Legal
Privacy Policy
Last updated: September 30, 2026
At Sonny, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
1. Information We Collect
We collect information you provide directly to us, such as when you create an account, use our services, or contact us for support. This includes your name, email address, and any content you send or receive through the platform (chat messages, email conversations, file attachments).
2. How We Use Your Information
We use the information we collect to provide, maintain, and improve our services; to process transactions; to send you technical notices and support messages; and to respond to your comments, questions, and requests. We do not sell your personal information to third parties.
3. Data Storage and Security
Sonny uses Hetzner for application and database hosting and Amazon Web Services (AWS) for services including file storage and email delivery. Connections to Sonny use HTTPS encryption in transit. Account passwords are stored as one-way hashes, not as plaintext. We regularly review and update our security practices.
4. Data Sharing
We do not share your personal information with third parties except in the following circumstances: with your consent; to comply with legal obligations; to protect the rights, property, or safety of Sonny, our users, or the public; or with service providers who assist us in operating our platform (including Hetzner for hosting, AWS for file storage and email, Stripe for payment processing, and Google and Microsoft for website analytics).
5. Cookies and Tracking
We use essential cookies to maintain your session and preferences. Our website also includes Google Analytics and Microsoft Clarity to understand visits and interactions and improve usability. These services may receive device, browser, network, page-view, and interaction information and may use cookies. You can restrict cookies through your browser settings; blocking essential cookies can prevent sign-in from working.
6. Data Retention
We retain your data for as long as your account is active or as needed to provide you with our services. If you delete your account, we will delete your personal information within 30 days, except as required by law or for legitimate business purposes.
7. Your Rights
You have the right to access, correct, or delete your personal information at any time. You can export your data from your account settings. You can also request that we delete your account and associated data by contacting our support team.
8. Children's Privacy
Sonny is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure that appropriate safeguards are in place to protect your data in accordance with this privacy policy.
10. Connected AI Tools
When you connect Sonny to ChatGPT, Codex, or another MCP client, that client can request the workspace data and actions allowed by your connection. Depending on the tools you use, this can include contacts, conversations, messages, help content, and reports. Requested results are shared with the connected provider and handled under its policies. Authorized write actions can change Sonny records or send customer replies. You can review and revoke MCP connections in Sonny settings. The MCP connection does not give Sonny access to your full conversation history in the connected AI client.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.
If you have any questions about this Privacy Policy, please contact us at privacy@usesonny.com.