Legal

Privacy Policy

Last updated: July 15, 2026 · Effective immediately

Information We Collect

Account Information

When you create an account, we collect your name, email address, company name, and password. If you sign in via Google OAuth, we receive your name and email from Google.

Usage Data

We automatically collect information about how you interact with our platform, including pages visited, features used, and the time and date of your visits.

Customer Conversations

When your customers interact with the AI widget on your website, we store conversation history, visitor identifiers, and any personal information voluntarily shared by your customers (such as name, email, or phone number during lead capture).

How We Use Your Information

To provide, maintain, and improve the Sinora AI platform
To process and store conversations between your AI assistant and your customers
To send administrative emails (account updates, billing notifications, security alerts)
To analyze usage patterns and improve our machine learning models
To comply with legal obligations and enforce our terms of service

Data Storage & Security

Your data is stored on secure servers with encryption at rest and in transit. We use industry-standard security practices including:

AES-256 encryption for data at rest
TLS 1.3 for data in transit
Regular security audits and penetration testing
Role-based access controls and multi-factor authentication
Automated backup and disaster recovery procedures

Data Retention

We retain your account information for as long as your account is active. Conversation data is retained according to your workspace data retention settings. Upon account deletion, all personally identifiable information is permanently removed within 30 days.

Third-Party Services

AI Providers

OpenAI, Anthropic, Google (Gemini), and DeepSeek for AI model inference. Your knowledge base content and customer messages may be transmitted to these providers for processing.

Email Delivery

Resend for transactional email delivery.

Infrastructure

DigitalOcean for cloud infrastructure and database hosting.

Your Rights

You have the right to access, correct, or delete your personal data; export your data in a machine-readable format; object to or restrict certain processing activities; and withdraw consent at any time.

To exercise these rights, contact us at privacy@sinorai.com.

Questions about this policy?

Email us at privacy@sinorai.com