Privacy Policy

Last updated: October 17, 2026

This Privacy Policy explains how Agent Sonic collects, uses, and protects information when you interact with our assistant over WhatsApp or the Agent Sonic mobile app (iOS and Android), and when you visit our website. The data controller is Agent Sonic, Tel Aviv, Israel("we", "us", "our"). For any privacy question, contact us at tryagentsonic@gmail.com.

Information we collect

Chat messages & metadata (WhatsApp or the app) — the content of messages you send to the assistant, your phone number, display name, and message timestamps, so we can understand and respond to you.
Mobile app data — when you sign in to the app: your phone number, and when you sign up, your name and email; the one-time sign-in code (kept only until it is used or expires); and which platform the app runs on (iOS or Android). Your signed-in session is kept as a token in your device's secure storage (the iOS Keychain or Android Keystore), together with your language choice; signing out removes the token. The app uses your camera, photo library or microphone only when you choose to send a photo, a document or a voice message, and asks your permission first. It uses your location only as described under "Location" below, and your contacts only as described under "Contacts" below. It does not use advertising identifiers, and does not track you across other apps or websites.
Location (app only, only with your permission) — the app asks for your permission before it ever reads your location (in onboarding, or when you turn on Settings → Location), and only while the app is open on your screen; it never reads your location in the background, and nothing is collected over WhatsApp. With your permission, while the app is open, it sends your device's approximate position and the place name your phone gives for it (such as a street and city) about every 10 minutes, so the assistant can use it when it helps — suggestions nearby, the right time when you travel, follow-ups tied to a place. We keep only your latest location, in temporary server memory: it is never written to our database, is replaced by the next one, and is discarded after 12 hours, when you turn the setting off, or when you delete your data. We do not keep a history of where you have been. Separately, if you choose "Share my location" in a chat, the location is put into your message for you to review, and once you send it, it is kept like any other message in your conversation. You can turn location off at any time in the app's Settings or in your phone's settings.
Contacts (app only, only when you choose) — the app reads your phone's contacts only after you allow it, and only in two ways you start yourself. If you share a contact in a chat, that one contact's name and numbers are saved like any contact you share with the assistant. If you turn on Settings → Sync my contacts, the app sends your address book (names, phone numbers, email addresses and company) and refreshes it at most once a day while the app is open, so the assistant knows who you mean when you name someone ("call Dana"). We use your contacts only to answer you: they are never used to message or market to the people in them, never shared with other users, and never sold. When you name someone, the matching contact may be included in the request to our AI providers (see "AI and machine learning"). Turning the switch off deletes the synced address book from our servers, as does deleting your data.
App session recordings (app only) — so we can find and fix problems in the app and see where it is hard to use, the app records how it is used while it is open on your screen: small screenshots of what the screen shows (taken when something changes, about every second or two while you use it — including your conversations as they appear in the app), where you tap or swipe, which screen you are on, and when the app goes to the background. Recording starts when the app opens, including on the sign-in screen, and is linked to your account once you sign in. Screens that show a sign-in code or an email password are never recorded, and nothing is recorded while the app is closed, in the background or left untouched. Recordings are kept in private file storage and are deleted automatically 45 days after they were made, or sooner if you ask us to delete your data.
Voice notes — if you send a voice message, its audio is transcribed to text so it flows through the same pipeline as a typed message, and replies may be sent back as spoken audio. We keep the transcript as part of your conversation; the audio itself is not stored.
Images & documents — photos and files you send for analysis, and, if you ask the assistant to create or edit an image, the prompt and any source photo used. Photos and documents you send (in the app, or ones the assistant reads on WhatsApp), and the ones the assistant sends you, are kept in private file storage as part of your conversation history, so you can see them later and ask the assistant to send one again on WhatsApp or in the app. Each file is deleted automatically 45 days after it was last sent (the messages' text stays), or sooner if you ask us to delete your data.
