Privacy Policy

1. Commitment to Privacy

At SobyAI (operated at sobyai.com), we are dedicated to protecting your personal information and privacy. We operate with strict principles of data minimization and security in compliance with applicable data protection laws, including the European Union General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

We never sell, rent, or trade your personal information or your private brand queries to third parties or data brokers.

2. Information We Collect

We collect only the information necessary to provide, maintain, and bill for our software platform:

• Account Credentials: When you register an account, we collect your email address, authentication identifier, and name (if provided).
• User-Provided Data: Domain names, brand names, target search terms, and configuration preferences that you enter to generate your visibility reports and dashboards.
• Billing Details: Subscription plan, payment transaction records, and invoice details managed securely through our PCI-compliant payment processor. SobyAI never stores or has access to your full credit card number.
• Technical Logs: Standard access logs including IP address, browser type, device details, and diagnostic telemetry strictly used to ensure platform security, service reliability, and abuse prevention.

3. How We Use Your Information

Your data is strictly utilized for legitimate operational and business purposes:

• Providing the analytics, reports, and dashboard features requested by your account.
• Processing subscription payments, renewals, and account billing.
• Maintaining platform security, mitigating unauthorized scraping, and diagnosing operational errors.
• Providing customer service and answering technical inquiries.

4. Third-Party Service Providers

We work with enterprise third-party service providers (such as cloud hosting, authentication, and payment processing services) who adhere to strict confidentiality and security standards (including SOC 2 and PCI-DSS compliance). These providers only process data on our behalf as strictly necessary to deliver the Service.

5. Data Security

We implement industry-standard technical and organizational security measures to protect your data, including Transport Layer Security (TLS) encryption in transit and encryption at rest. Access to production systems is restricted to authorized personnel under least-privilege security controls.

6. Your Rights & Data Portability

In accordance with applicable data protection laws, you retain full rights regarding your data:

• Access & Export: You may access and export your account data and reports directly from your dashboard.
• Correction & Update: You may update your profile information and billing preferences at any time.
• Deletion: You may request the permanent deletion of your account and associated data by contacting our team.

7. Cookies and Storage

We use strictly essential first-party cookies and local storage tokens necessary to keep you securely signed in and preserve your session preferences. We do not use third-party cross-site advertising trackers.

8. Customer Service (SAV) & Privacy Contact

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact our team: