Privacy Policy

Last updated 19 October 2026

[[LEGAL NAME]] ("we") runs Sonnet. This page explains what we collect, why, who else sees it, and what you can ask us to do. In short: we collect what is needed to run your account, we do not sell your data, and we do not use your chats to train AI models.

What we collect

• Your Google email address, when you sign in with Google. We do not receive your Google password.
• Your content: the conversations, side chats, attachments, settings and layout you create in Sonnet. They are kept as a private archive for your account so they are there next time you sign in.
• Usage counters: how much AI spend your account has used this month (an amount in dollars, not what you wrote), and your plan.
• Billing details: if you subscribe, Stripe collects your card and billing details. We never see your card number; we keep your Stripe customer and subscription identifiers.
• Technical data: our hosting provider handles ordinary request information (such as IP address and timestamps) to deliver and protect the Service.

How we use it

To sign you in, run your private workspace, send your questions to AI models and return the replies, apply your plan's allowance, take payment, keep the Service secure, and answer your messages. We do not use your content for advertising and we do not sell it.

Who else handles it

• Google Cloud (Vertex AI, Text-to-Speech) and Google Sign-In. Your messages and attachments are sent to AI models through Google Cloud to produce replies, including partner models Google makes available there, and to Google's speech service when you use read-aloud. Some replies use Google Search for up-to-date information, which sends the relevant question to Google Search. Those providers process the data under their own terms.
• Cloudflare hosts the Service, runs your workspace and stores your archive.
• Stripe processes payments.

These providers operate internationally, so your data may be processed outside the country where you live. We share data with authorities only where the law requires it.

Cookies

Sonnet sets one cookie, a sign-in cookie that keeps you signed in for up to 30 days. It is strictly necessary for the Service to work. We use no advertising or analytics cookies, and this website has no tracking scripts.

Who can see your content

Your workspace is separate from every other user's. We do not read your conversations. The people who operate the Service can technically reach stored data, and will do so only to fix a problem you ask us to look at, to investigate abuse or a security issue, or where the law requires it.

How long we keep it

Your content is kept until you delete it or ask us to delete your account. When you ask, we delete your archive within 30 days. We keep usage counters and billing records for as long as accounting and tax rules require.

Your choices

You can ask us to give you a copy of your data, correct it, or delete it, and you can cancel your subscription at any time from your account page. Depending on where you live you may have further rights, including to object to or restrict processing, and to complain to your data protection authority. Write to [[CONTACT EMAIL]] from the address you sign in with.

Children

Sonnet is not for anyone under 16, and we do not knowingly collect their data.

Changes

If we change this policy in a way that matters, we will tell you in the app or by email before it applies.

Contact

[[LEGAL NAME]] · [[COUNTRY]] · [[CONTACT EMAIL]]