Legal

Privacy Policy

Effective: October 20, 2026

The Short Version

Your conversations are yours. Files, memory, and chat history live on your dedicated server, not in a shared Sinora database. When you use an AI feature, only the content needed to provide that feature is sent to the processors described below.

1. Who We Are

Sinora is operated by WCA Technologies ("we," "us," "our"). This policy explains what data we collect, what we don't, and how we handle it.

Contact us anytime: [email protected]

2. What We Collect

Account Information

  • Email address: used for authentication and account communications
  • Payment information: processed and stored by Stripe (we never see your full card number)

Usage Metrics

  • Credit consumption and balance
  • Message counts and types (Smart, Deep Think, media)
  • Session timestamps and feature usage
  • Error logs for debugging

These metrics help us improve the platform and monitor system health. They contain no conversation content.

3. What We Do NOT Collect

We do not collect, store, or access your stored chat history.

Every customer gets their own isolated, dedicated server. Your conversations, files, and memory are stored there, not in a shared Sinora database, and our team does not read them unless you explicitly request support that requires access.

AI and Media Processing

  • AI prompts and outputs are processed by our model provider so the assistant can answer
  • Images, videos, and documents may be sent to the model provider when you use vision, generation, or OCR features

4. Cookies

We use minimal cookies for:

  • Authentication: keeps you logged in
  • Preferences: remembers your settings

We do not use advertising or tracking cookies. No third-party analytics scripts run on our platform.

5. Third Parties

We work with a limited number of trusted providers:

  • Stripe: payment processing. Stripe handles your billing data under their own privacy policy.
  • Cloudflare: secure web delivery, our API edge, sign-in sessions, account records, and usage or billing ledgers. Cloudflare processes request, security, and limited session metadata.
  • OVHcloud: dedicated VPS hosting. Servers can be provisioned in supported regions for data-residency needs.
  • Z.ai: AI model provider. Prompts, uploaded media, generated-media prompts, and document content needed for AI responses are processed under Z.ai's API terms and data processing addendum. Z.ai states that API customer data is generally processed in Singapore.
  • Resend: delivers account and service emails.

We do not sell or rent your data. We share data only with the providers listed here, services you connect, or when required by law.

6. Data Retention

  • Account data: retained while your account is active, deleted within 72 hours of account closure
  • Chat data: stored on your dedicated server; deleted when your server is deprovisioned (within 72 hours of cancellation)
  • Payment records: retained as required by law (typically 7 years for tax purposes)
  • Usage metrics: aggregated and anonymized after 90 days

7. Security

The Sinora app connects to our API over HTTPS. Account access is authenticated and private workstations are isolated by customer.

No system is perfectly secure. If you believe your account or data may be at risk, contact [email protected] right away.

8. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate information
  • Delete your account and all associated data
  • Export your data in a portable format
  • Object to data processing where applicable

To exercise any of these rights, email [email protected]. We'll respond within 30 days.

9. Compliance

WCA Technologies is a Canadian company and handles account data under the Personal Information Protection and Electronic Documents Act (PIPEDA).

Your dedicated server region can support data-residency needs, but it is not a blanket regulatory certification for every workflow:

  • Canada: available for Canadian data-residency needs
  • Europe: available for customers who need EU server residency review
  • United States: not currently available for HIPAA or PHI workflows

Sinora does not currently support HIPAA-regulated PHI workflows. Do not send protected health information through the service unless we have a signed, workflow-specific agreement with eligible subprocessors in place.

You have the right to access, correct, or delete the personal information we hold about you. To exercise these rights or file a complaint, contact us at [email protected] or the Office of the Privacy Commissioner of Canada.

10. Children's Privacy

Sinora is not intended for anyone under 18. We do not knowingly collect information from minors. If you believe a minor has created an account, please contact us and we'll remove it promptly.

11. Changes to This Policy

We may update this policy as our service evolves. When we make significant changes, we'll notify you via email and update the effective date. Continued use after changes constitutes acceptance.

12. Contact

Questions or concerns about your privacy? We're here to help.

Email: [email protected]

Company: WCA Technologies