Privacy Policy for AI Sonar

1. Information We Collect

1.1 Account Information

When an account is created or provisioned for you, we collect:

• Name or display name: To personalize your experience and communicate with you
• Email address or username: For account management, notifications, and important updates
• Password: Stored securely using industry-standard hashing algorithms

1.2 Billing Information

We collect billing and recharge records to operate prepaid balances. Payment handling may be performed by your account operator or trusted third-party processors where supported.

• Recharge amount, balance changes, and transaction metadata
• Operator, organization, or user account relationships needed for billing

1.3 API Usage Data

We automatically collect information about your API usage, including:

• API request metadata (timestamps, model names, token counts)
• Response status codes and error messages
• IP addresses from which API calls are made
• Rate limiting and quota information

1.4 Website Usage Data

We collect non-personal information through cookies and similar technologies:

• IP address and geolocation (country/region level)
• Browser type and version
• Device information (operating system, screen resolution)
• Pages visited and time spent on our Website
• Referral sources

2. How We Use Your Information

We use collected information for the following purposes:

• Providing, operating, and maintaining our Services
• Processing billing records and managing your account balance
• Sending transactional notices (API key changes, balance alerts, account updates)
• Improving and optimizing our Services
• Detecting, preventing, and addressing fraud, abuse, or technical issues
• Complying with legal obligations
• Communicating with you about updates, security alerts, and support

3. Data Sharing and Disclosure

We do not sell your personal data. We may share data with:

3.1 Service Providers

• Authorized account operators for balance and account administration
• Cloud infrastructure providers for hosting and data storage
• Analytics services for Website usage analysis

3.2 AI Model Providers

Your API requests (prompts and parameters) are forwarded to upstream AI providers (OpenAI, Anthropic, Google, etc.) to fulfill your requests. Please review their privacy policies for details on data handling.

3.3 Legal Requirements

We may disclose information if required by law, legal process, or government request, or to protect the rights, property, or safety of AI Sonar, our users, or others.

4. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (TLS/HTTPS)
• Encryption at rest for sensitive data
• API key hashing (we never store plaintext API keys)
• Regular security audits and monitoring

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

• Account Data: Retained for as long as your account is active
• API Usage Logs: Retained for billing, debugging, and abuse prevention according to operational policy
• Payment and Recharge Records: Retained as required by financial regulations and settlement needs
• Deleted Accounts: Personal data is removed within 30 days upon approved account deletion request, unless retention is required by law

6. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Request your data in a portable format
• Objection: Object to certain processing of your data

To exercise these rights, use the support path provided by the operator that issued your AI Sonar account.

7. Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our Website. They help us provide a better user experience and understand how our Website is used.

7.2 Types of Cookies We Use

We categorize cookies into the following types:

7.3 Managing Your Cookie Preferences

• Use the cookie consent banner when available
• Disable cookies through your browser settings (note: this may affect functionality)
• Use browser privacy controls for tracking preferences

7.4 Do Not Track

We respect browser Do Not Track (DNT) signals. When DNT is enabled, we will not set marketing cookies.

7.5 Third-Party Cookies

We do not use third-party advertising or tracking cookies. Any analytics tooling we enable is privacy-focused and used for aggregated product and site measurement.

8. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place for international transfers.

9. Children's Privacy

Our Services are not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, use the support path provided by your account operator.

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified through the Website, console, or your account operator. The "Last Updated" date at the top indicates the latest revision.

11. Support Path

For questions, concerns, or requests regarding this Privacy Policy, use the support path provided by the operator that issued your AI Sonar account.