Privacy Policy
Executive Summary
Who This Applies To
- Creators: Coaches, consultants, and experts who build AI Bots on our platform
- Clients: Individuals who subscribe to and interact with Creator Bots
- All Users: Must be 18+ years old
Key Points for Everyone
Your data is stored primarily in the United States and processed globally by our service providers. We never sell your personal information to third parties. You have rights to access, correct, delete, and export your data regardless of your location. Contact us at legal@soqratic.com for any privacy-related requests.
For Clients (Bot Users)
We collect basic account information (email, username), payment information processed by Stripe (we don't see full card numbers), and your conversations with Bots. We do not create voiceprints from your voice inputs - audio is immediately deleted after speech-to-text transcription.
Critical Notice: Creators have full access to all your messages, responses, and conversation history with their Bot. They can export, store, and analyze your conversations indefinitely in their own systems.
For Creators (Bot Builders)
We collect identity verification documents, tax information, bank account information for payouts via Stripe, your content and training materials, and voice recordings only if you choose to use voice cloning features.
1. Definitions and Scope
1.1 Parties Covered
This Privacy Policy applies to:
- Creators: Individuals or entities who create and operate AI Bots using the Soqratic platform
- Clients: Individuals who subscribe to and interact with Creator AI Bots
- Visitors: Individuals who visit our website or platform
1.2 Key Definitions
"Personal Information" means information that identifies, relates to, describes, or could reasonably be linked to an individual, directly or indirectly.
"Services" means the Soqratic platform, website, applications, and all associated tools and features.
"Creator" means any individual or entity that creates and operates an AI Bot using the Soqratic platform. Creators are currently based in the United States and Canada.
"Client" means any individual worldwide who subscribes to or interacts with a Creator's AI Bot.
"AI Bot" or "Bot" means the artificial intelligence conversational agent created and trained by a Creator.
"Conversation Data" means messages, interactions, and related data exchanged between a Client and an AI Bot.
"Biometric Information" means physiological or biological characteristics used to uniquely identify an individual, including voiceprints and facial geometry data.
1.3 Geographic and Operational Scope
- Service Availability: Our Services are available to users worldwide.
- Creator Locations: Creators are currently based in the United States and Canada.
- Data Processing Location: Personal information is primarily processed and stored in the United States.
- Age Restriction: You must be at least 18 years of age, or the age of majority in your jurisdiction (whichever is higher), to use our Services.
2. Information We Collect
2.1 Information Collected from All Users
Account and Profile Information:
- Full name
- Email address
- Username
- Encrypted password
- Country or region of residence
- Language preference
Technical Information:
- IP address
- Browser type and version
- Operating system
- Device type and identifiers
- Pages viewed and navigation paths
- Time and date of access
2.2 Additional Information from Creators
Identity Verification Information:
- Government-issued identification information
- Date of birth
- Verification photographs
Business and Tax Information:
- Business name and type
- Tax identification number (Form W-9 for U.S. taxpayers; Form W-8BEN for non-U.S. taxpayers)
- Business address
- Processed and stored by our payment partner, Stripe, Inc.
Creator Content:
- Written materials, documents, and training content
- Audio recordings (podcasts, lectures, voice samples)
- Video content and images
- Voice recordings for voice cloning functionality
- Proprietary methodologies and frameworks
Biometric Information (Optional - Voice Cloning Feature Only):
- Voiceprints and voice characteristics derived from audio recordings
- Speech patterns, intonation, and acoustic features
- Collected only with explicit consent for voice cloning features
2.3 Additional Information from Clients
Subscription and Payment Information:
- Payment card type and last four digits
- Card expiration date
- Billing address and email
- Collected and processed by Stripe; Soqratic does not store complete payment card numbers
Conversation Data:
- All messages and prompts sent to AI Bots
- Bot-generated responses
- Conversation timestamps and metadata
- Conversation history and archives
Voice Input Data (Temporary):
- Audio recordings when using voice input features
- Retained only momentarily for speech-to-text transcription
- Permanently deleted immediately after transcription
- Not used to create biometric identifiers
2.4 Information We Do Not Collect
We do not collect the following categories of information:
- Client biometric identifiers (we do not create voiceprints from Client voice input)
- Social Security Numbers from Clients (only tax identification from Creators)
- Precise real-time geolocation or GPS coordinates
- Information from individuals under 18 years of age
- Racial or ethnic origin
- Political opinions
- Religious or philosophical beliefs
- Data concerning sexual orientation
3. Use of Information
3.1 Primary Purposes
Service Provision and Operations:
- Creating and maintaining user accounts
- Authenticating user identity and managing access
- Enabling Creator Bot creation, training, and deployment
- Processing and generating Bot responses and outputs
- Facilitating Client-Bot interactions and conversations
- Processing Client subscription payments
- Facilitating Creator revenue payouts
- Providing customer support and technical assistance
Service Improvement and Development:
- Analyzing platform usage patterns and user behavior
- Improving AI Bot quality, accuracy, and performance
- Developing new features and functionality
- Optimizing platform performance and reliability
Security, Compliance, and Legal:
- Detecting and preventing fraudulent activity
- Protecting against security threats and unauthorized access
- Complying with applicable laws and regulations
- Responding to legal requests and court orders
3.2 Important Limitations
Third-Party Model Training: Your Conversation Data is not used to train third-party artificial intelligence models operated by Anthropic, OpenAI, or Google. We have contractual agreements preventing such use.
