Sonomir turns files into documents. To do that it has to see your files, briefly. This page says exactly what is kept, for how long, and who else touches it — in plain words, because most of what people upload here is private.
The short version
- Uploaded files are deleted from storage when the job that uses them ends, whether it worked or not.
- The result of a job is kept so you can come back and download it. Nobody else can open it, and it is never published.
- You can use every tool without an account. An email address is only needed to hold credits.
- Analytics count page views and button presses. They never see what is in your files, and screen recording is switched off.
- Nothing is sold, and nothing is used to train anyone's model by us.
Files you upload
A file you upload is stored privately, sent to the service that reads it (see "Who else handles your data" below), and deleted from our storage when the job finishes. Files are never public and are only reachable through the job that created them.
For bank statements, only the last four digits of an account number are kept in the result.
Results
The result of a job — a transcript, extracted text, a table, a list of transactions — is stored with the job so the page and the downloads still work if you come back later. A job belongs either to the browser session that started it or, once you sign in, to your email address. Nobody else can open it.
Results are kept until you ask for them to be deleted. Email hello@sonomir.com with the address you used, or describe the job if you never signed in, and it will be removed.
Your email address and credits
An email address is collected only when you sign in or buy credits. It is used to send a one-time sign-in link and receipts, and to hold your credit balance. There is no password, no profile and no newsletter.
A record of credit purchases and spending is kept for accounting, even after a balance is used up.
Payments are handled by Dodo Payments, which acts as the merchant of record: it takes the payment, collects any sales tax or VAT, and sends the receipt. Card details go to Dodo Payments directly and never reach Sonomir; what Sonomir receives is the email address, the pack bought and a payment reference.
Limits and abuse prevention
Free allowances are counted per visitor per day. To do that, and to stop scripts from draining the free tier, a one-way hash of your IP address and a random browser identifier are stored with your usage counts. The hash cannot be turned back into your address.
Cookies
- sn_anon — a random identifier that proves the jobs you started are yours when you have not signed in. 30 days.
- sn_session — keeps you signed in after you open a sign-in link. 180 days, removed when you sign out.
- sn_fp — a random browser identifier used, with the hashed IP, to count the free daily allowance. It identifies nothing about you. About a year.
- Analytics — when analytics are enabled, PostHog sets its own cookie to tell one visit from the next.
There are no advertising cookies.
Who else handles your data
These services process data on Sonomir's behalf, only to run the tools:
- Vercel — hosting, and the AI Gateway that routes reading and summarising requests to model providers such as Google, OpenAI and Anthropic.
- Groq or Deepgram — audio and video transcription.
- Supabase — the database and private file storage.
- Dodo Payments — checkout, payments, tax and receipts, as merchant of record.
- Resend — sign-in and receipt emails.
- PostHog — product analytics, without screen recording.
Each processes your data under its own terms and retention rules. Model and transcription providers receive the file or page being read and return the result; Sonomir does not ask them to keep it or learn from it.
Your rights
You can ask what is held about you, have it corrected, or have it deleted — jobs, results, your email and your balance. Email hello@sonomir.com. Requests are handled within 30 days, usually much sooner.
Changes
If this page changes in a way that matters, the date at the top changes with it, and a significant change is announced on the site before it takes effect.