Conversation context — recent message history, a durable "memory" note the assistant maintains for your chat, any reminders you schedule, and contacts you share with the assistant.
Group messages — where the assistant is a member of a WhatsApp group, it receives and keeps a record of every message posted in that group from the moment it joins — the sender's name and number, the text, any media caption and the time — whether or not the message was addressed to it, together with a per-group memory note and the group's shared lists, polls, expenses, income & expense book and scheduled messages. Media files themselves are not stored. See "WhatsApp groups" below. In a group made in the Agent Sonic app, the same record holds every message posted there, including the photos and documents shared, and the group's members, its invites and the reports and blocks made in it; see "Groups in the Agent Sonic app" below.
Outreach to third parties — if a user asks the assistant to contact another person on their behalf, we process that person's phone number, name, and the resulting conversation in order to carry out the request (see "Messaging third parties" below).
Google account data (only if you connect) — when you connect your Google account on Google's consent screen, we receive your Google account's email address and profile photo and an access grant (an OAuth refresh token, stored encrypted, and the list of permissions you granted), and the assistant reads — and, when you ask, changes — your Google Calendar, Sheets, Docs and Forms (including the responses submitted to your forms) on your behalf. We never see your Google password. See "Google user data" below for exactly what we access, how we use, share, protect and delete it.
Email (only if you connect Gmail or Outlook) — when you connect your Gmail with a Google app password, or your Outlook mailbox (Outlook.com, Hotmail, Live or Microsoft 365) by signing in with Microsoft, the assistant searches and reads your email when you ask it to, and sends the emails you confirm, from your own address. We store only your email address and the encrypted app password or Microsoft access grant (an OAuth refresh token for the permissions you approve: your account's basic profile, reading and sending your mail), not copies of your email. With Outlook we also keep your Microsoft account's profile photo, if it has one, as your picture in the Agent Sonic app unless you set your own; it is removed when you disconnect Outlook or delete your account. Email is used in your private chat only, never in groups. If you use the app, the assistant also reads the receipts, renewals, orders and bookings in your mailbox — about once a day if your plan includes discoveries, about once a week otherwise (who sent each one, its subject and the start of the message) — to learn what you pay for, use or have booked, and keeps a short list of them — such as "Netflix Premium, ₪69.90 a month" or "flight to Rome, 20 October", with the price from the latest receipt and the one before it if it changed — which you can see and remove in the app's Settings (Sonic on his own → What Sonic watches), where "Learn from my email" stops this reading. If your plan includes discoveries, it uses that list to look for news about it and to suggest how you could pay less or get more (a cheaper plan, paying yearly, a free trial about to end); only the name of the plan, your time zone and its currency are searched. If it does not, the assistant may tell you once, in the app, what the list shows and what a plan with discoveries would add. It never keeps order numbers, card details, addresses or the content of your personal mail, and it tells you in the app before it first reads your mailbox for this.
Notion content (only if you connect) — when you connect a Notion workspace, the assistant reads the pages and databases you chose to share with your Notion connection, only when a question needs them, and — if you let the connection edit — adds or changes content in them when you ask it to in your private chat. We store only your encrypted Notion access token, not copies of your pages. If you turn Notion on in a WhatsApp group, the assistant's answers in that group may include content from those pages, visible to all of its members.
Website & contact-form data — if you submit our website contact form, we collect your email and any name, phone, company, message, and marketing-attribution (UTM/referrer) you provide. Our website also uses analytics — see "Cookies & analytics" below.
Payments — if you buy a paid feature, your payment is processed by PayPal, or by the App Store or Google Play when you subscribe in the Agent Sonic app. We do not collect or store your payment-card or bank details; we only receive confirmation of payment (such as a subscription's plan, status and renewal date). See "Payments" below.

