SoeMind
Privacy Policy
Last updated October 5, 2026
01Who we are
SoeMindAI, Inc. (a Delaware corporation, Newark, Delaware, USA) operates SoeMind. This policy explains what we collect, how we use it, and your rights. It applies to the app, website and APIs.
02Information we collect
Account data (email, and basic OAuth profile if you sign in with Google); your projects, brand settings, chat history, prompts, uploaded files and generated outputs; a complete billing ledger (every credit movement, itemized); and basic technical/usage data (device identifier, IP, request logs, first-party product-analytics events) needed to run and secure the service.
03Personal data inside your content
For personal data contained in content you upload (for example another person's image or voice in a video you re-dub), you are the data controller: you decide to upload it and you are responsible for having a lawful basis and consent. We process it only on your instructions, as a processor, to deliver the feature you requested, under the retention rules below.
06Connected AI assistants (ChatGPT, Claude and similar)
You can optionally connect SoeMind to an external AI assistant (for example ChatGPT or Claude) so it can work with your account. Connecting is always initiated and approved by you on a SoeMind consent screen that lists exactly what the connection can do. A connected assistant can see your email and credit balance, your project names, your recent generations (including their prompts), price estimates, links to your finished files, and which social accounts are connected — and anything it reads becomes visible to that assistant's provider (for example OpenAI or Anthropic) under their own privacy terms. It cannot change your plan, billing, password or account settings; it can only start a generation after confirming the price; and it can save post drafts to your content calendar or - only when you explicitly approve that specific post in the assistant's own chat - queue it to your connected social accounts. You can disconnect at any time in Settings → Devices, which immediately revokes the connection's access. We never connect your account to an external assistant ourselves — only you can.
07Google sign-in (Limited Use)
If you sign in with Google, our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements - we use it only to authenticate you and operate your account.
08How we use it
To provide and personalize the service, generate your content, process payments, enforce limits and moderation, keep the service secure, prevent fraud and abuse, comply with law, and communicate with you about your account. We may produce aggregated or anonymized statistics that do not identify you.
09We never sell your data
We do not sell your personal data, we do not share your content with advertisers, and we do not use it for cross-context behavioral advertising — on any plan, ever.
10How content may be used for improvement
Content and prompts on paid subscriptions are never used to train AI models (ours or our providers') and are processed only to deliver the service to you. Free, trial and promotional usage is different: we may use those prompts and outputs — after removing your account identifiers — to evaluate quality and improve our product, prompting and safety systems, and such requests may be routed through model providers or endpoints whose terms allow them to use submitted data to improve their models. Any plan where this applies is clearly labeled before you use it. Two things never change regardless of plan: we never sell your data, and face or voice media you upload is never used for training or improvement by us or shared with providers for that purpose — it is processed only to produce the output you requested. Upgrading to a paid plan stops improvement use for all content you create after upgrading.
11Face & voice media (biometric notice)
Photos, videos and voice recordings you upload for features that need them (talking avatars, re-dubbing, voice cloning) are processed only to produce the output you requested, under the retention rules below. We do not use them to identify, verify or authenticate individuals; we do not build, derive or store biometric templates (faceprints, voiceprints) from them - any transient signal a model derives during generation exists only for that run; and we never sell, lease or disclose such media for profit. Where the law of your state or country requires separate consent before processing face or voice media, we obtain it separately from this policy. Providing such media is voluntary; declining only limits the specific features that need it.
12Processors & sub-processors
Generation runs on third-party AI providers (e.g. Google Gemini/Vertex, OpenAI, BytePlus ModelArk (Seedance/Seedream), ElevenLabs, OpenRouter-hosted models, RunPod) strictly to fulfill your request, under their terms. Payments are processed by Stripe (we never see your full card number). Files are stored on Cloudflare R2 (S3-compatible object storage, encrypted at rest). These providers process data on our behalf under contract. The full current list, with each provider's purpose and processing location, is maintained at /legal/subprocessors.
