Privacy Policy
SoNoted (“we,” “us,” or “our”) operates the marketing site at sonoted.ai. This policy explains what information we collect, how we use it, and your rights regarding that information.
What we collect
We collect only what is necessary to operate this site.
- Email address. When you submit the early access form, we store your email address on our waitlist. We use it to contact you about early access and product updates. We do not send marketing email to anyone who has not opted in.
- IP address. Your IP address is used to enforce rate limits on form submissions (maximum 3 per hour per IP). It is held in memory for up to one hour and is never written to a database or log file.
We do not use cookies, tracking pixels, browser fingerprinting, or third-party analytics on this site.
Sub-processors
We rely on the following third parties to operate this site:
- Resend (resend.com) — transactional email delivery. Your email address is transmitted to Resend when you join the waitlist. Resend’s privacy policy is available at resend.com/legal/privacy-policy.
- Railway (railway.app) — cloud hosting and infrastructure. All server-side processing occurs on Railway. Railway’s privacy policy is available at railway.app/legal/privacy.
How we use your information
- To notify you when early access is available
- To send occasional product updates (you can unsubscribe at any time)
- To prevent abuse of our invite form
We do not sell, rent, or share your personal information with any third party for their own marketing purposes.
Data retention
We retain waitlist email addresses until you request deletion or until the waitlist is no longer active. IP addresses used for rate limiting are held in memory for up to one hour and are never persisted.
Your rights under CCPA (California residents)
If you are a California resident, the California Consumer Privacy Act (CCPA) gives you specific rights regarding your personal information.
- Right to know. You may request a copy of the personal information we have collected about you.
- Right to delete. You may request that we delete your personal information. We will honor deletion requests within 45 days.
- Right to opt out of sale. We do not sell personal information. There is nothing to opt out of.
- Right to non-discrimination. We will not discriminate against you for exercising any of these rights.
Your rights under GDPR (EEA and UK residents)
If you are located in the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR) gives you additional rights.
Lawful basis. We process your email address on the basis of your consent, given when you submit the early access form. You may withdraw consent at any time by contacting us.
You have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data (“right to be forgotten”)
- Restrict or object to our processing
- Data portability — receive your data in a machine-readable format
International transfers. Our infrastructure is hosted in the United States. If you are located in the EEA or UK, your data is transferred to and processed in the US. We rely on Standard Contractual Clauses where required.
You have the right to lodge a complaint with your local data protection authority.
Children
This site is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have done so, contact us and we will delete it promptly.
Changes to this policy
We may update this policy as the product evolves. Material changes will be noted by updating the effective date above. We will not retroactively weaken privacy protections without notice.
Contact
To exercise any of your rights or to ask questions about this policy, contact us at [email protected].