Privacy Policy

Effective date: 2025-12-12

This Privacy Policy explains how Sora21 (the "Service", "we", "us", or "our") collects, uses, and shares information when you visit or use https://www.sora21.com.

If you have questions, contact us at support@sora21.com.

1. Information we collect

Account information

• Email address and profile information you provide (for example via Google Sign-In).

Usage information

• Prompts and inputs you submit to generate content.
• Generated outputs and related metadata (e.g., task IDs, timestamps).
• Log data (IP address, device/browser information, approximate location derived from IP, and diagnostic logs).

Safety and policy enforcement

To keep the Service safe and compliant, we may analyze prompts/inputs and related metadata to detect prohibited content (for example: pornographic/sexually explicit content, content involving minors, and impersonation/celebrity requests). We may block requests, restrict accounts, and retain limited records related to abuse prevention and dispute resolution.

Payment information

We do not store full payment card details on our servers. Payments and billing are processed by Creem (which may act as the merchant of record). We receive limited transaction information such as purchase identifiers, product/plan, amount, currency, and status.

Relevant Creem policies:

• Creem Privacy Notice: https://www.creem.io/privacy
• Creem Buyer Terms: https://www.creem.io/terms

Cookies and similar technologies

We use cookies/local storage for authentication, security, preferences (e.g., theme), and basic analytics (if enabled).

2. How we use information

We use collected information to:

• Provide and operate the Service (authentication, generating content, account pages).
• Process purchases, deliver credits, prevent fraud, and handle disputes.
• Improve reliability, performance, and user experience.
• Communicate with you about service updates, security notices, and support.
• Comply with legal obligations.

3. How we share information

We may share information with:

• Payment providers (Creem) to process payments and manage billing.
• Authentication providers (e.g., Google) to support sign-in.
• Infrastructure providers (hosting, databases, storage, email delivery) to operate the Service.
• Analytics providers (only if configured/enabled).
• Law enforcement or regulators where required by law.

We do not sell your personal information.

4. Data retention

We retain personal data only as long as necessary for the purposes described above, including to comply with legal, accounting, and reporting requirements. We may retain certain logs for security and fraud prevention.

5. Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is 100% secure.

6. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or export your personal information, or to object to certain processing. To exercise these rights, contact support@sora21.com.

7. Children's privacy

The Service is not intended for children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.

8. International transfers

Your information may be processed in countries other than your own depending on our service providers. We take steps designed to ensure adequate protection where required by law.

9. Changes to this policy

We may update this policy from time to time. The updated version will be posted on this page with a new effective date.