Privacy Policy
Last updated: July 29, 2026
Sonara (“we”, “us”) builds and hosts a website for your business. This explains what we collect, why, and what you can do about it. Short version: we keep what we need to build your site and keep it running, we never sell your data or use it to train AI models, and you can ask us to delete all of it.
1. What we collect
- Your email address. It’s how we identify your account. If you sign in through an account you already have elsewhere rather than with a code, we receive the email address and basic profile details it shares with us.
- What you tell Sonara. The messages you send, and the files you upload — logos, photos, anything you want on your site.
- What we read from the links you paste. To write your first draft we fetch the pages you point us at — your website, your business listings, your social profiles — and take the business details on them: name, address, hours, photos, reviews, descriptions. These are public pages; we only read the ones you give us.
- Your site. Its pages, copy, design, and the images we generate for it.
- What your site collects from its visitors. If your site has an enquiry form, a booking or a sign-up, what visitors submit through it — names, email addresses, phone numbers, messages. We store this in a database we run for you, on your behalf. See section 3.
- Payment details. Payments are handled by our payment processor — we never see or store your card number. If you buy a domain through us, checkout also collects the name, email address, phone number and postal address that ICANN requires for a registration.
- Usage and technical data. Your credit balance and what you’ve spent it on, which parts of the app you use, and server and error logs.
2. How we use it
To build and run your site, and nothing else. Your conversation is what lets Sonara remember what your business is and keep editing the site as you ask for changes. Your files and the site we generate are stored so the site can be served and picked back up later. Usage and error data tell us what’s broken and what people find confusing.
We do not sell your personal data, we don’t share it for advertising, and we do not use your content, or the data your site collects, to train AI models.
3. Your site and the data it collects
Your site is live on the public web at its own address, and on any domain you connect, so anything you put on a page can be seen by anyone.
What your visitors submit through it belongs to you. We store and process it on your behalf so the forms work and you can read the submissions. Because it’s your data and your relationship with your visitors, you decide what to collect and how to use it, and it’s on you to tell visitors how their information is handled and to get any consent the law requires. Our Terms of Service spell that out.
4. Analytics and advertising
We use a product analytics tool to understand how Sonara is used. It knows your account by an internal id, not by your email address, and it never receives your site’s content or your conversation.
The websites we build for you count their own visits, so you can see how many people came and which pages they read. To tell someone coming back from someone new, it stores a small random id in the visitor’s browser. It sets no cookies, records nothing a visitor does on the page, and never sees what they type into a form. Your own visits from the studio are not counted. As above, the site is yours — what your visitors are told about this, and any consent your area requires, is your call as its owner. Email us if you would rather it were off.
Our marketing pages and the sign-up step also load a measurement tag from the ad platform we advertise on, which tells that platform a visit or a sign-up happened so we can tell which ads work. If you’d rather not be measured that way, you can block it with your browser’s tracking protection or an ad blocker, or change your ad settings with that platform — the product works exactly the same either way.
The rest of our cookies are the ones that keep you signed in. There’s no way to turn those off and still have an account.
5. Who we share it with
A small set of providers process data on our behalf, only as needed to run the service:
- AI providers — to understand what you ask for and generate your site, its copy and its images, along with the tooling we use to monitor those calls.
- Cloud database, storage and sign-in — your account, your conversation and your files.
- Hosting and DNS — to build, publish and serve your site and connect your domain. Some of this runs on our own servers.
- Payments — to take payment, and a domain registrar if you buy a domain, which receives the registrant details ICANN requires.
- Email delivery — to send your sign-in codes and the notices about your sites.
- Analytics, advertising and error monitoring — as described above. We also request your profile picture from a public avatar service using a one-way hash of your email address; the address itself is never sent.
Your data is stored and processed in the United States and wherever these providers operate. We may also disclose information if the law requires it, or to protect the safety and rights of our customers and the service.
6. How long we keep it
We keep your conversation, your site and the data your site has collected while your account is open, because that’s what keeps the service and your live site working. Deleting a site removes it from the web along with the data it had collected. When you ask us to delete your account, we remove your data from our systems and tell our providers to do the same, except where we’re legally required to keep something (a payment record, for example).
7. Your choices
- Delete a site: from your dashboard, at any time. It’s permanent — export anything you want to keep first.
- Delete your account: email [email protected] from your account’s address and we’ll delete your account, your sites and their data.
- See or correct what we hold: ask at the same address.
Depending on where you live you may have additional rights under privacy laws such as the CCPA; we honour verified requests consistent with applicable law. If you’re a visitor to a site built with Sonara and want to reach the data you submitted there, contact the owner of that site — they control it, and we’ll help them respond.
8. Security
We limit who can reach your data and our production systems, and protect it with standard safeguards in transit and at rest. No system is perfectly secure, but we take this seriously and work to keep yours safe.
9. Children
Sonara is for businesses and isn’t directed to children. We don’t knowingly collect data from anyone under 13; if you believe a child has used the service, tell us and we’ll delete it.
10. Changes
If we change this policy materially, we’ll tell you — by email or a notice in the app — before the change takes effect.
11. Contact
Questions, requests or concerns? Email [email protected].