1. Introduction
This Privacy Policy explains how Sodah.io ("Sodah," "we," "us," or "our") collects, accesses, uses, stores, protects, and discloses information when you use the Sodah business automation platform and its connected communication and productivity services.
Sodah provides business automation features including communication automation, customer conversations, lead management, appointment workflows, campaigns, email functionality, and other business productivity tools.
2. Information We Collect
Depending on the features you use, Sodah may process the following categories of information:
- account information, such as your name, email address, user identifier, and authentication information;
- business information, including business name, business configuration, services, products, and automation settings;
- customer and contact information that you or your business provide to Sodah or receive through connected communication channels;
- conversation and message information required to provide communication and automation features;
- appointment, lead, campaign, workflow, and business process information;
- technical information such as browser, device, IP address, operating system, timestamps, diagnostic information, and security logs; and
- information received from third-party services when you explicitly authorize a connection.
3. Google Account and Gmail Data
Sodah provides an optional Gmail integration. When you choose to connect a Google Account or Gmail account to Sodah, you authorize Sodah to access the Google data covered by the permissions shown during Google's authorization process.
3.1 Gmail data we access
For the Gmail features currently offered by Sodah, the authorization permissions may allow Sodah to:
- access the email address associated with the connected Google Account;
- read Gmail messages and related message information needed to display and process the user's inbox within Sodah; and
- send email messages on the user's behalf when the user explicitly uses a Sodah email feature that requires sending email.
The Gmail permissions currently configured for Sodah includegmail.readonly, gmail.send, anduserinfo.email.
3.2 How we use Gmail data
Gmail data is used only to provide the Gmail and Email AI functionality requested by the user. This may include displaying inbox messages, retrieving message information, helping the user work with email, generating requested email-related assistance, and sending email when the user initiates or authorizes that action through Sodah.
Sodah does not sell Google user data. We do not use Google user data for targeted advertising, personalized advertising, or selling information to data brokers.
Sodah does not use Google user data obtained through Gmail APIs to train generalized or non-personalized artificial intelligence or machine-learning models.
Sodah's use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
3.3 Gmail data storage and processing
Gmail information may be processed and stored as necessary to provide the Gmail features requested by the user, maintain the connected account, display email information, operate requested automation, maintain security, and comply with legal obligations.
Authentication credentials and access tokens used to maintain authorized connections are handled using security controls appropriate to their purpose.
Where third-party service providers are used to provide a requested Sodah feature, information is shared only as necessary to provide that feature, maintain the service, protect security, or comply with applicable law.
3.4 Human access to Gmail data
Sodah does not permit routine human access to Gmail content. Access may occur only where necessary for security, abuse prevention, legal compliance, technical support requested or authorized by the user, or another circumstance permitted under applicable Google policies and law.
3.5 Disconnecting Gmail
You may disconnect your Gmail account from Sodah through the applicable account or connection controls. You may also revoke Sodah's authorization from your Google Account.
Disconnecting or revoking authorization prevents Sodah from obtaining additional Gmail data through that authorization. Information already stored may remain for the applicable retention period described in this Privacy Policy or where retention is required for security, legal, accounting, dispute resolution, or other legitimate service purposes.
When a user requests deletion of eligible Gmail-related information, Sodah will delete or de-identify that information within a reasonable period, subject to legal, security, and legitimate business retention requirements.
4. Other Connected Services
Sodah may connect with other services and communication platforms when you explicitly authorize those integrations.
Depending on the integration and permissions granted, this may include information such as account identifiers, profile information, messages, conversations, media, business information, or other data necessary to provide the connected functionality.
Each third-party service may have its own privacy policy and terms. You should review those policies before authorizing a connection.
5. TikTok Information
When you connect TikTok to Sodah.io, you authorize the TikTok integration to provide the permissions you approve through TikTok's authorization flow.
Depending on the approved integration, this may include basic TikTok account information such as a TikTok user identifier, display name, and profile information.
We use this information to establish and maintain the connection, identify the connected TikTok account within your Sodah workspace, and provide the TikTok functionality you requested.
We do not sell TikTok user data or use TikTok data for unrelated advertising or profiling purposes.
6. How We Use Information
Sodah may use information to:
- create and maintain user accounts;
- provide business automation functionality;
- provide communication and customer-support features;
- connect and manage authorized third-party services;
- process leads, appointments, campaigns, and workflows;
- provide email and inbox functionality;
- provide requested AI-assisted features;
- maintain and improve user-facing Sodah functionality;
- provide customer support;
- detect and prevent fraud, abuse, and security incidents;
- maintain service reliability and performance; and
- comply with applicable legal obligations.
7. AI and Automated Processing
Some Sodah features use automated processing and artificial intelligence to assist with business conversations, email workflows, customer communication, summaries, automation, and other user-requested functions.
AI processing is used to provide or improve user-facing Sodah functionality. Information obtained from connected third-party services, including Google APIs, is handled according to the applicable service-specific restrictions and the disclosures in this Privacy Policy.
Google user data obtained through Google APIs is not used to train generalized or non-personalized AI or machine-learning models.
8. Sharing and Third-Party Service Providers
Sodah does not sell personal information or Google user data.
We may use service providers that support hosting, databases, authentication, security, communications, analytics, infrastructure, automation, or other functionality necessary to operate Sodah.
Information may be shared with such providers only to the extent reasonably necessary to provide the requested service, maintain security and reliability, comply with legal obligations, or protect Sodah, our users, or others.
Google user data obtained through Google APIs is subject to the additional restrictions described in Google's applicable user data policies.
9. Data Security
We use reasonable technical and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, loss, or destruction.
Depending on the information and service involved, safeguards may include access controls, authentication controls, encryption, secure transmission, token protection, logging, monitoring, and other security measures.
No internet-based service can guarantee absolute security, but we take reasonable measures appropriate to the nature of the information we process.
10. Data Retention
We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the service, maintaining account and business records, security, fraud prevention, dispute resolution, and complying with applicable legal obligations.
Retention periods vary depending on the type of information, the feature involved, the user's configuration, and applicable legal requirements.
When information is no longer required for the applicable purpose or retention requirement, we may delete or de-identify it in accordance with our operational procedures.
11. Data Deletion and User Requests
You may request access to, correction of, or deletion of personal information associated with your Sodah account, subject to applicable law and legitimate retention requirements.
Requests involving connected services may also require the user to revoke authorization directly with the relevant third-party provider.
To request deletion or assistance with your information, please contact us through the support contact provided on the Sodah.io website.
12. Cookies and Similar Technologies
Sodah.io may use cookies or similar technologies necessary for authentication, security, session management, preferences, and service functionality.
13. Children's Privacy
Sodah.io is a business service and is not directed to children. We do not knowingly collect personal information from children in violation of applicable law.
14. International Processing
Information may be processed or stored in countries other than the country where you access Sodah.io.
Where required, we take appropriate measures to protect information during international processing and transfers.
15. Changes to this Privacy Policy
We may update this Privacy Policy when our services, data practices, security measures, or legal requirements change.
The updated version will be published on this page with a revised effective date. Users should periodically review this page for changes.
16. Contact
For privacy questions, data requests, or questions about how Sodah handles connected Google or Gmail data, please contact Sodah.io through the support options available on our website.
You may also use the support email associated with your Sodah account or OAuth authorization.
17. Google API Services User Data Policy
Sodah's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Google user data is used only to provide or improve the user-facing functionality described in this Privacy Policy and is not sold or used for unrelated advertising purposes.