LAST UPDATED
May 6, 2026
Privacy Policy
Privacy Policy
This Privacy Policy explains how Soontra ("Soontra," "we," "us," and "our") collects, uses, discloses, stores, and protects information when you access or use our websites, applications, products, dashboards, collaboration tools, analytics tools, AI features, storage features, and related services (collectively, the "Service").
If you use the Service on behalf of a company, agency, team, brand, or other organization, this Privacy Policy applies to information processed through that organization's workspace.
Table of Contents
Information we collect
Account and profile information
We collect information you provide when you create or manage an account, including name, email address, password-related authentication data, profile picture, invite-code status, account settings, terms acceptance timestamps, workspace memberships, and authentication-provider information.
If you sign in with Google OAuth or another identity provider, we may receive profile information such as your name, email address, profile picture, provider identifier, and authentication status.
Workspace and collaboration information
We collect workspace information such as workspace names, roles, permissions, projects, tasks, statuses, tags, folders, files, comments, documents, notifications, team members, invitations, workflow settings, share links, and activity within the workspace.
Uploaded media and files
We collect and process files and media you upload or import, including videos, audio, images, PDFs, documents, metadata, filenames, file sizes, MIME types, duration, thumbnails, storage keys, upload status, processing status, and related workspace context.
Depending on the feature, we may generate or store derived information such as transcripts, speech timing, OCR text, visual descriptions, scene summaries, embeddings, searchable indexes, moderation signals, thumbnails, previews, extracted text, captions, AI summaries, recommendations, and other analysis outputs.
Prompts, AI interactions, and generated outputs
We collect prompts, instructions, AI-agent interactions, tool or page-action context, generated responses, execution traces, confirmations, feedback, and related usage information so we can provide AI-assisted features, improve reliability, debug issues, maintain safety controls, and enforce usage limits.
Connected-platform information
If you connect YouTube, TikTok, Instagram, or another third-party platform, we collect the information authorized by you and made available by that platform, including account identifiers, profile details, OAuth scopes, token metadata, connection status, analytics data, and related sync records.
More detail for YouTube, TikTok, and Instagram appears below.
Billing information
If you purchase a paid plan or add-on, our payment processor collects and processes billing information such as payment method details, billing address, tax information, invoices, subscription status, transaction history, and fraud-prevention signals. Soontra does not store full credit or debit card numbers.
Support and communications
We collect information you send to us through support, email, feedback, demos, sales communications, surveys, bug reports, or other communications.
Usage, device, log, and security information
We collect technical and usage information such as IP address, device and browser information, session data, pages viewed, feature usage, timestamps, referrers, error logs, performance data, rate-limit data, authentication events, integration events, security events, and approximate location inferred from IP address.
Cookies and similar technologies
We may use cookies, local storage, session storage, and similar technologies to keep you signed in, remember settings, secure the Service, measure usage, improve performance, and prevent abuse.
YouTube and Google user data
Soontra uses YouTube API Services. Google's own privacy practices are described in the Google Privacy Policy.
If you connect YouTube, Soontra requests read-only Google OAuth scopes for YouTube analytics and channel metadata, currently including:
https://www.googleapis.com/auth/yt-analytics.readonlyhttps://www.googleapis.com/auth/youtube.readonly
Depending on your channel and YouTube API availability, Soontra may collect and process YouTube information such as channel ID, channel title, channel thumbnail, subscriber counts, view counts, watch time, upload counts, video performance metrics, likes, comments counts, shares, traffic sources, audience demographics, geography, device types, playback locations, playlists, retention data, content types, reporting periods, deltas, and related analytics.
Soontra uses YouTube and Google user data only to provide, maintain, secure, and improve user-facing Soontra features that you enable, such as analytics dashboards, workspace reports, AI-assisted summaries, trend detection, support, security, and troubleshooting.
Soontra does not use YouTube or Google user data to upload videos, publish content, modify channel metadata, manage playlists, post comments, send messages, delete content, serve ads, retarget ads, personalize third-party ads, sell data, broker data, conduct surveillance, determine creditworthiness, or make lending decisions.
Soontra's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
TikTok user data
If you connect TikTok, Soontra requests read-only TikTok OAuth scopes that may include:
user.info.basicuser.info.statsvideo.list
Depending on your account and TikTok API availability, Soontra may collect and process TikTok information such as open ID, display name, avatar URL, follower counts, following counts, like counts, video counts, public-video metadata, public-video performance counters, reporting periods, deltas, sync status, and related analytics.
Soontra uses TikTok data only to provide, maintain, secure, and improve user-facing Soontra features that you enable, such as TikTok dashboards, workspace analytics, AI-assisted summaries, trend reporting, support, security, and troubleshooting.
Soontra does not use the TikTok integration to publish videos, upload drafts, modify profile data, manage comments, send messages, access inbox content, run ads, or otherwise mutate your TikTok account.
