Privacy Policy

The controller of your personal data is [ŞİRKET UNVANI]. Address: [ŞİRKET ADRESİ]. Contact: support@sokraticai.com.

Account data: your email address, an irreversible hash of your password, and records of when your account was created and verified. If you sign in with Google or GitHub we receive only your verified email address and your user id at that provider.

Content data: the notes you write, the themes and connections built from them, your conversations with the companion, and the resources you upload along with the text extracted from them.

Usage data: counters such as your daily and monthly companion message count, kept so we can apply plan limits.

Subscription data: your plan, subscription status and period end date. We never see or store your card details.

We process your account and content data to perform our contract with you — that is, to provide the service.

We process usage counters to enforce plan limits, and subscription data to meet our payment and invoicing obligations.

We process security logs on the basis of our legitimate interest in detecting abuse.

For the companion to work, the relevant parts of what you write are sent to an AI provider (OpenAI), and the reply comes back from there.

This transfer happens only for an action you initiate, and only to the extent that action needs. Content sent to the provider is not used to train the provider's own models.

The transfer is unavoidable if you use the companion: you can keep writing notes without using the companion feature.

Payments and subscriptions are handled by Polar, and your email address and subscription details are shared with it for that purpose.

Verification and password reset emails are sent through Resend.

Your data is hosted on servers within the European Union (Germany). Because of the providers listed above, data may be transferred outside your country; such transfers are made under the safeguards the applicable law requires.

We use authentication cookies to keep you signed in; signing in is not possible without them.

We use one preference cookie to remember your language.

We do not use third-party advertising or tracking cookies.

We keep your account and content data for as long as your account is open.

If you close your account, your content data is deleted within thirty days. That window exists so you can recover from a deletion you did not mean to make.

Invoice and payment records are kept for as long as tax law requires.

You have the right to access your personal data, to have it corrected, to ask for its deletion, to object to processing, and to receive a portable copy of it.

To exercise any of these, write to support@sokraticai.com. We will respond within thirty days at the latest.

If you are not satisfied with our response, you have the right to complain to the competent data protection authority.

Passwords are stored as irreversible hashes; not even we can read your plaintext password.

Data is encrypted in transit, and access to content data is limited to the smallest number of people needed to run the service.

No system is completely secure. If a breach affects your personal data we will notify you and the competent authority within the periods the law requires.