How we use information & legal basis

We use the information to provide the assistant's features: replying to your messages, transcribing voice, analyzing images/documents, maintaining context and reminders, carrying out requested actions and outreach, using your location if you turned it on, reviewing recordings of how the app is used to find and fix problems in it, and — if connected — reading and updating your calendar, reading/writing your spreadsheets, documents and forms, and reading your form responses when you ask. If your plan includes discoveries and you leave them on (the app's Settings → Sonic on his own), the assistant also looks on the web, about once a day, for news that matters to you — a benefit you are missing, a price change, a deadline — starting from your memory note, your follow-ups and, if your email is linked, the receipts, renewals and bookings in it (never from your Google data), and tells you in the app when it finds some. We use contact-form data to respond to your enquiry and follow up.

Where the EU/UK GDPR applies, our legal bases are: performance of a contract with you (providing the service you request); your consent (e.g. connecting your Google account, turning on location in the app, or website analytics), which you can withdraw at any time; and our legitimate interests in operating, securing, and improving the service. We do not use your message content, Google data, email or Notion content to train AI models. Some messages may reveal sensitive information; we process it only to carry out your request and rely on your consent or your provision of that data to us.

Messaging third parties

When a user directs the assistant to contact another person, that person did not necessarily agree to be contacted by us. The requesting user is responsible for having a lawful basis and any required consent, and for complying with anti-spam law (including section 30A of the Israeli Communications Law and equivalents elsewhere) — see our Terms of Service. If you received a message from the assistant and want your data removed or to object, contact us at tryagentsonic@gmail.com.

WhatsApp groups

The assistant joins a group only because a member adds it. That member is responsible for being allowed to do so and for telling the other members that an AI assistant is in the group and processes what is posted there — see "WhatsApp groups" in our Terms of Service. If you are in such a group, this is what happens to your messages:

What we process. Every message posted while the assistant is a member, as described under "Information we collect", from the time it joined; it cannot see messages sent before it was added. Group content is kept apart from private chats and from other groups.
Why. To answer members' questions about the conversation, write recaps, run shared lists, polls, expenses, the income & expense book and scheduled messages, enforce the group's usage limits, and decide whether a message that does not mention the assistant was nevertheless meant for it. Our legal basis is our legitimate interest in providing the group features the members chose to use, and, for the member who added the assistant, the performance of our contract with them.
Who sees it. The assistant's answers, recaps and lists are posted to the whole group, and any member may ask it about the group's conversation. The operator can access a group's record to run and support the service, investigate abuse and meet legal obligations. Message text is sent to our AI providers (see "Categories of recipients") to generate answers and, for messages that do not mention the assistant, to judge whether they were addressed to it; nothing is used to train AI models.
How long. Each message in the group record is deleted automatically 90 days after it was received. The rest of the group record is kept while the assistant provides the group's features and for a limited period after it leaves, so that recaps, schedules and shared lists keep working if it is re-added, then deleted or anonymized under "Data retention & deletion" below.
Your choices. Any group admin can remove the assistant from the group, after which it receives nothing further. You can have your own messages deleted from every group record by sending /delete-my-data in a private chat with the assistant, which deletes your data right away. A group admin can ask us to delete the whole group record, and anyone can object to this processing, by emailing tryagentsonic@gmail.com.

Groups in the Agent Sonic app

People can make groups in the Agent Sonic app and invite others with a link or by phone number; everyone who joins accepts "Groups" in our Terms of Service. If you are in such a group, or someone invites you to one, this is what happens to your data:

