This Privacy Policy is designed to comply with the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and CalOPPA. California residents have specific rights described throughout this document. SomaSyncAI does not sell personal information.
Under California law, we provide notice of the categories of personal information collected at or before the point of collection. The current SomaSyncAI beta collects only the categories marked as active below. Audio, voice, and health-related notes are not collected in this beta and are not authorized for submission.
| Category | Examples | Purpose |
|---|---|---|
| Identifiers | Beta-interest email address, name, account login | Beta-interest administration, access updates, account management, authentication |
| Professional Information | Practice type, clinician role, license details | Service personalisation |
| Audio / Voice Data | Not collected in the current beta | Not applicable; any future production voice workflow requires documented vendor, security, retention, and legal review before enablement |
| Health-Related Notes | Not collected in the current beta | Not applicable; PHI and client-identifying information are prohibited in the beta |
| Usage Data | Platform interactions, session duration, features used | Product improvement, analytics |
| Device & Technical Data | IP address, browser type, operating system | Security, troubleshooting |
| Payment Information | Billing details (processed by third-party providers) | Subscription management |
For the current beta, we collect active categories only to administer beta interest and access updates, maintain user accounts, provide permitted non-identifying test features, and improve platform functionality. We do not sell personal information or use beta-interest email addresses for cross-context behavioral advertising.
Information you provide directly:
Information collected automatically:
SomaSyncAI is developing voice documentation workflows. The current beta must be used only with synthetic, non-identifying test content.
How voice data is used:
Audio retention:
We do not sell your personal or health-related data to third parties. We do not use clinical documentation content for targeted advertising.
SomaSyncAI does not sell, rent, or trade personal information to third parties for monetary or other valuable consideration.
Under the California Privacy Rights Act (CPRA), certain categories of information are classified as "sensitive personal information" and are subject to heightened protections. The beta is not intended to process health information or clinical notes. If those categories are enabled in a future approved production workflow, they may qualify as sensitive personal information:
If enabled in an approved production workflow, sensitive information would be used only for the documented services and permitted operations. California residents may have the right to limit applicable use of sensitive personal information to what is necessary to perform the requested services.
To exercise this right, contact: [email protected]
Where the CCPA applies to SomaSyncAI, California residents have the following rights under the CCPA, as amended by the CPRA. Regardless of coverage status, we provide a direct privacy-request contact for beta users and will assess requests under applicable law.
Request disclosure of the categories and specific pieces of personal information we have collected about you, and how it has been used or shared.
Request deletion of personal information we have collected, subject to certain legal exceptions.
Request correction of inaccurate personal information we maintain about you.
Receive a copy of your personal information in a portable, machine-readable format.
Opt out of the sale or sharing of personal information. We do not sell data, but you may opt out of sharing for cross-context advertising purposes.
Limit the use of sensitive personal information to purposes strictly necessary to provide the requested services.
Non-Discrimination: We will not discriminate against you for exercising any of these rights. You will not receive a different level of service or pricing as a result of making a privacy request.
To submit a request, email [email protected] with the subject line "California Privacy Request." Where required by the CCPA, we will confirm receipt within 10 business days and provide a substantive response within 45 calendar days, subject to a permitted extension with notice.
We retain personal information only for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required by law.
| Data Type | Retention Period |
|---|---|
| Account data | Duration of account + 30 days after deletion request |
| Clinical session notes | Not authorized in the current beta; production schedule to be published before PHI enablement |
| Voice-derived data | Not authorized in the current beta; production schedule to be published before PHI enablement |
| Usage and analytics data | Up to 24 months in identifiable form; anonymised thereafter |
| Payment records | As required by applicable financial and tax law (typically 7 years) |
| Backup copies | Up to 12 months in secure, encrypted storage |
No security system is impenetrable. Production incident-response and notification procedures must be finalized with qualified legal and compliance review before PHI is enabled.
Under CalOPPA, we disclose how we respond to Do Not Track signals and our cookie practices.
Do Not Track: SomaSyncAI currently does not respond to browser-level Do Not Track (DNT) signals, as there is no uniform industry standard for DNT compliance. You may manage tracking preferences via your account settings or browser controls.
SomaSyncAI is a professional platform intended exclusively for licensed healthcare practitioners. It is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If you believe a minor has submitted information to us, contact us immediately at [email protected].
Material changes to this Privacy Policy will be communicated via email to your registered address and a prominent notice upon login. The "Last Updated" date at the top of this page will always reflect the most recent revision. Continued use of SomaSyncAI after changes take effect constitutes acceptance.
For all privacy-related requests, questions, or concerns — including California rights requests — contact our Privacy Office.
Submit California rights requests, data deletion requests, or general privacy enquiries.
[email protected]SomaSyncAI · somasyncai.com
Response within 45 days as required by California law.