SonicAlpha Privacy Policy

Introduction

Welcome to SonicAlpha, operated by kGrid Inc. ("SonicAlpha," "we," "us," or "our"). This Privacy Policy explains how we collect, use, share, store, and protect your personal information when you use our market intelligence platform, including our website, dashboards, data analytics tools, and related services (collectively, the "Service").

SonicAlpha is a subscription-based platform that uses AI to monitor and analyze publicly available podcast episodes for insights related to public companies. We detect narrative shifts, track emerging themes, and surface investment-relevant insights for our subscribers.

We are committed to protecting your privacy. By using SonicAlpha, you consent to the data practices described in this Privacy Policy.

If you do not agree to this Privacy Policy, please do not use our Service.

This Privacy Policy should be read in conjunction with our Terms of Service, which govern your use of SonicAlpha.

1. Information We Collect

We collect several types of information from and about you when you use SonicAlpha:

1.1 Information You Provide Directly

Account Information:

• Name
• Email address
• Password (encrypted)
• Authentication credentials when signing in via third-party providers (e.g., Google)

User Preferences and Configurations:

• Executive watchlists and saved searches
• Company and sector preferences
• Alert and notification settings
• Dashboard configurations

Communications:

• Messages you send to us through support channels
• Feedback and feature requests
• Contact form submissions

Payment Information:

• Payment card information (processed and stored securely by our third-party payment processor, Stripe — we do not store your full card details on our servers)
• Billing address
• Transaction history

1.2 Information Collected Automatically

Device Information:

• Device type and operating system
• Browser type and version
• IP address
• Language preferences
• Time zone

Usage Information:

• Pages and features you access within the Service
• Executive profiles and company pages you view
• Search queries and browsing activity within SonicAlpha
• Frequency and duration of your sessions
• Actions you take (e.g., adding to watchlists, viewing insights, exporting reports)

Location Information:

• Approximate location based on IP address

1.3 Information from Other Sources

Authentication Providers:

• Basic profile information from third-party authentication services (e.g., Google) when you choose to sign in via those providers, including your name and email address

Payment Processor:

• Subscription status and payment confirmation from Stripe

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Providing and Improving the Service

• Operating the Platform: To create and maintain your account, process your subscription, and provide access to the Service
• Personalization: To customize your experience, including personalized dashboards, watchlist recommendations, and relevant executive insights
• Platform Optimization: To analyze how the Service is used and improve features, functionality, and user experience
• Technical Support: To respond to your requests, troubleshoot problems, and provide customer support
• New Features: To develop, test, and roll out new features and services

2.2 Communication

• Service Updates: To notify you about changes to the Service, new features, or important announcements
• Alerts and Notifications: To send you narrative shift alerts, watchlist updates, and other notifications you have opted into
• Transactional Messages: To send subscription confirmations, receipts, security alerts, and support messages
• Marketing: To send promotional materials and newsletters about SonicAlpha (you can opt out at any time)

2.3 Safety, Security, and Legal Compliance

• Safety and Integrity: To detect, prevent, and address fraud, abuse, security incidents, and other harmful activity
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and law enforcement requests
• Rights Protection: To enforce our Terms of Service and protect the rights, property, and safety of SonicAlpha, our users, and others

2.4 Analytics

• Usage Analytics: To understand user behavior and preferences through aggregated analytics
• Performance Measurement: To measure engagement with features and content
• Business Intelligence: To inform business decisions, product strategy, and resource allocation

3. How We Share Your Information

We share your information in the following limited circumstances:

3.1 Service Providers

We share information with vendors and service providers who perform services on our behalf:

• Authentication: Supabase (for user authentication and account management)
• Payment Processing: Stripe (for subscription billing and payment processing)
• Cloud Infrastructure: Hosting and database services (for running the platform)
• Analytics: Analytics providers to help us understand Service usage
• Email: Email service providers for transactional and marketing communications

These service providers are contractually obligated to protect your information and may only use it to perform services on our behalf.

3.2 Corporate Transactions

We may share your information in connection with:

• Mergers, acquisitions, or sales of all or part of our business
• Bankruptcy proceedings or corporate reorganizations
• Due diligence for potential business transactions

In such cases, your information would be transferred to the acquiring entity and remain subject to the promises made in this Privacy Policy (unless you consent to a new policy).

3.3 Legal Requirements and Protection

We may disclose your information if we believe it is necessary to:

• Comply with applicable law, regulation, legal process, or enforceable governmental request
• Enforce our Terms of Service and other agreements
• Detect, prevent, or address fraud, security issues, or technical problems
• Protect the rights, property, or safety of SonicAlpha, our users, or the public

3.4 Aggregated and De-identified Information

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you, such as platform usage statistics and trends.

3.5 Corporate Group

We may share your information with:

• kGrid Inc. parent companies, subsidiaries, and affiliates for business operations and shared services

3.6 No Sale of Personal Information

We do not sell your personal information to third parties. We do not share your personal information with advertisers.

4. Data Retention

4.1 How Long We Keep Your Information

We retain your information for as long as necessary to:

• Provide the Service to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Prevent fraud and abuse

4.2 Retention Periods by Category

• Account Information: Retained while your account is active, plus up to 90 days after account deletion for recovery purposes. Financial records may be retained up to 7 years for legal compliance.
• Usage and Analytics Data: Retained for up to 3 years for analytics purposes, then aggregated or deleted.
• Communications: Support tickets and correspondence retained for up to 3 years.
• Payment Records: Retained as required by applicable tax and financial regulations.

