Legal
Privacy Policy
Last updated 4 October 2026
Status: Draft for review by a lawyer before publication. Text in [brackets] must be completed.
This Privacy Policy explains how [Sonido legal entity] ("Sonido", "we", "us"), of [address], Ontario,
Canada, collects, uses and protects personal information when you visit sonidohq.com, talk to Sonido or a demo
agent on the site, use the price calculator, or send us the Contact Us form.
It does not cover voice agents we build for our customers. Those agents run under each customer's own agreement and privacy notice.
In short
- Calls on this site may be recorded and transcribed. We tell you before a conversation starts.
- We never sell, rent, trade or exchange recordings, transcripts or any personal information for money or any other reward.
- Recordings are not used by third-party services for their own purposes, including training their models.
- We may use recordings to improve Sonido: our agents, prompts, voices and product.
- Recordings and transcripts are deleted after 12 months, or sooner if you ask.
1. What we collect
Conversations on the site. When you talk to Sonido, our voice guide, or to a demo agent, we collect the audio of the conversation, a transcript of it, and details of the session: when it started, how long it lasted, which agent you spoke to and from which page. We also record your IP address and the approximate location it suggests (city or region, never your precise location).
The Contact Us form. Your email address, your phone number if you give it, what you would like an agent to do, how you heard about us, any correction you send afterwards, and whether Sonido helped you fill in the form.
What you type into the demo. Tickets, survey answers, bookings and other demo data you change are kept in a temporary copy for your visit only and are deleted within 8 hours. They are not linked to your identity.
How you use the site. Pages you view, buttons you press, the device and browser you use, and a random identifier stored in a cookie, collected by our analytics provider. We do not collect your name or contact details this way.
Preferences on your device. Your theme choice and, after you send the form, a note that it was sent (so you are not asked to fill it in twice) are kept in your browser's storage, not on our servers.
2. Why we use it
| Purpose | Information used |
|---|---|
| Hold the conversation you start, and show its results on the page | Audio, transcript, session details |
| Reply to your Contact Us request and arrange a call | Form details |
| Improve Sonido: review conversations, measure quality, fix mistakes, improve our agents, prompts and voices | Recordings, transcripts, session details |
| Understand how the site is used and improve it | Analytics |
| Keep the site and its voice features safe, prevent abuse, and limit costs | IP address, session details, logs |
| Meet legal obligations and defend legal claims | Any of the above, only as needed |
We use your information only for these purposes, or for a purpose a reasonable person would expect, or with your consent.
3. Call recording and consent
Before a conversation starts, the site tells you that it may be recorded and transcribed. By starting the conversation you agree to this. If you do not agree, do not start the conversation: you can read the site, play the recorded demos and send the form without talking to an agent. Please do not share sensitive information, such as health, financial or government identity details, in a conversation on this site.
4. Who we share it with
We do not sell, rent, trade or exchange personal information, recordings or transcripts for money or any other reward, and we do not share them with anyone for their own marketing or other purposes.
We use a small number of service providers who process information only on our behalf and under our instructions:
| Provider | What it does for us | Information it handles |
|---|---|---|
| LiveKit | Carries the live audio between your browser and our agent | Live audio and session details, in transit |
| OpenAI (API) | Understands speech and produces the agent's replies during a conversation | Live audio and text of the conversation |
| Google Workspace | Delivers the Contact Us emails | Form details |
| PostHog (EU) | Analytics | Usage data |
| Cloudflare | Delivers the site securely and protects it from attacks | IP address, request data |
These providers may not use your information to train their own models or for any purpose of their own. OpenAI's API terms say data sent through the API is not used to train its models; OpenAI may keep it for up to 30 days to detect abuse, then deletes it. Stored recordings and transcripts stay on servers Sonido controls and are not given to any third party.
We may disclose information if the law requires it, to protect people from harm, or as part of a sale or merger of our business, in which case this policy continues to apply.
5. Where it is stored
Sonido's servers are in Canada. Some service providers above process information in the United States, the European Union or elsewhere. Information processed in another country is subject to that country's laws, and may be accessible to its courts and authorities.
6. How long we keep it
| Information | Kept for |
|---|---|
| Recordings and transcripts | 12 months, then deleted; sooner if you ask |
| Contact Us emails and corrections | As long as needed to discuss and serve your request, then up to 24 months after our last contact; sooner if you ask |
| Demo data you type | Up to 8 hours |
| Analytics | [up to 12 months], then deleted or kept only in aggregate |
| Security logs | Up to 90 days, unless needed to investigate abuse |
7. Your rights
You may ask to see the personal information we hold about you, have it corrected, have it deleted, or withdraw your consent to a use of it. Write to [email protected]. We reply within 30 days and may need to confirm your identity first. Withdrawing consent does not affect what we did before.
If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada
(priv.gc.ca). If you live in the European Union or the United Kingdom, you also have the rights given by the
GDPR, including complaining to your local data-protection authority.
8. Security
We protect information with encrypted connections, access limited to the people who need it, a private administration panel and regular updates. No system is perfectly secure; if a breach puts you at real risk of significant harm, we will tell you and the Privacy Commissioner as the law requires.
9. Children
The site is not intended for children under 16, and we do not knowingly collect their information. If you believe a child has talked to an agent on the site or sent us the form, write to us and we will delete it.
10. Cookies and similar technologies
We use one analytics cookie and your browser's storage for preferences (theme, a sent form). You can block or delete cookies in your browser; the site still works, without analytics.
11. Changes
We will post any change to this policy on this page with a new date. If a change materially affects how we use information we already hold, we will ask for your consent where the law requires it.
12. Contact
Privacy questions and requests: [email protected] [Sonido legal entity], [address], Ontario, Canada