Privacy Policy

The Short Version

1. Who We Are

Sinora is operated by WCA Technologies ("we," "us," "our"). This policy explains what data we collect, what we don't, and how we handle it.

Contact us anytime: care@sinora.ai

2. What We Collect

Account Information

• Email address -- for authentication and account communications
• Payment information -- processed and stored by Stripe (we never see your full card number)

Usage Metrics

• Credit consumption and balance
• Message counts and types (Smart, Deep Think, media)
• Session timestamps and feature usage
• Error logs for debugging

These metrics help us improve the platform and monitor system health. They contain no conversation content.

3. What We Do NOT Collect

Voice & Media Processing

• Voice messages are transcribed using on-device Whisper -- no audio is sent to external APIs
• Images are processed locally on your dedicated server

4. Cookies

We use minimal cookies for:

• Authentication -- keeping you logged in
• Preferences -- remembering your settings

We do not use advertising or tracking cookies. No third-party analytics scripts run on our platform.

5. Third Parties

We work with a limited number of trusted providers:

• Stripe -- payment processing. Stripe handles your billing data under their own privacy policy.
• Supabase -- authentication only (email/password). No conversation data touches Supabase.
• OVHcloud -- dedicated VPS hosting with region-specific compliance. Servers are provisioned in the datacenter region that matches your compliance requirements: Canada (PIPEDA), United States (HIPAA-ready), or Europe (GDPR).

We do not sell, rent, or share your data with anyone else.

6. Data Retention

• Account data -- retained while your account is active, deleted within 72 hours of account closure
• Chat data -- stored on your dedicated server; deleted when your server is deprovisioned (within 72 hours of cancellation)
• Payment records -- retained as required by law (typically 7 years for tax purposes)
• Usage metrics -- aggregated and anonymized after 90 days

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate information
• Delete your account and all associated data
• Export your data in a portable format
• Object to data processing where applicable

To exercise any of these rights, email care@sinora.ai. We'll respond within 30 days.

8. Compliance

WCA Technologies is a Canadian company and complies with the Personal Information Protection and Electronic Documents Act (PIPEDA).

Your dedicated server is provisioned in a datacenter region that aligns with your applicable privacy framework:

• Canada -- Beauharnois, Quebec (PIPEDA)
• United States -- Virginia (HIPAA-ready infrastructure)
• Europe -- Gravelines, France (GDPR)

You have the right to access, correct, or delete the personal information we hold about you. To exercise these rights or file a complaint, contact us at care@sinora.ai or the Office of the Privacy Commissioner of Canada.

9. Children's Privacy

Sinora is not intended for anyone under 18. We do not knowingly collect information from minors. If you believe a minor has created an account, please contact us and we'll remove it promptly.

10. Changes to This Policy

We may update this policy as our service evolves. When we make significant changes, we'll notify you via email and update the effective date. Continued use after changes constitutes acceptance.

11. Contact

Questions or concerns about your privacy? We're here to help.

Email: care@sinora.ai

Company: WCA Technologies