Privacy Policy

Last updated: July 2026

This Privacy Policy explains how SoonStudio collects, uses, stores, and shares information when you use our website, API, Playground, Canvas, billing, and related services. By using SoonStudio you acknowledge this Policy together with our Terms of Service and Disclaimer.

1. Information We Collect

Account data: email, display name, authentication identifiers (including Google sign-in identifiers when you choose that method), and profile preferences.

Billing data: order identifiers, credit/plan purchase records, payment status, and limited payment metadata from payment processors (we do not store full card numbers).

Service usage: API keys (hashed/secret handling as applicable), model/request metadata, channel groups, timestamps, approximate usage volumes, error diagnostics, and security logs needed to operate the relay.

Content you submit: prompts, files, and other inputs you send through Playground, Canvas, or API. These may be transmitted to upstream model providers to fulfill your request.

Technical data: IP address, browser/device type, referrer, cookies or local storage identifiers for session, language, and security.

2. How We Use Information

Provide, maintain, and improve the catalog, Playground, Canvas, API relay, billing, and support.

Authenticate users, protect accounts, prevent abuse/fraud, and comply with law.

Process payments, deliver credits/plans, and send transactional notices (receipts, security alerts).

Monitor service health, debug failures, and enforce acceptable-use rules.

3. Sharing & Processors

Upstream AI providers: request payloads necessary to return model responses.

Payment processors and banking partners: data needed to complete checkout.

Infrastructure vendors (hosting, email, analytics/security tooling) acting as processors under our instructions.

Authorities when required by law, regulation, or valid legal process.

We do not sell your personal data.

4. Cross-Border Transfers

SoonStudio operates as a cross-border API relay. Data may be transmitted, processed, or stored in multiple regions. You are responsible for assessing whether your use and transfers are lawful for your jurisdiction and end users, and for providing any required notices or consents to your data subjects.

5. Retention & Security

We retain account, billing, and log data for as long as needed to provide services, meet legal/accounting obligations, resolve disputes, and enforce agreements. We apply reasonable technical and organizational measures, but no method of transmission or storage is perfectly secure.

6. Your Choices

You may update profile information in Account settings, manage API keys, and request account closure or data-related inquiries via [email protected]. Where mandatory privacy laws grant access, correction, deletion, or objection rights, we will respond as required by applicable law.

7. Cookies & Local Storage

We use cookies and local/session storage for authentication, language preference, feature flags, and basic analytics needed to run the site. You can control cookies through your browser settings; some features may not work if storage is disabled.

8. Changes & Contact

We may update this Policy by posting a revised version on this page. Continued use after changes constitutes acceptance where permitted by law.

Privacy questions: [email protected].