4.3 After Deletion

After account deletion, your information may persist in backup systems for up to 90 days before being permanently removed. Aggregated, de-identified data may be retained indefinitely.

5. Your Privacy Rights and Choices

Depending on where you live, you may have certain rights regarding your personal information:

5.1 Access and Portability

• Right to Access: You can request a copy of the personal information we have about you.
• Data Portability: You can request your data in a portable, machine-readable format.
• How to Exercise: Contact us at privacy@sonicalpha.com.

5.2 Correction and Updates

• Right to Correct: You can update inaccurate information about you.
• How to Exercise: Most information can be updated directly in your account settings. For other corrections, contact us.

5.3 Deletion

• Right to Delete: You can request deletion of your personal information and account.
• Limitations: We may retain certain information for legal compliance, fraud prevention, and backup recovery (temporary).
• How to Exercise: Contact us at privacy@sonicalpha.com, or email support@sonicalpha.com.

5.4 Objection and Restriction

• Right to Object: You can object to certain processing of your information (e.g., direct marketing).
• Right to Restrict: You can request that we limit how we use your information.
• How to Exercise: Contact us at privacy@sonicalpha.com.

5.5 Withdraw Consent

You can withdraw consent for processing that requires consent (though this won't affect past processing). Note: Withdrawing consent for core features may mean you cannot use SonicAlpha.

5.6 Communication Preferences

You can control:

• Email Notifications: Opt out of marketing emails at any time using the unsubscribe link
• Alert Preferences: Manage narrative shift alerts and watchlist notifications in your account settings

6. Cookies and Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files stored on your device that help us provide and improve the Service.

6.2 Types of Cookies We Use

• Essential Cookies: Required for the Service to function (authentication, security, session management)
• Performance Cookies: Help us understand how the Service is used and improve performance
• Functionality Cookies: Remember your preferences and personalize your experience
• Analytics Cookies: Collect information about your activity to help us analyze usage patterns

6.3 Your Cookie Choices

Most browsers allow you to block or delete cookies. Note that disabling essential cookies may prevent the Service from functioning properly.

7. Data Security

7.1 Security Measures

We implement reasonable technical and organizational measures to protect your information:

• Encryption of data in transit (TLS/SSL)
• Encryption of sensitive data at rest
• Secure authentication mechanisms via Supabase
• Limited access to personal information (need-to-know basis)
• Secure payment processing via Stripe (PCI-DSS compliant)

7.2 Your Responsibilities

Security is a shared responsibility. You should:

• Choose a strong, unique password
• Keep your login credentials confidential
• Log out of shared devices
• Report suspicious activity immediately

7.3 Limitations

No system is completely secure. Despite our efforts, unauthorized access or data breaches may occur. If you believe your account has been compromised, contact us immediately.

7.4 Data Breach Notification

In the event of a data breach affecting your personal information, we will:

• Notify you as required by applicable law
• Inform you of the nature of the breach
• Describe the steps we're taking to address the breach
• Provide guidance on how to protect yourself

8. International Data Transfers

SonicAlpha is based in California, USA. Your information may be transferred to and stored in countries other than your own. When we transfer information internationally, we rely on appropriate legal mechanisms including Standard Contractual Clauses, adequacy decisions, and your consent where required.

9. Children's Privacy

SonicAlpha is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@sonicalpha.com and we will delete the account and all associated information.

10. Changes to This Privacy Policy

10.1 Updates

We may update this Privacy Policy from time to time to reflect:

• Changes in our practices
• New features or services
• Changes in applicable law
• Feedback from users or regulators

10.2 Notification

When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you through the Service or via email

10.3 Acceptance

Your continued use of the Service after we make changes constitutes acceptance of the updated Privacy Policy. If you do not agree to the changes, you should stop using the Service and delete your account.

11. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

11.1 Your Rights

• Right to Know: You can request information about the categories and specific pieces of personal information we collect, the sources, our purposes, and with whom we share it.
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You can request correction of inaccurate personal information.
• Right to Opt-Out: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

11.2 How to Exercise Your Rights

Submit a request by emailing privacy@sonicalpha.com.

We will verify your identity before processing your request. Response time: We will respond within 45 days (may extend by 45 days if necessary).

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

12.1 Legal Bases for Processing

We process your personal data based on:

• Contract: Necessary to provide the Service to you
• Consent: You have given clear consent for specific processing
• Legitimate Interests: For our legitimate business purposes (where not overridden by your rights)
• Legal Obligation: To comply with applicable laws

12.2 Your GDPR Rights

You have the right to:

• Access your personal data
• Rectify inaccurate personal data
• Erase your personal data ("right to be forgotten")
• Restrict processing of your personal data
• Object to processing
• Data portability
• Withdraw consent (where processing is based on consent)
• Lodge a complaint with a supervisory authority

12.3 Data Protection Officer

You can contact our Data Protection Officer at:

• Email: legal@sonicalpha.com
• Address: 455 Market St Ste 1940, PMB 381476, San Francisco, California 94105-2448 US

12.4 How to Exercise Your Rights

Contact us using the information in Section 13. We will respond within one month (may extend by two additional months for complex requests).

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices:

kGrid Inc.

455 Market St Ste 1940
PMB 381476
San Francisco, California 94105-2448 US

Privacy Team:

• Email: privacy@sonicalpha.com

Data Protection Officer:

• Email: legal@sonicalpha.com

General Support:

• Email: support@sonicalpha.com