Privacy Policy
Introduction
Sona AI ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Sona Video Generator service ("Service"). By using our Service, you consent to the data practices described in this policy.
1. Information We Collect
1.1 Personal Information
We collect minimal personal information necessary to provide our service:
- Uploaded Images: Images you upload for video generation (processed and stored by Sona)
- Text Prompts: Descriptions you provide for video generation
- Technical Data: IP address, browser type, device information, and usage patterns
- Analytics Data: Information about how you interact with our service
1.2 Payment Information
Payment processing is handled entirely by Stripe, a third-party payment processor. We do not collect, store, or process any payment information directly. When you make a payment:
- You provide your email address and payment details directly to Stripe
- Stripe processes the payment and provides us with a transaction confirmation
- We receive only the email address associated with the payment for service delivery
- We do not have access to your payment card details or billing information
1.3 How We Collect Information
We collect information through:
- Direct interactions: When you upload content, submit prompts, or contact us
- Automated technologies: Cookies, server logs, and analytics tools
- Third parties: Stripe (payment processing) and analytics providers
2. How We Use Your Information
2.1 Primary Uses
We use your information to:
- Process and store uploaded images for video generation
- Send your prompts and images to Novita API for video generation
- Provide you with access to generated videos (stored by Novita)
- Deliver video access links to your email address
- Provide customer support and respond to inquiries
- Analyze service usage to enhance user experience
- Ensure service security and prevent abuse
2.2 Legal Basis for Processing
We process your personal data based on:
- Contract performance: To provide the video generation services you requested
- Legitimate interests: To improve our service and prevent fraud
- Consent: For optional analytics and service improvements
- Legal obligations: To comply with applicable laws and regulations
3. Information Sharing and Disclosure
3.1 When We Share Information
We may share your information in the following circumstances:
- Stripe: We share your email address with Stripe for payment processing and service delivery
- External Video Service: We share your text prompts and uploaded images with our external video generation service
- Service providers: With trusted third parties who help us operate the Service (analytics, hosting)
- Legal requirements: When required by law or to protect our rights
- Business transfers: In connection with a merger, acquisition, or sale of assets
- With your consent: When you explicitly authorize us to share information
3.2 Payment Processing
Payment processing is handled by Stripe, a PCI DSS compliant payment processor. When you make a payment:
- Your payment information is processed directly by Stripe
- We receive only confirmation of successful payment and your email address
- We do not store or have access to your payment card details
- Stripe's privacy policy governs how they handle your payment information
3.3 Video Generation Processing
Video generation is handled by our external video service, a third-party AI video generation provider. When you request video generation:
- Your text prompts and uploaded images are sent to our external video generation service for processing
- The external service generates the video and stores it on their servers
- Generated videos are available for download for one hour after generation
- We provide you with access links to download your generated videos
- The external service's privacy policy governs how they handle your content and generated videos
3.4 Data Protection
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
4. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law:
- Uploaded images: Stored by Sona for video generation and retained for 30 days
- Text prompts: Used for video generation and retained for 30 days for quality improvement
- Generated videos: Stored by our external video generation service and available for download for one hour after generation
- Email addresses: Retained only for the duration of service delivery and customer support
- Technical data: Retained for security and analytics purposes for up to 12 months
5. Your Rights and Choices
5.1 Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your personal data
- Portability: Receive your data in a structured, machine-readable format
- Objection: Object to processing of your personal data
- Restriction: Limit how we process your data
5.2 Data Management
Since we don't create user accounts, you can exercise your rights by contacting us directly. We will respond to your requests within the timeframe required by applicable law.
5.3 Communication Preferences
We only use your email address to deliver completed videos and provide customer support. We do not send marketing communications unless you explicitly opt in.
6. Cookies and Tracking Technologies
6.1 Types of Cookies
We use various types of cookies and tracking technologies:
- Essential cookies: Required for basic service functionality
- Analytics cookies: Help us understand how users interact with our service
- Functional cookies: Remember your preferences and settings
- Marketing cookies: Used for advertising and marketing purposes
6.2 Cookie Management
You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our Service.
7. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.
8. Children's Privacy
Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
9. Third-Party Services
Our Service integrates with third-party services to provide video generation capabilities. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before using our service.
9.1 External Video Generation Service
Video generation is powered by our external video service. When you use our service:
- Your text prompts and uploaded images are sent to our external video generation service for processing
- The external service generates and stores the videos on their servers
- Videos are available for download for one hour after generation
- The external service's privacy policy and terms of service apply to their processing of your content
9.2 Stripe
Payment processing is handled by Stripe. Your payment information is processed directly by Stripe and is subject to Stripe's privacy policy and terms of service.
10. Data Breaches
In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law. We will take immediate steps to contain and remediate any security incident.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of the Service after such changes constitutes acceptance of the updated policy.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Email: chrisok.dev@gmail.com
13. Regional Privacy Rights
13.1 California Privacy Rights (CCPA)
California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and how it is used.
13.2 European Privacy Rights (GDPR)
European users have rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to be forgotten.
14. Last Updated
This Privacy Policy was last updated on August 1, 2025.