Instagram User Data
If you connect Instagram, Soontra requests read-only Instagram API with Instagram Login scopes that may include:
instagram_business_basicinstagram_business_manage_insights
Depending on your account and Meta API availability, Soontra may collect and process Instagram information such as Instagram account ID, username, account name, profile picture, media IDs, media type, timestamps, captions, permalinks, account insights, media insights, views, reach, follower counts, accounts engaged, interactions, profile link taps, watch-time metrics where available, audience or demographic information where available, reporting periods, deltas, sync status, and related analytics.
Soontra uses Instagram data only to provide, maintain, secure, and improve user-facing Soontra features that you enable, such as Instagram dashboards, workspace analytics, AI-assisted summaries, growth and performance reporting, support, security, and troubleshooting.
Soontra does not use the Instagram integration to publish content, upload media, manage comments, send messages, search hashtags, manage ads, access direct messages, or otherwise mutate your Instagram account.
If you remove Soontra's access through Meta or Instagram controls, Meta may send Soontra a deauthorization callback. If you request deletion through Meta or Instagram controls, Meta may send Soontra a data deletion callback. When Soontra receives a valid signed callback, Soontra deletes or disconnects matching Instagram connection records and removes retained Instagram analytics rows associated with the matching connection as required by the callback flow.
How we use information
We use information to:
Provide, operate, maintain, and secure the Service.
Create and manage accounts, sessions, workspaces, roles, and permissions.
Store, process, preview, stream, download, index, search, and organize uploaded files.
Generate transcripts, summaries, visual descriptions, search indexes, embeddings, AI outputs, analytics, notifications, recommendations, and workspace insights.
Provide YouTube, TikTok, Instagram, and other connected-platform dashboards and reports.
Operate AI-agent features, page actions, tool execution, semantic search, content repurposing, and analytics explanations.
Process billing, subscriptions, add-ons, quotas, storage limits, AI minutes or credits, invoices, taxes, and payment disputes.
Send service messages, security notices, product updates, billing notices, support responses, and other communications.
Monitor performance, debug errors, prevent abuse, enforce terms, rate-limit requests, detect suspicious activity, protect users, and maintain audit logs.
Comply with law, legal process, platform requirements, and enforceable requests from courts, regulators, law enforcement, and connected platforms.
Analyze and improve the Service using aggregated, de-identified, or otherwise privacy-protective information where appropriate.
AI processing
Soontra uses AI-related systems to provide features such as transcription, visual analysis, semantic search, summaries, recommendations, analytics explanations, agentic workspace actions, and content repurposing.
We may use third-party AI, transcription, embedding, moderation, storage, infrastructure, and related service providers to process User Content and connected-platform data for user-facing features you enable. The specific provider, model, routing path, prompt strategy, or inference method may change over time and is not a commitment of the Service.
For Google user data obtained through Google APIs, AI-related processing is limited to user-directed, user-facing Soontra features. We do not use Google user data, and do not permit our service providers to use Google user data, to create, train, improve, or fine-tune generalized, foundation, frontier, or cross-customer AI or machine-learning models. We also do not store Google user data in generalized, foundation, or frontier models.
We do not sell your uploaded content or connected-platform data. For non-Google workspace content, we use content to provide, secure, support, and improve Soontra features, and we may use aggregated or de-identified information for product analytics, reliability, safety, and quality.
You should not submit sensitive information to AI features unless you have authority to do so and are comfortable with that information being processed to provide the requested feature.
Google API Limited Use commitments
For information received from Google APIs, Soontra follows the Google API Services User Data Policy, including Limited Use requirements.
This means, among other things:
We limit use of Google user data to providing or improving user-facing features that are visible in Soontra.
We do not sell Google user data.
We do not transfer Google user data to advertising platforms, data brokers, or information resellers.
We do not use Google user data for serving ads, retargeting, personalized advertising, or interest-based advertising.
We do not use Google user data to determine creditworthiness or for lending purposes.
We do not use Google user data, or allow service providers to use Google user data, to create, train, improve, or fine-tune generalized, foundation, frontier, or cross-customer AI or machine-learning models.
We do not store Google user data in generalized, foundation, or frontier AI models.
We restrict human access to Google user data to situations such as user-directed support, security, abuse investigation, legal compliance, or aggregated/internal operations allowed by applicable policy.
We require personnel and service providers who handle Google user data to follow applicable confidentiality, security, and policy requirements.
How we disclose information
We may disclose information:
To workspace members according to workspace roles, permissions, sharing settings, comments, documents, projects, files, dashboards, and collaboration features.
To service providers that help us operate the Service, such as hosting, database, storage, authentication, security, payment, billing, analytics, email, support, AI, transcription, embedding, moderation, monitoring, and infrastructure providers.
To connected platforms when needed to authenticate, refresh, revoke, sync, validate, or operate integrations you enable.
To payment processors for billing, tax, fraud-prevention, subscription, and dispute handling.
To comply with law, legal process, court orders, subpoenas, government requests, platform requirements, or enforceable legal obligations.