4. Information Sharing and Disclosure
4.1 No Sale of Personal Information
Soqratic Studios, Inc. does not sell personal information to third parties for monetary consideration.
4.2 Service Providers and Processors
We share personal information with third-party service providers who perform services on our behalf:
Payment Processing - Stripe, Inc.
- Information Shared: Creator financial information, Client payment information, transaction details
- Purpose: Processing subscription payments, facilitating Creator payouts
- Privacy Policy: stripe.com/privacy
Cloud Infrastructure - DigitalOcean, LLC
- Information Shared: All platform data (encrypted)
- Purpose: Cloud hosting, server infrastructure, data storage
- Security: AES-256 encryption at rest, TLS 1.3 encryption in transit
Artificial Intelligence Providers
We utilize AI service providers to generate Bot responses. These providers do not use your Conversation Data to train their public models:
- Anthropic, PBC - Privacy Policy
- OpenAI, L.L.C. - Privacy Policy
- Google LLC - Privacy Policy
4.3 Creators as Independent Data Controllers
Critical Notice: When you interact with a Creator's AI Bot, the Creator receives access to your Conversation Data. Creators are independent businesses and act as separate data controllers with respect to this information.
Information Accessible to Creators:
- Complete conversation transcripts between Client and Creator's Bot
- Client email address and username
- Subscription information (plan type, billing status, start date)
- Usage analytics and engagement metrics
Creator Limitations: Creators are prohibited from:
- Selling or renting Client contact information to third parties
- Sharing Client data with data brokers or marketing companies
- Publicly disclosing conversations without explicit permission
- Using Client data in ways that violate our Terms of Use
5. Creator Voice Cloning and Biometric Information
5.1 Overview
Biometric information refers to physiological or biological characteristics that can be used to uniquely identify an individual. In the context of Soqratic Services, biometric information consists of voiceprints and voice characteristics extracted from audio recordings.
5.2 Scope of Biometric Collection
Biometric information is collected exclusively from Creators who voluntarily choose to use voice cloning features. We do not collect biometric information from Clients or general platform users.
5.3 Explicit Consent Requirement
Collection of biometric information requires explicit, informed consent from Creators. By creating a Creator account and uploading voice recordings for voice cloning purposes, you acknowledge and consent to:
- Soqratic collecting, using, storing, and disclosing biometric information derived from your voice recordings
- Biometric information being used to create a synthetic voice model for your AI Bot
- Biometric information being retained for the duration of your account and up to 90 days following termination
5.4 Biometric Information Retention
- During Active Account: Retained while voice cloning features remain active
- After Account Termination: Retained for up to 90 days to allow for potential reactivation
- Illinois (BIPA): Permanently deleted within 3 years of last interaction
- Backup Systems: May remain in encrypted backups for up to 180 days following deletion
5.5 Withdrawal of Consent
You may withdraw consent for biometric information collection at any time by:
- Disabling voice cloning features in your Creator dashboard
- Deleting your Creator account entirely
- Emailing legal@soqratic.com with subject line: "Biometric Consent Withdrawal"
6. Creator Access to Client Data
6.1 Understanding the Three-Party Relationship
When you interact with a Creator's AI Bot, you enter into a relationship involving three parties:
- You (Client): The individual using the Bot
- Creator: The independent coach, author, or consultant that created the Bot
- Soqratic: The platform provider facilitating the interaction
6.2 Information Accessible to Creators
- Complete transcripts of all conversations
- All messages, questions, prompts, and user inputs
- All Bot-generated responses
- Client email address and username
- Subscription information and usage analytics
6.3 Important Warnings for Clients
DO NOT share the following in conversations:
- Social Security Numbers, passport numbers, or government identification numbers
- Bank account numbers, credit card numbers, or financial account credentials
- Passwords, PINs, security codes, or authentication credentials
- Detailed medical diagnoses, treatment plans, or comprehensive health records
- Personal information about minors
- Privileged attorney-client communications
- Trade secrets or confidential business information
7. Cookies and Tracking Technologies
7.1 Types of Cookies Used
Essential Cookies (Strictly Necessary): Required for Services to function properly, including authentication and session management.
