This notice explains how SONARIS LTD (trading as Sonaris), a company registered in England and Wales with company number 16223664, registered office 296 Coldharbour Lane, London, England, SW9 8SE ("Sonaris", "we") uses personal data. Questions or requests: [email protected].
1. Two roles
We are the controller for personal data we use to run our own business: your account and workspace administration, Sonaris subscription billing, security and abuse prevention, support, the launch waitlist, our own marketing (only if you opt in), service telemetry, and legal and compliance records.
We are a processor for personal data that workspaces put into Sonaris: their CRM contacts, form responses, bookings, campaign audiences, site visitors, storefront customers and orders, files, messages, projects, automations and AI inputs. The workspace is the controller of that data and decides how it is used; our processing is governed by our Data Processing Agreement with them. If you are a contact or customer of a business that uses Sonaris, please contact that business first. We will pass on any request we receive about their data.
2. What we collect, why, and our lawful basis
| Data | Purpose | Lawful basis |
|---|---|---|
| Name, email, password (hashed), profile, workspace memberships | Provide your account and the Service | Contract |
| Billing contact and subscription records (card details are handled by Polar and never reach us) | Bill and administer subscriptions; accounting | Contract; legal obligation |
| Account, security, billing and service emails | Run the Service and keep it secure | Contract; legitimate interests |
| Sign-in records, IP address, device and browser data, audit logs | Security, fraud and abuse prevention | Legitimate interests |
| Error reports and performance telemetry | Keep the Service working and fix faults | Legitimate interests |
| Support correspondence | Answer you | Contract; legitimate interests |
| Waitlist email, and if you give them, the kind of business you run and the tools you would replace | Tell you when Sonaris launches and plan onboarding for the first customers | Legitimate interests |
| Marketing preferences and evidence of consent | Send product news if you opted in; prove consent | Consent; legal obligation |
| Acceptance of these documents (version and time) | Show which terms you agreed to | Contract; legitimate interests |
3. Who we share it with
We use the providers on our subprocessor list to host the Service, send email, take payments, monitor errors and provide AI features. We share data only as needed for those services, under contracts that require them to protect it. We may disclose data where the law requires it, or to protect the rights and safety of users and others. We do not sell personal data.
4. International transfers
Some providers process data outside the UK, including in the United States. Where they do, we rely on UK adequacy regulations (including the UK–US data bridge where the provider is certified) or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.
5. How long we keep it
| Data | Retention |
|---|---|
| Account data | While your account exists; deleted when you close it |
| Unverified sign-ups | Deleted after 30 days |
| Closed workspaces | Available for export for 30 days, then permanently deleted |
| Waitlist entries | Deleted within 90 days of launch unless you opt in to marketing |
| Billing records | As required by tax and accounting law (normally six years) |
| Security and application logs | Up to 30 days, longer only for a documented incident |
| Error monitoring data | Up to 90 days |
| Backups | Expire on a rolling schedule of up to 90 days |
| Consent and unsubscribe records | As long as needed to prove consent and avoid emailing you again |
6. Your rights
You can ask for access to, correction or deletion of your personal data, ask us to restrict or stop using it, object to processing based on legitimate interests, and ask for a copy in a portable format. You can withdraw marketing consent at any time in your account settings or with the unsubscribe link. Email [email protected]; we may need to verify your identity and will reply within one month.
You can complain to the Information Commissioner's Office (ico.org.uk). We would appreciate the chance to resolve your concern first.
7. Cookies
See the Cookie Policy. The Sonaris app uses only cookies that are strictly necessary for it to work.
8. Children
Sonaris is for businesses and people aged 18 or over. We do not knowingly collect data about children.
9. Changes
We will post updates here, with a new version number, and tell you about significant changes.