To enforce our Terms, protect rights, prevent harm, investigate abuse, secure the Service, or respond to emergencies.
In connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction, subject to applicable legal and platform-policy requirements.
With your consent or at your direction.
We do not sell your Google user data, YouTube data, TikTok data, Instagram data, uploaded media, or workspace content.
Security
We use technical and organizational safeguards designed to protect information, including authentication controls, encrypted token storage, workspace isolation, database-level access controls, role-based workspace permissions, rate limits, login lockout controls, abuse-prevention checks, infrastructure monitoring, and operational logging.
No security measure is perfect. You are responsible for protecting your credentials, devices, networks, workspace permissions, third-party accounts, and exported or downloaded content.
Retention
We retain information for as long as reasonably necessary to provide the Service, maintain workspaces, comply with legal and platform obligations, resolve disputes, enforce agreements, secure the Service, maintain backups, support billing, and operate legitimate business records.
Retention periods vary based on the type of information:
Account and workspace records are generally retained while the account or workspace is active.
Uploaded files and derived indexes are generally retained while the file, workspace, or account remains active, unless deleted or subject to a shorter retention setting.
Billing records may be retained as required for tax, accounting, dispute, fraud-prevention, and legal purposes.
Security logs, operational logs, telemetry, and backup copies may be retained for a limited period after deletion from active systems.
Connected-platform tokens and connection records are retained as needed to operate, secure, troubleshoot, revoke, reconnect, audit, or comply with platform and legal requirements. When an integration is disconnected, some deactivated connection records or encrypted token records may remain for a limited period where needed for security, audit, revocation, troubleshooting, legal, or platform-compliance purposes. For YouTube/Google authorized data, Soontra follows the YouTube API Services Developer Policies and Google API Services User Data Policy, including token revocation and deletion or refresh of retained YouTube API data within applicable platform-required periods.
Deletion and revocation
You may delete uploaded files through the Service where available. When a file is deleted, Soontra removes the active file record and associated active searchable/indexed content that the Service maintains for that file, subject to backup, security, legal, moderation, and technical limitations.
Workspace owners may delete workspaces where the Service provides that option, subject to ownership, last-workspace, billing, moderation, legal, and technical limits. Workspace deletion removes active workspace projects, files, members, settings, and associated data according to the product's deletion flow, subject to backup, security, legal, moderation, and technical limitations.
You may request account deletion where the Service provides that option or by contacting info@soontra.com. Account deletion may require reauthentication and may be limited if you are the sole owner of a workspace with other members.
You may disconnect YouTube, TikTok, or Instagram integrations through Soontra settings where available. Disconnecting an integration stops future syncs and disables Soontra's active use of that connection. Depending on the platform and integration, Soontra may attempt token revocation, clear caches, deactivate connection records, retain limited records for security or audit purposes, or require reconnection if access expires or is revoked.
For YouTube, you may also revoke Soontra's access through your Google account security settings. Soontra will use reasonable efforts to revoke YouTube authorization tokens promptly where technically available and will delete stored YouTube user data that you request us to delete as soon as possible and within 7 calendar days, subject to legal obligations. For YouTube API data that may be retained only while authorized or refreshed, Soontra will delete or refresh that data within the periods required by YouTube API Services policies.
You may also revoke connected-platform access through platform controls, such as TikTok app/account settings or Meta/Instagram app settings where those platforms provide the control.
For valid Meta or Instagram deauthorization and data deletion callbacks, Soontra removes matching Instagram connection records and retained Instagram analytics rows associated with the matching account as described above.
Your choices and rights
Depending on your location and applicable law, you may have rights to access, correct, delete, export, restrict, or object to certain processing of personal information. You may also have the right to opt out of certain disclosures or uses.
To make a privacy request, contact info@soontra.com. We may need to verify your identity and authority before acting on a request. If your information is controlled by a workspace owner or organization, we may direct your request to that workspace owner or organization.
You can also control certain information directly in the Service, including account profile details, workspace settings, notification preferences, file deletion, workspace deletion, integration disconnects, and billing settings, depending on your role and plan.
Communications
We may send transactional, security, billing, product, and support communications. You may opt out of certain non-transactional communications, but we may still send messages necessary to provide, secure, or administer the Service.
International processing
Soontra is headquartered in the United States. We and our service providers may process information in the United States and other jurisdictions. Those jurisdictions may have data protection laws different from where you live.
Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. The Service is intended for users who meet the eligibility requirements in our Terms of Service. If you believe a child provided personal information to us, contact info@soontra.com.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. If changes are material, we will provide notice through the Service, email, or another reasonable method. The updated Privacy Policy will be effective when posted or as stated in the notice.
Contact
For questions or requests about this Privacy Policy or our data practices, contact:
Soontra Miami, Florida, United States Email: info@soontra.com
© 2026 Soontra. All Rights Reserved
© 2026 Soontra. All Rights Reserved