Privacy Policy

1. Who we are

SonikaAI provides a SaaS service for translation, voice processing, and document workflows.

Data controller: Mykola Orlenko (Germany). Provider details and address are available in the Impressum.

2. Data we process

  • Account data: email, name, and technical authentication attributes.
  • Files and text submitted for processing, plus technical task metadata.
  • Subscription and billing status data (without storing full payment card details in SonikaAI).
  • Website usage analytics via Google Analytics โ€” only with your consent (cookie settings).

3. Payments and payment providers

We use payment providers to process subscriptions and payments (including Mollie for new subscriptions). Payment details are processed by those providers under their own security and privacy standards. SonikaAI does not store full payment card details.

4. File processing and retention

  • Your files are processed to provide the requested output.
  • Finished results remain in your account (My Files) until you delete them.
  • Intermediate and technical copies are removed automatically on a schedule (typically within a few days after processing; database row and storage copy).
  • An operational cache may temporarily store fragments for repeat runs without another API call; this is not model training.
  • Certain billing and accounting records may be kept longer where the law requires.
  • For billing we may retain technical metadata; website analytics only with consent (see section 6).

5. Third-party services

For translation, voice synthesis, and text analysis, we send necessary content fragments to cloud subprocessors. Current providers, functions, locations, and safeguards are listed in the Subprocessor Register.

If you enable personal-data masking (EU PII Masking) for a specific task:

  • It is an opt-in option enabled per task โ€” it is not automatic โ€” and it requires your consent to cloud processing (see Section 9).
  • It is available for eligible text translation, and for speech synthesis or voice narration on eligible formats; audio-transcript translation (speech-to-text followed by translation) supports masking only on plans that include it, or through a custom Contact us arrangement. Structured-data formats (JSON, YAML, YML, CSV, XML) are not eligible for masking.
  • Microsoft Azure AI Language in the EU first receives the original text to detect and mask personal data; downstream translation, speech-synthesis, or narration providers then receive only the masked text.
  • Masked values are restored locally in the finished result. This is best-effort pseudonymisation, not guaranteed anonymisation, and it does not remove personal data from the final file.

6. Cookies

We use cookies for site operation and (with your consent) analytics:

  • Essential cookies โ€” required for core website functionality
  • Analytics cookies โ€” for usage statistics via Google Analytics (consent only)
  • Functional cookies โ€” for saving your preferences and settings

Functional cookies the site sets when you sign in. They contain no personal data:

  • โ€ฆ_session โ€” the general site session;
  • โ€ฆ_visitor_session โ€” the visitor sign-in session on the โ€œTryโ€ page and when you continue to the app;
  • โ€ฆ_admin_session โ€” the administrator session (administrators only);
  • visitor_session_oauth โ€” a short marker (up to 15 minutes) while you sign in with Google;
  • landing_signed_in โ€” a marker that you are signed in: it changes the menu item to โ€œOpen Appโ€. It lasts as long as the session.

You can manage your cookie preferences at any time by clicking the button below.

Cookie Preferences

You can change your cookie settings or update saved consent at any time.

7. Your GDPR rights

You may request access, correction, restriction, or deletion of your data, subject to applicable law. You also have the right to lodge a complaint with a data protection supervisory authority in your jurisdiction.

8. Data location and international transfers

Data may be processed on servers in the EU or in other jurisdictions (including when sent to cloud API providers). For international transfers, we rely on Standard Contractual Clauses (SCC) or other legally recognized safeguards.

9. Legal bases (GDPR)

We process personal data on the following legal bases:

  • contract performance (to provide the service);
  • legitimate interests (security, abuse prevention);
  • your consent (cookies, website analytics, and certain features);
  • compliance with legal obligations.

10. Automated file processing and security

  • Files are processed automatically to generate results and are not used for other purposes except to provide the service.
  • Your files and results are not used to train artificial intelligence models. Temporary caching serves only to provide the service.
  • We use technical and organizational measures to protect data.

11. Contact

Privacy and GDPR inquiries: legal@sonikaai.com
User support: support@sonikaai.com

Last updated: July 2026