Functional Cookies: Remember user choices and preferences to enhance experience.
Performance and Analytics Cookies: Understand how users interact with Services to identify improvement opportunities.
7.2 Cookies Not Used
We do not currently use:
- Advertising or marketing cookies for targeted advertisements
- Retargeting or remarketing cookies that follow users across websites
- Cross-site tracking cookies
8. Privacy Rights
8.1 Universal Rights (All Users Worldwide)
- Access: Request copies of personal information we hold
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of personal information (subject to legal retention requirements)
- Portability: Request personal data in machine-readable format (JSON, CSV)
- Marketing Opt-Out: Unsubscribe from promotional communications
8.2 California Residents (CCPA/CPRA)
California residents have additional rights including:
- Right to Know: Categories and specific pieces of personal information collected
- Right to Delete: Request deletion of personal information
- Right to Correct: Request correction of inaccurate personal information
- Right to Non-Discrimination: We will not discriminate against you for exercising privacy rights
8.3 European Union, EEA, and UK Residents (GDPR)
EU/EEA and UK residents have comprehensive rights under GDPR including:
- Right of Access (Article 15)
- Right to Rectification (Article 16)
- Right to Erasure / "Right to be Forgotten" (Article 17)
- Right to Restriction of Processing (Article 18)
- Right to Data Portability (Article 20)
- Right to Object (Article 21)
- Right to Lodge Complaint with supervisory authority
8.4 Exercising Privacy Rights
Contact Information:
- Email: legal@soqratic.com
- Subject Line: "Privacy Rights Request - [Your Country/State]"
Response Timeline:
- CCPA/CPRA (California): 45 days
- GDPR (EU/UK): 30 days
- PIPEDA (Canada): 30 days
9. Data Security and Retention
9.1 Security Measures
Technical Security Controls:
- Industry-standard encryption for data at rest and in transit
- Multi-factor authentication and role-based access controls
- Network security including firewalls and intrusion detection
- Regular security updates and vulnerability scanning
9.2 Data Retention Schedules
| Data Type | Retention Period |
|---|---|
| Account Information | Active account + 30 days post-closure |
| Creator Content | Active account + 90 days post-termination |
| Biometric Information | Active account + 90 days (Illinois: 3 years max) |
| Conversation Data | Active subscription + 90 days post-termination |
| Financial Records | 7 years from transaction date |
9.3 Data Breach Notification
In the event of a data breach:
- We will contain and mitigate the breach within 72 hours
- Notify supervisory authority if EU/UK data affected (per GDPR Article 33)
- Notify affected users via email without unreasonable delay
10. International Data Transfers
Your personal information is primarily stored and processed in the United States. Our service providers may also process your data globally.
For EU/EEA/UK Users: We transfer data to service providers in the US and other countries with appropriate safeguards including Standard Contractual Clauses.
11. Children's Privacy
Minimum Age Requirement: 18 years old (or age of majority in your jurisdiction, whichever is higher)
We do not knowingly collect, use, or disclose information from individuals under 18 years of age. If we discover a user is under 18, we will immediately delete their account and all associated data.
12. Policy Updates and Contact Information
12.1 Modifications
We may modify this Privacy Policy at any time. For material changes, we will provide at least 14 days advance notice via email and platform notification.
12.2 Contact Information
Soqratic Studios, Inc.
Email: legal@soqratic.com
Mailing Address:
Soqratic Studios, Inc.
4564 NE 83rd Ave.
Portland, OR 97220
United States
Website: https://www.soqratic.com
12.3 Regulatory Authority Contacts
- United States: Federal Trade Commission
- California: California Attorney General
- Canada: Office of the Privacy Commissioner
- United Kingdom: Information Commissioner's Office
- European Union: Find your supervisory authority
Questions? Contact legal@soqratic.com