Privacy Policy

Soren Technology LLC · Last updated: October 24, 2026

1. Introduction

This Privacy Policy explains how Soren Technology LLC (“Soren,” “we,” “us”), a Wyoming limited liability company, collects, uses, discloses, and protects personal information in connection with the Soren platform and services (the “Service”).

Two important roles to understand:

• When we handle information about our own customers (the photography/event studios who subscribe to Soren) and visitors to our website, Soren is the controller of that information, and this Policy governs.
• When studios use Soren to manage information about their own clients (couples and end clients), the studio is the controller and Soren is the processor / service provider, acting on the studio’s instructions. Our handling of that data is governed by our Data Processing Agreement with the studio, and by the studio’s own privacy policy. If you are an end client (a couple) and have questions about how your data is used, please contact the studio you are working with.

This Policy applies to studios, website visitors, and prospective customers.

2. Information We Collect

Information you provide (as a studio/customer or prospect):

• Account and profile information: name, business name, email, phone, password, billing address.
• Payment information: processed by our payment processor (Stripe); we do not store full card numbers.
• Business and brand information: logo, brand assets, and business details you configure.
• Communications: messages you send us (support, sales).
• Content you submit: contracts, templates, settings, and other customer data.

Information collected automatically:

• Usage data: features used, actions taken, timestamps, pages viewed.
• Device and technical data: IP address, browser type, device identifiers, operating system.
• Cookies and similar technologies (see Section 7).
• For our mobile app: push notification tokens and device identifiers necessary to deliver notifications.

Information from third parties:

• Payment and fraud information from Stripe.
• Data from integrations you connect (such as email or calendar), only as you authorize.
• Marketing and analytics providers.

End-client (couple) information. Studios input personal information about their clients (names, contact details, event details, payment records, communications). Soren processes this as a processor on the studio’s behalf. Soren does not decide the purposes of processing end-client data; the studio does.

3. How We Use Information

As controller of studio, prospect, and website-visitor data, we use it to:

• Provide, operate, maintain, and secure the Service;
• Process subscriptions, billing, and payments;
• Authenticate users and manage accounts;
• Communicate with you (service messages, support, and — with consent where required — marketing);
• Improve and develop the Service, including analytics and troubleshooting;
• Detect, prevent, and address fraud, abuse, and security issues;
• Comply with legal obligations and enforce our Terms.

Artificial intelligence and machine learning. Soren offers AI-powered features. We will not use identifiable customer data or end-client personal information to train, develop, or improve artificial intelligence or machine-learning models for purposes beyond providing the Service to that customer, without separate, documented consent. Where we use data to improve our features, we do so using aggregated and/or de-identified information that is not used to identify any individual.

4. How We Share Information

We do not sell personal information.

We share information with:

• Service providers / subprocessors who help us operate (hosting, payments, communications, analytics), bound by contract to protect the data.
• Payment processor (Stripe) to process transactions.
• As required by law, legal process, or to protect rights, safety, and security.
• Business transfers: in a merger, acquisition, or sale of assets, subject to this Policy.
• With your direction or consent, such as integrations you enable.

We do not share end-client data except as needed to provide the Service to the studio and as governed by our Data Processing Agreement.

5. Your Privacy Rights

US State Privacy Rights. Depending on your state of residence, you may have rights to know or access the personal information we hold about you, delete it, correct it, opt out of the “sale” or “sharing” of personal information and certain targeted advertising, and not be discriminated against for exercising your rights. If you are an end client (a couple), please direct requests to the studio you work with, as they control that data; Soren will assist the studio as required.

GDPR / UK rights (where applicable). Access, rectification, erasure, restriction, portability, objection, the right to withdraw consent, and the right to lodge a complaint with a supervisory authority.

How to exercise rights. Contact us at team@sorenapp.io. We will verify your identity and respond within the timeframe required by law.

Marketing opt-out. You may opt out of marketing emails via the unsubscribe link or by contacting us. Service and transactional messages are not marketing.

6. Data Retention

We retain personal information as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Customer data is retained per your subscription and our Data Processing Agreement; after termination, we make it available for export for a limited period, then delete or de-identify it per our retention schedule. Payment and financial records may be retained longer where required by law.

7. Cookies and Tracking

We use cookies and similar technologies for authentication, preferences, security, and analytics. You can control cookies via your browser settings; disabling some may affect functionality.

8. Security

We implement technical and organizational measures designed to protect personal information, including encryption in transit, access controls, tenant isolation, and signed, expiring URLs for private media. No system is perfectly secure; we cannot guarantee absolute security. In the event of a data breach affecting personal information, we will notify affected parties and authorities as required by law.

9. Google Calendar Integration

If you choose to connect Google Calendar, Soren asks Google for two permissions.

• Adding your Soren events to your calendar. The first permission lets Soren add your studio calls and weddings to your Google Calendar and keep them up to date. Soren creates, updates and removes only the events it created itself, each marked as a Soren event, and never reads, changes or deletes any other event on your calendar.
• Checking your busy and free times. The second permission lets Soren check your busy and free times, and it is used for one purpose only: when a client call is being booked with you, Soren skips time slots that overlap something already on your calendar so you are not double-booked. Soren never learns what those other events are, never shows your busy times to anyone, and never stores busy or free information.

What we store. The email address of the connected Google account, an encrypted token that lets Soren keep your Soren events up to date, and the identifiers of the events Soren created. We do not store the contents of any other event on your calendar, and we do not store busy or free information.

How we use this data. Soren accesses your Google Calendar solely to provide the two features described above. We do not use your Google Calendar data for advertising, we do not sell it, we do not use it to train AI or machine-learning models, and no person at Soren reads it except to resolve a support request you raise.

Limited Use. Soren’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Artificial intelligence and machine learning. Soren does not use, transfer or sell Google user data, whether raw, aggregated, anonymized or derived, to create, train or improve any artificial-intelligence or machine-learning model, ours or anyone else’s. Google user data received through Soren’s Google Calendar integration is never sent to an AI provider. The one exception is Soren’s Gmail import. Lead emails that Soren imports from a studio’s connected Gmail inbox may be sent to Anthropic’s API only to help that studio work the lead: drafting its replies, the in-app assistant and Ask Soren. They are never used to train or improve any model, ours or anyone else’s. Anthropic deletes API inputs and outputs within 30 days, except data it must keep longer to enforce its usage policy or to comply with the law. Soren’s AI features (the in-app assistant, Ask Soren and the website help chat) run on Anthropic’s Claude API, and they are never given the connected Google account’s email or identifier, your busy and free times, or any calendar event data. Call transcription, provided by Twilio, never receives Google user data either.

Disconnecting. You can disconnect at any time from Settings → Google Calendar in the Soren app, or revoke Soren’s access in your Google Account permissions at myaccount.google.com/permissions. Disconnecting deletes the token immediately and lets you choose whether the Soren events still ahead on your calendar are removed.

10. International Data Transfers

The Service is operated from the United States. If you access the Service from outside the United States, you understand your information will be processed in the United States.

11. Children’s Privacy

The Service is intended for business users 18 and older and is not directed to children. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Policy. We will post the updated version with a new “Last Updated” date and, for material changes, provide additional notice. Continued use after changes constitutes acceptance where permitted by law.

13. Contact Us

Soren Technology LLC
Email: team@sorenapp.io
Website: https://sorenapp.io