SoJen.AI Privacy Policy

Effective Date: July 1, 2026 Last Updated: July 1, 2026

This Privacy Policy describes how SoJen.AI ("Company," "we," "us," or "our") collects, uses, retains, and protects information in connection with our B2B API service ("API"). This policy applies to our direct business customers ("Customers") and governs data submitted through the API.

1. Scope

This Privacy Policy applies to:

• Information Customers provide when registering for API access (account data).
• Text content submitted to the API for analysis ("Input Content").
• Technical and usage data generated by API interactions (usage logs, request metadata).

It does not directly govern the data practices of our Customers with respect to their own end users. Customers are independently responsible for their own privacy disclosures and compliance obligations toward their users.

2. Information We Collect

2.1 Account Data

When you register for API access, we collect: - Business name and contact name - Email address - Billing information (processed by our payment processor; we do not store full card numbers) - API key metadata (creation date, tier, usage counters)

2.2 Input Content

Text content you submit to the API endpoint (/v1/infer) for bias and hate-speech analysis. This may include user-generated content from your platform.

2.3 Usage and Technical Data

• Request timestamps, endpoint called, response latency
• HTTP status codes and error codes
• Volume counters per API key
• IP address of the requesting server

3. How We Use Information

3.1 Model Improvement

We retain Input Content and may use it in anonymized or aggregated form to improve and retrain our machine learning models. We apply technical safeguards to minimize retention of personally identifiable information within Input Content. If you require that your Input Content be excluded from model training, please contact us at legal@sojen.ai to discuss a contractual data processing restriction.

4. Data Retention

We will delete or anonymize data upon the expiration of these periods unless a longer retention period is required by law.

5. Data Sharing

We do not sell your data. We may share information with:

• Infrastructure providers: Railway (hosting), and other cloud infrastructure providers necessary to operate the API. These providers act as sub-processors and are bound by data processing terms.
• Payment processors: To handle billing and subscription management.
• Professional advisors: Attorneys, accountants, and auditors under confidentiality obligations.
• Law enforcement or regulators: When required by applicable law, court order, or to protect our legal rights.

6. International Data Transfers

Our API infrastructure is hosted primarily in the United States. If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, your data may be transferred to and processed in the United States. We rely on Standard Contractual Clauses (SCCs) adopted by the European Commission as the transfer mechanism for such transfers. A copy of applicable SCCs is available on request.

7. Your Rights (GDPR and Applicable Law)

If you are located in the EEA, UK, or a jurisdiction with similar data protection laws, you have the following rights with respect to your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate data.
• Right to erasure ("right to be forgotten"): Request deletion of your personal data, subject to our legal retention obligations.
• Right to restriction: Request that we restrict processing of your data in certain circumstances.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, withdraw at any time without affecting prior processing.

To exercise any of these rights, contact us at legal@sojen.ai. We will respond within thirty (30) days. You also have the right to lodge a complaint with your local data protection authority.

8. Children's Data

The API is designed for business use and is not directed to children. We do not knowingly collect personal data directly from children under 13. Customers who submit content from platforms serving children are solely responsible for compliance with the Children's Online Privacy Protection Act (COPPA) and similar laws. If we become aware that Input Content contains PII of a child under 13 submitted without required authorization, we will take steps to delete that data.

9. Security

We implement administrative, technical, and physical safeguards appropriate to the sensitivity of the data, including: - TLS encryption for all API communications - API key-based authentication with hashed key storage - Access controls limiting employee access to Customer data - Regular security reviews of infrastructure

No system is perfectly secure. In the event of a data breach affecting your data, we will notify you as required by applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via portal notification at least thirty (30) days before the changes take effect. The "Last Updated" date at the top of this page reflects the most recent revision.

11. Contact

For privacy-related inquiries, rights requests, or complaints:

SoJen.AI Email: legal@sojen.ai Website: sojen.ai