PRIVACY POLICY FOR SODA AI
1. Introduction
Welcome to Soda AI, an interactive AI platform where you engage in conversations with customizable AI characters. This Privacy Policy explains how we collect, use, and protect your data. By using Soda AI, you consent to these practices.
2. Information We Collect
- a) Personal Data (Voluntary):
- Account Information: Email, username, profile picture (if registered).
- Character Preferences: Selected AI personas, conversation styles, and customization settings.
- b) Automatically Collected Data:
- Conversation Data: All text inputs/outputs, timestamps, and character interactions.
- Technical Data:
- Device information (OS, model, IP address)
- Usage logs (session duration, features used)
- Cookies/analytics identifiers (e.g., Firebase, Google Analytics)
- c) Anonymized Data: Aggregated chat patterns used exclusively for AI model training (non-identifiable).
3. How We Use Your Data
| Purpose |
Legal Basis |
| Deliver & personalize conversations |
Performance of contract |
| Train AI models (anonymized only) |
Legitimate interest |
| Respond to support requests |
Consent |
| Prevent fraud/security issues |
Legal obligation |
| Send updates (opt-in required) |
Consent |
4. Data Sharing
We do not sell your data or chat history. Limited sharing occurs with:
- Service Providers: Secure cloud hosts (AWS), analytics tools, and customer support systems.
- Legal Authorities: If required by law (e.g., court order).
- Anonymous Research: Non-identifiable data for academic/AI improvement purposes.
5. Data Security
- Encryption: All data in transit (TLS 1.2+) and at rest (AES-256).
- Access Controls: Strict employee permissions and audit logs.
- Breach Protocol: 72-hour notification for high-risk incidents.
6. Data Retention
- Account Data: Retained until deletion request.
- Chat Logs: Deleted after 30 days (anonymized excerpts may be retained for training).
- Technical Logs: Deleted after 90 days.
7. Your Rights
- Access, correct, or delete personal data via [Settings > Account].
- Export chat history (JSON/PDF format).
- Opt out of marketing emails (unsubscribe link in all emails).
- Withdraw consent (contact: privacy@novanest.com).
- We respond to requests within 30 days.
8. Children’s Privacy
Soda AI is not for users under 13. We immediately delete accounts if underage usage is detected.
9. International Transfers
Data processed in Singapore (our HQ) and via GDPR-compliant providers (e.g., EU-U.S. DPF frameworks).
10. Changes to This Policy
Updates will be notified via in-app alerts or email. Continued use implies acceptance.