Privacy & data protection

We collect information that you provide directly to us, such as when you create an account, use our services, or contact us for support. This may include your name, email address, and content you upload or generate — including chat messages, documents, images, Academic Hub materials, and Career Agent data (such as resumes, career profiles, job search objectives, discovered opportunities, application drafts, and saved jobs). When paid billing is live, payment details are processed by our payment provider (we do not store full card numbers). We also automatically collect certain device and usage information, including IP address, browser type, operating system, and usage patterns.

• Account information: name, email address, password (encrypted), and profile settings
• Usage data: how you interact with our services, features used, and time spent
• Content data: chats, uploads, generated outputs, tool drafts, and Career Agent resumes/applications
• Device information: IP address, browser type, device identifiers, and operating system
• Cookies and tracking: as described in our Cookie Policy

We use the information we collect to provide, maintain, and improve our services, process requests, send technical notices and support messages, and respond to your questions. We also use this information to personalize your experience, analyze usage patterns (including via Vercel Analytics when you allow it), detect and prevent fraud, and comply with legal obligations. We do not sell your personal information.

• Service delivery: providing AI tools, Agents, Career workflows, processing requests, and maintaining your account
• Communication: sending updates, support messages, and important service notifications
• Improvement: analyzing usage (including analytics) to improve our services and develop new features
• Security: detecting and preventing fraud, abuse, and security threats
• Legal compliance: meeting legal obligations and responding to legal requests

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Data in transit is protected with HTTPS/TLS via our hosting providers. Account data and files are stored in private, account-scoped storage operated by our infrastructure providers. We review and improve security practices as part of ongoing operations.

• Encryption in transit: HTTPS/TLS for connections to our services
• Access controls: Authentication and least-privilege access to production systems
• Abuse prevention: Rate limits, reCAPTCHA on auth forms, and monitoring for abuse
• Incident response: We investigate and remediate security issues as they are identified
• Providers: Hosting and storage providers apply their own encryption and security controls at rest

We do not sell your personal information. We share information with service providers (subprocessors) who help us operate the platform. The current list appears in the “Who helps us run SoroNow” section on this page and typically includes Supabase, OpenRouter, Jina AI and job listing providers (Career Agent), Runway, fal.ai, Redis/Upstash, Resend, Google reCAPTCHA, Google Cloud, Vercel, and Sentry when configured. Content you submit may be sent to AI or discovery providers solely to fulfill your request (for example, OpenRouter for generation, or Jina/job APIs for Career searches). We may also share information with your consent, to comply with law, to protect our rights and safety, or in connection with a business transfer.

• Service providers / subprocessors: Named providers listed on this Privacy page
• Legal requirements: When required by law, court order, or government request
• Business transfers: In connection with mergers, acquisitions, or asset sales
• Protection: To protect our rights, property, or safety, or that of our users
• With consent: When you explicitly consent to sharing your information

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. My Files follow plan retention windows (Free 30 days, Pro Lite 90 days, Pro Plus 180 days), then become eligible for deletion and are removed by periodic cleanup when it is running. Chat, tool drafts, and Career Agent profiles/applications are kept while your account is active unless you delete them or delete your account. Career Agent saved jobs and recent runs are each kept for 180 days after you save/start them (or until you remove them); related application packs are removed with the saved job. When you delete your account from Settings, we delete associated personal information (including Career Agent materials) within a reasonable period, except where we must retain limited records for legal, security, or legitimate business purposes.

• Account data: Retained while your account is active; deleted or anonymized after account deletion subject to limited legal retention
• Usage data: Aggregated and anonymized data may be retained for analytics
• Legal requirements: Some data may be retained longer to comply with legal obligations
• My Files: Eligible for deletion after plan retention windows (30 / 90 / 180 days); removed by periodic cleanup when running

You have the right to access, update, or delete your personal information. You can delete your account in Settings, update profile details there, and opt out of certain communications. Settings export currently downloads local browser preferences only. For a broader data export (chats, files, Career Agent data, and other account content we hold), email info@soronow.com — we aim to fulfill verified requests within 30 days.

• Access: Request a copy of your personal information we hold
• Correction: Update or correct inaccurate information
• Deletion: Delete your account in Settings or request deletion by email
• Portability: Email info@soronow.com for account/content data (aim: within 30 days); Settings downloads local preferences only
• Opt-out: Email us to stop any non-essential messages (no automated newsletter list today)
• Objection: Object to certain processing activities

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

• Safeguards: Standard contractual clauses and other legal mechanisms
• Compliance: Compliance with GDPR, CCPA, and other applicable regulations
• Transparency: Clear information about where your data is processed

Our services are not intended for children under the age of 13 (or 16 in the EU). We do not knowingly collect personal information from children under these ages. If you believe we have collected information from a child, please contact us immediately at info@soronow.com and we will take steps to delete such information.

• Age requirement: Services are for users 13+ (16+ in EU)
• No collection: We do not knowingly collect data from children
• Immediate action: Contact us if you believe we have collected child data

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new policy on this page, updating the 'Last Updated' date, and, where appropriate, sending you an email notification. We encourage you to review this policy periodically.

• Notification: We'll notify you of material changes via email or in-app notification
• Review: Last updated date shown at the top of this policy
• Continued use: Continued use after changes constitutes acceptance