What we process. Every message posted in the group — who posted it, its text, and the photos and documents shared; a voice note is transcribed when it is sent, and only its words are kept and shown to the group (the audio itself is not stored) — and the group's shared lists, notes, expenses, income & expense book and scheduled messages; who is in the group, who invited whom and how they joined; and the reports and blocks members make. If a member invites you by your phone number, or you leave your number on a group's invite page, we keep that number with the invite so it can be shown to you when you sign in to the app; we never message it.
Why. To run the group chat and the features its members use: answering when the assistant is addressed, recaps, shared lists, expenses, the income & expense book, scheduled messages and a shared calendar; to send members notifications; and to keep the group safe (reports, blocks, abuse limits). Our legal basis is the performance of our contract with each member, and our legitimate interest in providing the group and keeping it safe; for invites to people who are not users yet, our legitimate interest in letting the member's invitation reach them.
Who sees it. Members see one another's names and what is posted in the group, never one another's phone numbers. The operator can access a group's record to run and support the service, act on reports, investigate abuse and meet legal obligations; a report shows us the reported message and who posted it. Message text is sent to our AI providers (see "Categories of recipients") to generate answers and to judge whether a message was addressed to the assistant, and a voice note's audio to transcribe it; nothing is used to train AI models. Notifications go through Apple's and Google's push services and show the group's name, the sender's name and the start of the message.
How long. Each message is deleted automatically 90 days after it was posted, and each shared photo or document 45 days after it was sent. An invite waiting for a phone number lasts 30 days. A group and everything kept for it are deleted when its owner deletes it or its last member leaves.
Your choices. You can leave a group, mute it, take back your own messages, block another member (you stop seeing their messages and invites, and they are not told) and report a message to us. Sending /delete-my-data in your chat with the assistant deletes your messages in every group and the invites waiting for your number. You can object to this processing, or ask about a group, by emailing tryagentsonic@gmail.com.

Google user data

This section applies only if you connect your Google account to Agent Sonic, which is optional and done by you on Google's own consent screen. "Google user data" means the information we receive from Google APIs through that connection, and anything derived from it.

Limited Use

Agent Sonic's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Google Workspace APIs (Google Calendar, Sheets, Docs and Forms) will adhere to the Google Workspace API User Data and Developer Policy, including the Limited Use requirements.

What we access

Your Google account's email address — to show you which account is linked and to name it when the assistant confirms a change.
Your Google account's profile photo — shown as your picture in the Agent Sonic app, unless you set your own; it is removed when you disconnect Google or delete your account.
Google Calendar — the list of calendars you are subscribed to (their names), so it can find a shared or subscribed calendar; your events (title, date and time, location, description or notes, attendees, recurrence); and your calendar's time zone. When you ask, the assistant creates, changes or deletes events.
Google Sheets — the spreadsheets you point the assistant to (by sending their link) or that it created for you: their cells and sheet structure. When you ask, it writes or clears cells, appends rows, and creates or copies spreadsheets.
Google Docs — the documents you point the assistant to (by sending their link) or that it created for you: their text, formatting and tables. When you ask, it creates and edits documents.
Google Forms — the forms you point the assistant to (by sending their edit link) or that it created for you: their questions, sections and settings, and the responses submitted to them (which include whatever your form asks respondents for). When you ask, it creates and edits forms.

We do not access your Gmail, Google Drive file list, Google Contacts, Google Photos or any other Google data through this connection. The assistant cannot browse or search your Drive: it opens a spreadsheet, document or form only when you send its link, or when it created that file for you. (Gmail is a separate, optional connection that uses a Google app password rather than Google APIs — see "Email" above.) We do not create aggregated or anonymized data sets from Google user data; our usage records count requests and their cost and contain no content from your Google account.

How we use it

We use Google user data only to provide, and improve, the Google features you use in your chat with the assistant:

answering what you ask about your calendar, spreadsheets, documents, forms and form responses;
creating, changing or deleting calendar events and writing to your spreadsheets, documents and forms — in your private chat, only after the assistant has restated the change and you have confirmed it;
the reminders and scheduled updates you set up that read your calendar, sheets or docs when they are sent (these only read; they never change anything);
your daily brief and evening wrap-up, and your follow-ups: mentioning the day's meetings and who has said they are coming, dating a follow-up you tied to a meeting ("before my meeting with Dana"), holding follow-up nudges back while you are in a meeting, and — in the Agent Sonic app — telling you when one of today's meetings is moved or cancelled by its organizer or clashes with another, and when that clash is resolved (turn these messages off with Nudges in the app's Settings, or switch follow-ups off);
a shared calendar in a group — a WhatsApp group or a group in the Agent Sonic app — only if you link it to that group yourself (see below).

