Privacy Policy

Introduction

Sotori Ltd. (“Sotori”, “we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, share, and safeguard personal data when you use our website, applications, APIs, and services (collectively, the “Services”).

Eligibility

Our Services are intended only for individuals aged 18 years or older. We do not knowingly collect personal data from individuals under 18. If we become aware that personal data has been collected from a minor, we will take appropriate steps to delete such data.

Data We Collect

We may collect the following categories of information:

• Information you provide directly: Name, email, account data, uploaded content, and communications
• Automatically collected data: IP address, device information, usage logs, and analytics data
• Information from third parties: Data from payment processors or enterprise customers

How We Use Data

We use personal data for the following purposes:

• •Provide and operate the Services
• •Authenticate users and process payments
• •Improve functionality and user experience
• •Ensure security and prevent fraud or abuse
• •Comply with legal obligations
• •Communicate with users about updates and features
• •Develop or improve our AI technologies

Lawful Bases for Processing

We process personal data on the basis of contractual necessity, legitimate interests, consent where required, and legal obligations under applicable data protection laws including UK GDPR and EU GDPR.

AI & Model Processing

By default, Sotori does not use user content to train machine learning models without permission. We may use anonymised or aggregated data to improve performance, safety, and reliability.

Enterprise customers may request full data isolation to ensure their data is never used for model training or improvement purposes.

Sharing of Data

We do not sell personal data. We may share information with:

• •Cloud service providers and infrastructure partners
• •Analytics services for usage insights
• •Payment processors for billing purposes
• •Professional advisors (lawyers, accountants)
• •Legal authorities where required by law

All vendors are required to meet appropriate security and data protection standards.

International Transfers

Personal data may be processed in the United Kingdom, European Union, United States, or other jurisdictions. We rely on appropriate safeguards such as Standard Contractual Clauses and adequacy decisions where required under applicable data protection laws.

Security

Sotori implements technical and organisational security measures including:

• •Encryption in transit and at rest
• •Access controls and authentication
• •Monitoring and incident response procedures
• •Regular security testing and audits

While we strive to protect data, no system is completely secure. You are responsible for maintaining the confidentiality of your account credentials.

Data Retention

We retain personal data only for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary depending on the nature of the data and applicable legal requirements.

Your Rights

Depending on your jurisdiction, you may have rights to:

• •Access your personal data
• •Correct or update inaccurate data
• •Delete your personal data
• •Restrict or object to processing
• •Request data portability
• •Withdraw consent (where applicable)

To exercise these rights, please contact us at privacy@sotori.ai

Cookies & Tracking Technologies

We use cookies and similar technologies to provide functionality, analytics, and security. Users can control cookies via browser settings. For more information about the cookies we use and how to manage them, please refer to our Cookie Policy.

Third-Party Services

Our Services may integrate with third-party tools or contain links to external websites. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you interact with.

Security Incidents

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will investigate promptly and notify affected users and relevant regulators where required by law.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or operational needs. We will notify you of material changes by posting the updated policy on our website with a new “Last Updated” date. Continued use of the Services after such changes constitutes acceptance of the updated policy.

Contact Us

For privacy questions, requests, or concerns, please contact us at: