Privacy Policy

Information We Process

• Account and authentication: Email address, authentication-provider identifiers, profile details you provide, preferences, account status, and credit or subscription balance.
• Analysis information: Project and file metadata, technical measurements, interpreted findings, recommendations, optional reference-analysis data, reports, and analysis history.
• Transactions: Selected products or plans, payment and subscription status, provider customer or transaction identifiers, and checkout-related records. Sonatio does not receive or store full payment-card details.
• Support and communications: Messages sent to support, feedback, screenshots or other attachments, email preferences, and service-related correspondence.
• Security and service operation: Request metadata, session identifiers, device or browser signals, rate-limit data, and bot-protection results used to prevent abuse and keep the service reliable.

Audio Processing

Uploaded premaster and reference audio is held temporarily while Sonatio extracts the measurements required for analysis, then removed from temporary processing storage. Sonatio stores the resulting measurements, findings, recommendations, reference comparisons, reports, and analysis history so completed work can remain available in your account. AI interpretation providers receive structured measurements and findings rather than the raw audio file.

Ask Sonatio

Ask Sonatio is a public product assistant powered by OpenAI's GPT-OSS 20B model through Groq. It uses Sonatio's curated public product facts and cannot inspect your account, payments, uploaded audio, or analysis jobs. Your question and the recent conversation history needed to answer a follow-up are sent to Groq, and chat requests are subject to abuse-prevention rate limits. Sonatio does not intentionally save chat transcripts to your account, although session identifiers, rate-limit signals, request metadata, error diagnostics, and provider-side retention may apply for security and reliability. Do not submit passwords, payment details, private audio, API keys, or other sensitive information through chat.

Service Providers

Sonatio uses providers to operate the platform, including Supabase for authentication, database, and storage; OpenRouter for analysis interpretation; Groq for Ask Sonatio chat and its GPT-OSS 20B inference; Dodo Payments for checkout and subscriptions; Resend for transactional and service email; Cloudflare Turnstile for bot protection; and Vercel Analytics and Speed Insights for optional product and performance measurement. Google Analytics 4 is also loaded only when analytics consent is enabled. These providers process information for the services they supply under their own terms and privacy notices.

Cookies, Local Storage & Analytics

Sonatio uses essential browser storage and authentication cookies for account access, security, checkout, and preferences. The cookie banner stores consent choices in local storage using the cookie-consent and cookie-preferences entries.

Optional analytics and performance tools are activated only after analytics consent. Google Analytics may process page views, button interactions, device or browser information, and signup or product events. Vercel Analytics and Speed Insights may process usage and performance data. Sonatio does not use these tools for targeted advertising.

You may decline optional analytics during consent, withdraw consent by clearing the relevant browser storage, or contact us for help with a privacy request. Essential storage cannot be disabled while it is required for the website or account to function.

Retention & Security

Raw audio is retained only for temporary processing. Account, measurement, report, credit, and subscription information is retained while needed to provide the service, maintain transaction and security records, meet legal obligations, or resolve disputes. Support attachments and service messages may be retained for support, security, and operational records. Ask Sonatio transcripts are not intentionally stored in your account, but request metadata and the provider may apply their own limited retention rules.

Sonatio uses access controls, encrypted transport, server-side secrets, rate limits, and request protections. No online service can guarantee absolute security.

International Processing

Sonatio and its providers may process information in countries other than the country where you live. Where required, appropriate contractual or other safeguards are used for those transfers.

Your Rights

Depending on where you live, you may request access to, correction of, or deletion of eligible account information; ask about processing; withdraw optional analytics consent; and unsubscribe from non-essential email. Contact us at the address below. We may need to verify your request before acting and will respond within the period required by applicable law.

Children

Sonatio is not directed to children. Do not use the service or submit personal information if you are below the minimum age required to consent to the service in your jurisdiction.

Updates

We may update this policy as Sonatio, its providers, or applicable requirements change. The published version and its update date identify the current policy. Material changes will be communicated through the service or by email where appropriate.