We do not use Google user data for advertising (including retargeting, personalized or interest-based advertising), we do not sell it, and we do not use it to determine credit-worthiness or for lending purposes, or for any purpose unrelated to the features above.

A calendar in a group

If you link your calendar to a WhatsApp group (by mentioning the assistant there with /calendar on) or to a group in the Agent Sonic app ("Share my Google calendar" on the group's info screen), the assistant reads the upcoming events of your primary calendar whenever you — or, once you turn sharing on, any member — mention it in that group, and its answers there — and a group recap you schedule, while sharing is on — can show those events to the group's members; in the app, the group's info screen lists them too, to you and, while sharing is on, to every member. With sharing on, members can also add, change and remove events through the assistant. Sharing is off until you turn it on, and you can turn it off (/calendar share off, or the switch on the app group's info screen) or unlink the calendar (/calendar off, "Stop sharing my calendar" in the app, or /google disconnect) at any time. Your Sheets, Docs and Forms are never used in a group.

Who we share it with

We transfer Google user data only as needed to provide the features above:

AI model providers — to understand your request and write the answer or make the change you asked for, the relevant Google content (for example, the events in the period you asked about, or the cells or text of the file you named) is sent to the AI model providers that run the assistant, acting as our processors. They process it only to return the result to us, and under their terms with us they may not use it to train or improve their AI models or for any purpose of their own.
Our infrastructure providers (hosting and database), acting as our processors, which store your conversation as described under "How long we keep it" below.
Members of a group you linked your calendar to, as described above.

Beyond that, we transfer Google user data only where necessary for security purposes (for example, investigating abuse), to comply with applicable law, or — only after obtaining your explicit prior consent — as part of a merger, acquisition or sale of our assets. We never transfer or sell Google user data to advertising platforms, data brokers or information resellers.

AI and machine learning

We do not use Google user data — raw, derived, aggregated or anonymized — to develop, improve or train generalized or non-personalized AI or machine-learning models.
We do not transfer Google user data to any third-party AI service that uses it to train or improve its own models. Our AI model providers use it only to produce the response we request (see above).
The only personalization is your own: the assistant's private memory note for your chat may record something you discussed (such as a meeting you mentioned) so it can help you later. It is used only for you, never for anyone else, and is deleted with your data.

Who can read it

Our staff do not read your Google user data, or the parts of your conversations that contain it, unless: you first gave your affirmative agreement for us to view specific content (for example, you ask our support team to look into a particular request); it is necessary for security purposes, such as investigating a bug or abuse (for example, a request that failed, or a fault in the app seen in its session recordings); it is necessary to comply with applicable law; or the data (including derivations) is aggregated and used for internal operations in accordance with applicable privacy and other legal requirements.

How we protect it

Everything sent over the internet — between your device or browser and us, between us and Google, and between us and our providers — is encrypted in transit (HTTPS/TLS).
Your refresh token is encrypted at rest (AES-256-GCM) with a key that is kept apart from the database. Short-lived access tokens are kept only in memory, never in our database.
The connection flow is protected by a signed, expiring link that is personal to you, and is tied to the browser that opened it (PKCE), so a link sent to someone else cannot connect their account to you or yours to them.
Google tools are available only in your own private chat with the assistant (plus a calendar you chose to link to a group). The assistant treats everything it reads from Google as data, never as instructions, and changes your calendar or files only when asked: in your private chat, only after you confirm the change.
Access to our production systems is limited to authorized staff who need it to run the service.

