Privacy Policy

1. Information We Collect

We collect the following information when you use Sondio:

• Email address — provided when you create an account, used for authentication and communication
• Usage data — pages viewed, searches performed, features used, and interaction patterns to improve the Service
• Session cookies — a single session cookie (sondio_session) containing a JSON Web Token (JWT) to maintain your authenticated session

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Authenticate your sessions via magic link email
• Process billing and manage subscriptions
• Send email notifications, including alerts and digests you have configured
• Improve the Service, including performance, reliability, and user experience
• Communicate important updates about the Service or your account

3. Third-Party Services

We use the following third-party services to operate the platform. Each processes only the minimum data necessary for its function:

• Stripe — payment processing and subscription billing
• Resend — transactional email delivery (magic links, notifications, digests)
• Cloudflare — hosting, content delivery, and DDoS protection
• Neon — PostgreSQL database hosting

We do not sell your personal data. We do not share your information with third parties for advertising or marketing purposes.

4. Cookies

Sondio uses a single session cookie (sondio_session) to maintain your authenticated session. This cookie contains a JWT and is essential for the Service to function when you are logged in.

We do not use tracking cookies, third-party analytics cookies, or advertising cookies. We do not participate in cross-site tracking or retargeting.

5. Data Retention

Your account data is retained for as long as your account is active. If you request deletion of your account, we will remove your personal data within 30 days, except where retention is required by law or necessary to resolve disputes or enforce our agreements.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate personal data
• Request deletion of your personal data and account
• Export your personal data in a portable format

To exercise any of these rights, email us at privacy@sondio.io. We will respond to requests within 30 days.

7. Children

Sondio is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a user is under 18, we will promptly delete their account and associated data.

8. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you by email before the changes take effect. The “Last updated” date at the top of this page indicates when the policy was last revised.

9. Contact

If you have questions about this Privacy Policy or our data practices, contact us at privacy@sondio.io.