting your personal information. This policy explains how we collect, use, disclose, and safeguard data when you use the service.

Information Collection and Use

We may collect the following data to operate and improve Sonata AI:

1. Account Information (if you create an account)

   • What We Collect: Name, email address, account identifiers, and authentication information. Passwords are handled by our authentication provider and are not stored by us in readable form.
   • Purpose: Manage accounts, enable Pro features, store generation history (optional), and provide support.

2. Usage Data

   • What We Collect: Prompts, uploaded files, generated outputs, selected settings, download actions, usage frequency, and error logs. Retention varies according to operational, security, and provider requirements.
   • Purpose: Provide requested features, prevent abuse, fix errors, and improve service performance.

3. Device Information

   • What We Collect: Device type, OS, browser type.
   • Purpose: Ensure compatibility and performance.

4. Cookies

   • What We Collect: Session and persistent cookies.
   • Purpose: Save preferences, keep you logged in, analyze site usage (e.g., Google Analytics). You can manage cookies in your browser.

5. Payment Information (Pro users)

   • What We Collect: Payment method details (handled securely by Stripe), billing address, and transaction history.
   • Purpose: Process payments and manage subscriptions.

Data Storage and Security

• Data may be processed by third-party hosting, database, authentication, payment, email, analytics, and AI service providers.
• We use encryption, access control, and security reviews.
• Passwords are hashed securely.
• Payments handled by PCI-compliant processors (e.g., Stripe).
• No method of online transmission is 100% secure.

Information Sharing

We do not sell or rent your data. We only share with:

• Service Providers: Payment (Stripe), hosting (Vercel), database (Supabase), analytics (Google).
• Legal Compliance: If required by law.
• Rights Protection: To enforce Terms of Service or protect safety.
• Business Transfers: In mergers/acquisitions, under confidentiality agreements.
• Aggregated Data: For analytics without identifying you.

Your Rights

Depending on your region, you may:

• Access, correct, or delete your data.
• Opt out of marketing or non-essential cookies.

Data Retention

We keep data as long as necessary to provide services or comply with law. Anonymized prompts may be retained for AI improvement.

Children's Privacy

Sonata AI is not intended for children under 13, or the higher minimum age required in the user's jurisdiction. We do not knowingly collect personal information from children.

Changes

We may update this policy. Significant changes will be posted here with the updated date.

Contact

Website: https://sonata-ai.org Email: [email protected]

By using Sonata AI, you acknowledge this Privacy Policy.

Last Updated: 2026-07-28