Privacy Policy

Last updated: June 8, 2026

This Privacy Policy explains how Agent Sonic ("we", "us") collects, uses, and protects information when you interact with our assistant over WhatsApp.

Information we collect

• WhatsApp messages & metadata — the content of messages you send to the assistant, your phone number, display name, and message timestamps, so we can understand and respond to you.
• Conversation context — recent message history, a durable "memory" note the assistant maintains for your chat, and any reminders you ask it to schedule.
• Google account data (only if you connect) — when you connect your Google account, we access your Google Calendar, Sheets and Docs on your behalf to fulfill your requests. We store only an encrypted OAuth refresh token, never your Google password.

How we use information

We use the information solely to provide the assistant's features: replying to your messages, maintaining context and reminders, and — if connected — reading your calendar and reading/writing your spreadsheets and documents when you ask.

Google user data — Limited Use

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Google user data is used only to provide or improve user-facing features that are prominent in the assistant's experience.
• We do not sell Google user data, and we do not use it for advertising.
• We do not allow humans to read your Google user data, except: with your explicit consent, where necessary for security purposes (such as investigating abuse), to comply with applicable law, or where the data has been aggregated and anonymized.

Storage & security

Data is stored in our database. OAuth refresh tokens are encrypted at rest (AES-256-GCM). Google data is retrieved on demand to answer your requests and is not retained beyond what is needed to respond.

Data sharing

To operate the assistant, message content is processed by our AI provider (Anthropic) to generate responses, and Google APIs are called on your behalf when you connect your account. We do not otherwise share your data with third parties, except as required by law.

Data retention & deletion

You can disconnect your Google account at any time by sending /disconnect in your chat, which deletes the stored token immediately. To request deletion of your other data, contact us at support@example.com.

Children

The assistant is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their data.

Changes

We may update this policy; material changes will be reflected by the "Last updated" date above.

Contact

Questions about this policy? Email support@example.com.