How long we keep it, and deleting it

The connection — your encrypted refresh token, your Google account's email address and the list of permissions you granted are kept while your account is connected. Disconnecting — by sending /google disconnect in your chat, or with Disconnect next to Google in the app's Settings — deletes them immediately, unlinks your calendar from every group, and revokes Agent Sonic's access at Google. (If the same Google account is also linked to another Agent Sonic account of yours, such as a second phone number, Google's access stays for that one until you disconnect it there too.) You can also remove Agent Sonic's access at any time in your Google Account's third-party connections; we then can no longer read anything, and you can send /google disconnect to delete the stored token as well.
What the assistant reads — we do not keep copies of your calendar, spreadsheets, documents or forms. Their content is read when needed for a request, used to answer it and then discarded; only your calendar's time zone and short-lived access tokens are briefly cached in memory. The one exception is follow-ups in the Agent Sonic app: to notice that a meeting was moved or cancelled, the assistant keeps the title, time and organizer of your meetings with other people for today and tomorrow, replaced each time it looks (every few minutes during the day) and deleted when you disconnect Google or switch to another account.
What ends up in your conversation — the assistant's replies, and your own messages, can quote Google content (for example, a list of your meetings). They are part of your conversation history and are kept and deleted like the rest of it; in a group, each message is deleted 90 days after it was received. A follow-up you tied to a meeting keeps its own short title and due time; one the assistant opened about your calendar (a clash, a move or a cancellation) keeps a short title, the meeting's time and a short note of who organizes it and who answered, and closes once the meeting starts. The assistant's memory note may keep something you discussed. All of these are deleted with your data. If a screen in the app shows Google content, it is part of that app session recording, which is deleted after 45 days.
Deleting everything — send /delete-my-data in your chat, or use Delete account in the app, and we delete all of the above, including your Google connection, right away (by email to tryagentsonic@gmail.com, within 30 days — see "Data retention & deletion" below).

Categories of recipients

We share your data only as needed to run the service, with the following categories of providers acting on our behalf under contract:

AI providers — to generate responses, transcribe voice notes, and create images you request, from your message content, audio, and prompts (including your latest location, if you turned it on, and the content the assistant reads from your connected accounts to answer you — see "Google user data" above); and, in groups, to decide whether a message that does not mention the assistant was addressed to it. For discoveries, only short search topics (such as a product, a company, a place or a rule) are sent to Google Search through our AI provider. They are written without your name, your contacts or other personal details, and a topic that contains an email address, a phone number or your name is never sent.
Google — Google APIs, called on your behalf only if you connect your Google account (see "Google user data" above).
Gmail — Google's mail servers (IMAP and SMTP), reached on your behalf only if you connect your Gmail, to search, read and send your email.
Microsoft — the Microsoft Graph API, called on your behalf only if you connect your Outlook mailbox, to search, read and send your email and to read your account's address and profile photo.
Notion — the Notion API, called on your behalf only if you connect a Notion workspace, to read the pages you shared with your connection and, when you ask, to change them.
Messaging apps — WhatsApp (Meta) carries the messages between you and the assistant on WhatsApp, and processes them as an independent controller under its own privacy policy. We do not control what it collects.
App stores — Apple (App Store) and Google (Google Play) handle the app's download and updates as independent controllers under their own privacy policies, and may share aggregated download, usage and crash statistics with us.
Email delivery — if your sign-in code cannot reach you in a chat app, it is emailed to the address you gave us through our email provider.
Infrastructure providers — cloud hosting, database storage and private file storage (for the photos and documents in your conversations, and the app's session recordings) for the data described above.
Analytics providers — website-only usage analytics (see "Cookies & analytics" below).
PayPal — our payment processor, if you buy a paid feature (see "Payments" below).
RevenueCat — manages subscriptions bought in the Agent Sonic app through the App Store or Google Play: it receives your account ID and your purchase records from the store (see "Payments" below).

These providers act as our processors under contract and may not use your data for their own purposes. We do not sell your personal data. We otherwise disclose data only where required by law or to protect our rights.

