Privacy Policy

Sonnia AI Limited · Version 2026-08-20 · Effective 20 August 2026

This Privacy Policy explains what personal data Sonnia AI Limited (“Sonnia”, “we”, “us”) collects, why we collect it, how we use it, and the rights you have. It applies to the Sonnia service at manager.sonnia.ai and the marketing site at sonnia.ai. We are the data controller for the personal data described here. We comply with the UK GDPR, the UK Data Protection Act 2018, and, where you are based there, the Singapore PDPA.

1. What we collect and why

We collect only what the service needs, and we collect it for the reasons listed below:

• Account details — your full name, email address, and password (stored as a one-way hash). Needed to create and secure your account and to authenticate you.
• Phone number — stored in international (E.164) format. Needed for account recovery, verification, and to configure voice-agent features you ask us to provide.
• Date of birth — needed to confirm you are at least 18, as required by our Terms.
• Gender (optional) — collected only if you choose to provide it, to help us understand who Sonnia is working for; it is not used for automated decision-making.
• Business details — company name, size, country, website, industry, role, and referral source (some optional). Needed to set up your workspace and tailor the service.
• Consent records — the version of the Terms you accepted, the date of acceptance, whether you opted into marketing updates, and when and where (registration or settings) that choice was made. Needed to evidence consent.
• Service data — calls, contacts, and content you create or upload through the service. Needed to provide the service you asked for.
• Technical data — IP address, browser and device information, and logs, collected automatically to keep the service secure, reliable, and to diagnose faults.

2. Legal bases

We process personal data on the following bases:

• Contract — to provide the service you signed up for and to manage your account.
• Consent — for marketing updates, and for any optional data you choose to give us. You can withdraw marketing consent at any time in Settings or by contacting us; withdrawal does not affect the lawfulness of processing before it.
• Legal obligation — where we must keep records to comply with law.
• Legitimate interests — for security, fraud prevention, and improving the service, balanced against your rights.

3. How we use and share data

We use your data only as described here. We do not sell personal data. We share data only with:

• Service providers who process data on our behalf (for example hosting, telephony, email delivery, and analytics), under contracts that require them to protect it;
• Authorities or other parties where the law requires it or where needed to protect rights, safety, or property;
• AI model providers only to the extent needed to provide AI features you use, and only as described in product settings that control such use.

4. How long we keep data

Account data is kept for as long as your account is active. If you close your account, we delete or anonymise personal data within 90 days unless we must keep it longer for legal, security, or audit reasons. Consent records are kept for the period needed to evidence consent. Call and contact data is kept according to the retention periods shown in the product, which you can adjust.

5. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate data;
• ask us to delete your data;
• restrict or object to certain processing;
• receive your data in a portable form;
• withdraw consent at any time; and
• complain to a supervisory authority (in the UK, the Information Commissioner's Office; in Singapore, the Personal Data Protection Commission).

To exercise any of these rights, email privacy@sonnia.ai or use the in-app tools where available. We respond within one month. Before acting on a request we may need to verify your identity.

6. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, hashed passwords, and access controls. No system is completely secure; please report any suspected compromise to privacy@sonnia.ai.

7. Children

The service is not directed at people under 18, and we require users to be 18 or over. If you believe a child has given us personal data, contact us and we will delete it.

8. International transfers

Data may be processed in countries other than the one you live in, including the United Kingdom and Singapore. Where we transfer personal data outside the UK or EEA, we use appropriate safeguards such as the UK International Data Transfer Agreement or equivalent mechanisms.

9. Changes to this policy

We may update this policy from time to time. Material changes will be published at this page, and where we have your contact details we will notify you by email before the change takes effect. The version in effect when you registered is available on request.

10. Contact

Questions, requests, or complaints about privacy can be sent to privacy@sonnia.ai or by post to Sonnia AI Limited, care of sonnia.ai.

---

← Back to sonnia.ai