13Other sharing
Beyond the processors above, we share personal data only: with professional advisors (lawyers, accountants, auditors) under confidentiality where needed; with authorities or other parties where we believe in good faith the law requires it or to protect rights, safety or the service; with a successor entity in a merger, acquisition, financing or sale of assets (your data remains subject to this policy or one at least as protective, and we will notify you of any such transfer); and with third parties you direct us to share with. We never share your content with advertisers.
14International transfers
We are US-based and our providers may process data in the US and other countries. Where required (e.g. for EU/UK or Thailand PDPA data), we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy basis for cross-border transfers.
15Data retention & deletion
Working files - intermediate outputs a production consumed on the way to a final result (for example keyframes that fed a video clip) - are hidden from your gallery and deleted automatically 7 days after creation; their expiry date is shown in the Library's Working files tab, and saving a file keeps it permanently. Unsaved outputs expire automatically (30 days on accounts without an active subscription, 90 days on subscribed accounts). Saved content is kept while your account is active, within your plan's storage quota. If your account becomes inactive (60 days with no sign-in, generation, or active subscription): stored files may move to cold storage after notice (access is not interrupted); after 12 months of inactivity, content above a 5 GB retained allowance may be deleted after email warnings (registered brand assets and recent saved work are preserved first); after 24 months, remaining content may be deleted and the account closed, after final warnings that include an archive download link. Accounts that never purchased a plan follow a shorter schedule: content above the allowance after 90 days of inactivity, full cleanup after 12 months. You can delete your account in Settings at any time: your content is removed after a 30-day grace period; anonymized billing records are retained as required for financial and legal compliance.
16Legal bases (GDPR / PDPA)
Where the EU/UK GDPR, Thailand's PDPA or similar laws apply, we process personal data on these bases: performance of our contract with you (running the service, generating your content, billing); legitimate interests (securing the service, preventing fraud and abuse, and improving the product using de-identified free-tier content as described above, balanced against your rights); consent, where the law requires it (for example certain uses of face/voice media you upload, or marketing emails) — which you may withdraw at any time without affecting prior processing; and legal obligation (tax and financial record-keeping). SoeMindAI, Inc. is the data controller for account and service data.
17Your rights
Depending on where you live (GDPR/UK, California CCPA, Thailand PDPA and similar), you may request access to, correction, deletion, a portable copy, or restriction of your personal data, and object to or withdraw consent for certain processing. We do not sell or “share” personal data for cross-context behavioral advertising. To exercise any right, contact contact@soemindai.com — we respond within 30 days (or the shorter period your local law requires). EU/UK users may also complain to their supervisory authority, and Thai users to the PDPC.
18Children
The service is not intended for anyone under 18. We do not knowingly collect data from children; if you believe a child has used the service, contact us and we will delete the data.
19How we protect your data
Encryption in transit (TLS) for all traffic and encryption at rest on our storage provider; access controls so your content is only readable by your account and the systems that serve it; authentication tokens with a device manager in Settings to review and revoke active sessions; payment card details handled entirely by Stripe and never stored on our servers; AI providers receive only what is needed to fulfill each request; moderation and abuse-prevention systems; and the retention limits and deletion rights described above. We maintain procedures for handling personal-data breaches, including notifying regulators and affected users where the law requires. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security — report suspected issues to support@soemindai.com.
20No automated decisions with legal effects
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects about you.
22Changes & contact
We may update this policy and will note the date above; material changes are announced in-app. Privacy questions and data-rights requests: contact@soemindai.com (product support: support@soemindai.com). SoeMindAI, Inc., c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, USA.
05Comments and your audience
Comments on your posts are written by other people, and they are those people’s personal data — not yours and not ours. When we import a comment we store the commenter’s display name as the platform provides it, the comment text, its like count and timestamp, and an automated sentiment/intent classification generated by our AI provider, so that you can read and respond to audience reaction in one place. We never use comments to train AI models, we never sell them, and we share them with no one except the AI provider that performs that classification. You hold the direct relationship with your audience: you are responsible for how you use what they wrote and for responding to requests they make to you about it. We keep comments only while the account stays connected — disconnecting deletes them, along with the rest of that account’s platform data, within 30 days. If a commenter contacts us directly, we will pass the request to you and, where the law requires us to act ourselves, delete the comment from our systems.