Storage, security & international transfers

Data is stored in our database. OAuth refresh tokens (Google and Microsoft), Gmail app passwords and Notion access tokens are encrypted at rest (AES-256-GCM). Google data and Notion content are retrieved on demand to answer your requests; we keep no copies of them, though the assistant's replies that quote them stay in your conversation history (see "Google user data" above). Some of our providers are located outside your country, including in the United States; where we transfer personal data from the EU/EEA, UK, or Israel, we rely on an appropriate transfer mechanism (such as the EU Standard Contractual Clauses or an adequacy decision).

Data retention & deletion

We keep your data for as long as you use the assistant and as needed to provide the service (the photos and documents in your conversations, and the app's session recordings, for 45 days), then delete or anonymize it when it is no longer needed or on your request, unless we must keep it to comply with a legal obligation or resolve disputes. A group's record is kept while the assistant is in the group and for a limited period after it leaves (see "WhatsApp groups"), and is deleted on a group admin's request; a group in the Agent Sonic app is deleted with everything kept for it when its owner deletes it or its last member leaves (see "Groups in the Agent Sonic app").

We also clear out data that is no longer in use, automatically: messages in a group's record are deleted 90 days after they were received; a reminder that has been sent or switched off is deleted 30 days later; and a repeating reminder that has not gone out for 90 days (for example because your plan ended or you stopped using the assistant) is deleted. Repeating reminders also pause while you are inactive: on WhatsApp after 30 days without a message from you, and in the app once you sign out or have not opened it for 7 days. They resume when you are back.

You can disconnect your Google account at any time by sending /google disconnect in your chat (or in the app's Settings), which deletes the stored token immediately and revokes our access at Google, disconnect Notion by sending /notion disconnect(or deleting the connection in Notion), which deletes its stored token and unlinks it from every group, and disconnect Gmail or Outlook by sending /mail disconnect (or revoking the app password in your Google account, or Agent Sonic's access in your Microsoft account), which deletes the stored app password or Microsoft access grant and any profile photo it brought. You can delete all of your data by sending /delete-my-data (or just asking) in your chat on any channel, or with Delete account in the app's settings; it is deleted right away and confirmed in your chat, and our Terms of Service ("Deleting your data") list exactly what is deleted and the few records we keep. For anything else, contact us at tryagentsonic@gmail.com.

Your rights

Subject to applicable law (including the EU/UK GDPR and Israel's Protection of Privacy Law), you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, email tryagentsonic@gmail.com. You also have the right to lodge a complaint with a supervisory authority — in Israel, the Privacy Protection Authority; in the EU/UK, your local data-protection authority.

Cookies & analytics

Our website uses a third-party web analytics service and browser storage to understand traffic and remember marketing attribution (UTM/referrer) so we can attribute a contact-form submission to its source. This is separate from the chat assistant, which does not use advertising cookies.

Payments

Paid features are billed through PayPal. Your card or bank details are entered with and held by PayPal — they do not pass through or get stored on our systems; we only receive a payment confirmation. PayPal processes your payment data as an independent controller under its own privacy policy, which we encourage you to review.

Subscriptions bought in the Agent Sonic app are billed by Apple (App Store) or Google (Google Play) under your store account, and you manage or cancel them in your store account's settings. Apple and Google process your payment as independent controllers under their own privacy policies; we never see your payment details. RevenueCat, our subscription processor, receives your account ID and the store's purchase records (plan, price, status and renewal dates) and passes them to us so we can unlock your plan.

Data breaches

If a data breach occurs that is likely to pose a risk to your rights, we will notify the relevant authority and, where required, affected individuals, in line with applicable law.

Children

The assistant is not directed to children under 16 (or the minimum age for valid consent in your jurisdiction), and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

Changes

We may update this policy; material changes will be reflected by the "Last updated" date above.

Contact

Questions about this policy? Email tryagentsonic@gmail.com.