Sonderous Starter — Privacy Policy

Effective date: September 20, 2026 · Last updated: September 20, 2026

Who we are

Sonderous Starter is made by Sonderous Systems Inc., a corporation incorporated federally in Canada under the Canada Business Corporations Act on August 31, 2026, registered in Ontario (Ontario Corporation Number 1001732009), with its office at 1416 McGregor Ave, Thunder Bay, Ontario P7E 5E6, Canada. Our Privacy Officer is Nolan Dennhardt, reachable at privacy@sonderoussystems.ai. This policy explains what the Sonderous Starter app collects, why, where it goes, and what you can do about it.

What Sonderous Starter does

You connect a business mailbox. The app reads new messages, decides which ones need your attention, tells you, drafts replies you can approve, and keeps a to-do list you can add to by typing or speaking. Drafts are saved into your own mailbox; we never send email on your behalf in this version.

What we collect

Account information you give us: your email address, your name, and your business name. We verify your address by emailing you a code. We do not use passwords.

A connection to your mailbox: when you connect Gmail or Microsoft, your provider gives us a token that lets the app read your mail and create drafts. We store that token encrypted. You sign in on Google's or Microsoft's own page; we never see your password.

What we decide about your mail: for each message the app processes we keep the message's provider identifiers, the sender's name and address, the subject line, the time received, our classification (for example "needs you" or "newsletter"), a one-line summary we write, and any to-do we extracted from it, along with what you did about it (dismissed, handled) and when.

What we do not keep: the body of your messages and their attachments are read while the app processes them and are discarded within 15 minutes. They are not stored in our database, our backups, or our logs. We keep no photos, no passwords, and no payment details (there is nothing to pay).

Contacts: a list of the people who email you, built from your own mail: address, name, first and last seen, how often. This is what lets the app tell a customer from a newsletter.

Your to-dos and the messages you type or say to the assistant.

Usage and device information: counts of what the app did for you (messages processed, requests made), the cost of the computing behind them, your device's push-notification token, app version, and crash or error diagnostics. Diagnostics are used only to fix problems and are never used to train AI models.

Why we use it

To provide the service: read, classify, summarize, draft, remind.
To send you notifications you have turned on.
To keep the service fair for everyone: usage counts decide whether automated or extreme use is slowed. We look at amounts and patterns, never at content, to do this.
To keep the service working: diagnostics, security, backups.
To tell you about the full Sonderous platform if you ask us to. We do not send marketing email without your consent, and every marketing message identifies us and includes a working unsubscribe.

We do not sell your information. We do not use your information to build profiles for advertising.

Who else processes it

Your mail provider (Google or Microsoft): we read from and write drafts to your mailbox using the permission you granted. You can revoke it at any time in your Google or Microsoft account settings, or in the app.
Anthropic, PBC (United States): the AI provider that reads message content to classify and summarize it and to answer you in chat. Message content is sent to Anthropic's API for processing and is not used to train their models. Under their standard terms it may be retained by Anthropic for up to 30 days for abuse monitoring. This means content leaves Canada during processing.
Amazon Web Services (Canada Central region): hosts our servers and database in Canada.
Apple and Google: deliver push notifications to your phone (the notification text is limited to what you would see on the card).
Cloudflare: network and security services in front of our website and operator tools.

Google API Services — Limited Use. Sonderous Starter's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain words: Gmail data is used only to provide the features you see, is never sold, is never used for advertising, and is read by a human only with your permission, for security, or as the law requires.

Where it lives and how it is protected

Our servers and database are in Canada (AWS Canada Central). Every record is tagged with your account and the database itself refuses to return one account's rows to another. Your mailbox token is encrypted with a key that is not stored with the data. Disks and backups are encrypted. Our servers have no open administrative ports. Our staff cannot read your mail index without a logged, exceptional grant; day to day they see counts and costs only.

How long we keep it

While your account is active. If you disconnect a mailbox, its index stays so your to-dos and history keep working, until you delete it. If you delete your account, every row tied to it is removed immediately and the mailbox token is revoked at your provider; encrypted backups age out within 30 days. Diagnostics are kept for 90 days.

Your choices and rights

Export: one tap in Settings produces a file with everything we hold about you.
Delete: one tap in Settings deletes your account and everything in it, and revokes our access to your mailbox. We may ask you to confirm by email code.
Disconnect: remove a mailbox at any time; the app stops reading it immediately.
Notifications: on or off, per kind, in Settings and in your phone's settings.
Access and correction: email privacy@sonderoussystems.ai. We answer within 30 days.
Withdraw consent: disconnecting or deleting withdraws it. Some features cannot work without the data they need; we will tell you which.
Complaints: contact our Privacy Officer first. You may also complain to the Office of the Privacy Commissioner of Canada, and, if you live in Quebec, to the Commission d'accès à l'information.

Quebec residents

If you live in Quebec, the rights above include the right to data portability in a structured format and the right to be informed about automated decisions. Our classification of your mail is an automated decision that affects only what the app shows first; you can always see every message in your mailbox, and you can ask us how a classification was made.

Children

Sonderous Starter is a business tool for adults. We do not knowingly collect information from anyone under 18.

Changes

If we change this policy in a way that matters, we will tell you in the app and by email before it takes effect, and we will keep earlier versions available on request.

Contact

Sonderous Systems Inc. · 1416 McGregor Ave, Thunder Bay, Ontario P7E 5E6 · privacy@sonderoussystems.ai · Privacy Officer: Nolan Dennhardt