Privacy Policy

• Account information. Your email address and, if you sign in with Google, your name and profile picture from Google. If you use a password, it is handled by our authentication provider; we never see it.
• What you tell us. The name you want us to call you, an optional description of what you do, social media accounts you add as your own, and your workspace name.
• Your chats. The questions you ask, the answers, the data lookups made for them, and any drafts or charts, including your edits to them.
• Memory. Short notes Soradar keeps about you or your workspace so it can tailor answers. They are written only from what you say, never from data it looks up, and you can see, edit, export, delete or switch them off on the Memory page.
• Usage and billing records. Which requests your account or API keys made, when, whether they succeeded, and the credits charged; your credit balance and purchases. API keys are stored only in hashed form.
• Payment information. Payments are processed by Stripe. We receive a customer reference and the status of your payments and subscription, never your full card number.
• Technical information. Our hosting provider processes your IP address, browser type and request details to deliver and protect the Service, and keeps operational logs. We count page visits with Cloudflare Web Analytics, which sets no cookies and does not follow you across sites. We do not use advertising trackers.

To answer questions, the Service fetches publicly available data from social platforms — profiles, posts, comments and search results — when a user asks for it. This can include personal data of people who publish publicly, such as names, handles, profile pictures, bios and captions.

We store this data to serve requests and to show how public metrics change over time. We do not access private accounts, private messages or anything that requires logging in to someone else’s account.

If you are a creator and want public data about you removed from our stores, write to privacy@soradar.app with the profile links concerned.

• To provide the Service: answering your questions, running data lookups, remembering context you asked us to keep, and serving API requests.
• To measure usage and bill credits, and to process payments.
• To keep the Service secure and prevent abuse, fraud and misuse.
• To support you and to tell you about changes to the Service or these terms.
• To understand how the Service performs and improve it, using usage records and aggregated statistics.
• To comply with legal obligations.

We do not sell your personal data, and we do not use your chats or memory to train AI models.

Answers are written by AI models. To produce them, we send the model your message, the relevant part of the conversation, your memory notes (when memory is on) and the results of the data lookups. We also use AI models to suggest follow-up questions and to write starter examples from what you told us during setup.

When the assistant searches the web, the search queries and page addresses it writes are sent to a web search provider. These do not include your account details.

AI-generated answers can be wrong or incomplete. Check important figures against the cited sources.

You can connect third-party AI apps, such as Claude, ChatGPT and Cursor, to your Soradar account through our MCP server, either by signing in with OAuth or by giving the app one of your API keys. The app can then look up public social media data for you and spend your credits.

We receive the tool calls the app makes (the tool name and its arguments, for example a platform and a handle) and the account they are for. For an OAuth connection we also receive the app’s name and the redirect address it registered. We store the OAuth grants and tokens that keep the connection working, and we log each call for billing, abuse prevention and support.

The creators, posts and searches those calls return (or calls made with your API keys) are also saved to your account’s Library, so you and your team can find them again in Soradar. You can turn this off on the Connect AI apps page; items already saved stay until you delete them.

We do not receive the rest of your conversation with that app. What we return goes to the app and is then handled under that app’s own privacy policy, not this one.

You can disconnect any app at any time on the Connect AI apps page, which ends its access at once. Revoking an API key ends the connections that use it.

We share personal data only with service providers that process it on our behalf to run the Service:

• Clerk — sign-in and account management.
• Cloudflare — hosting, databases and file storage, network delivery and security.
• Stripe — payment processing.
• AI model providers — generating answers, suggestions and examples.
• Web search providers — running web searches the assistant makes.
• Social data providers — fetching public social media data. They receive what is being looked up (for example a handle or a keyword), not who asked.

We may also disclose information when the law requires it, to protect the rights, safety or property of our users, the public or Soradar, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to it.

Our service providers operate in several countries, including the United States, so your data may be processed outside the country where you live. Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses.

We use only what the Service needs to work:

• Sign-in cookies set by our authentication provider to keep you signed in and protect your account.
• A cookie that remembers whether the sidebar is open.
• Browser storage that remembers whether the chat’s context panel is open.

We do not use advertising or analytics cookies.

• Account information, for as long as your account is open.
• Chats, until you delete them or your account.
• Memory notes, until you delete them, clear your memory or delete your account.
• OAuth grants and tokens of connected AI apps, until you disconnect the app or the connection expires.
• Usage, credit and payment records, for as long as we need them for billing, accounting, tax and legal obligations.
• Public social media data, while it is useful for serving requests and showing change over time, or until a removal request is accepted.
• Operational logs, for a limited period set by our hosting provider.

• Delete any chat from the chat list.
• See, edit, export (as JSON) or delete your memory notes, or switch memory off, on the Memory page.
• Revoke API keys at any time in the Developer area.
• Ask us for a copy of your data, to correct it, or to delete your account and its data, by writing to privacy@soradar.app.

Depending on where you live — for example under the EU or UK GDPR, Singapore’s Personal Data Protection Act or California law — you may have further rights, such as to object to or restrict processing, to data portability, or to complain to your data protection authority. We answer requests within 30 days and may need to verify your identity first.

We encrypt data in transit, store API keys only as hashes, keep each account’s data separate and limit who can access production systems. No system is perfectly secure; if a breach affects your personal data, we will tell you and the authorities as the law requires.

The Service is for professional use and is not meant for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, write to privacy@soradar.app and we will delete it.

We will update this page when our practices change and revise the date at the top. If a change is significant, we will tell you by email or in the app before it takes effect.

Questions about privacy or your data: privacy@soradar.app. Anything else: support@soradar.app.