Privacy Policy

Who we are What we collect How we use it Legal bases Sharing Transfers Retention Your rights Contact

This is the current published policy. We keep it in plain language and update it as the service evolves; the date above always reflects the latest version.

This policy explains how SOIS ("we", "us") handles personal data for visitors to this website and for people who use the SOIS platform. The platform is multi-tenant: where you use a workspace operated by another organisation (a "network operator"), that operator is the controller of the data you put into their workspace, and we act as a processor on their behalf.

1. Who we are

SOIS provides an agent-native business platform. For this website and for accounts created directly with us, SOIS is the data controller. If you reached SOIS through a branded network operated by another organisation, that organisation is the controller for the data in that workspace.

2. What we collect

Account data: name, email, organisation, and authentication details when you create an account.
Usage data: actions taken in the product, including requests made to your agent and the credits they consume, so we can run, secure, and bill the service.
Workspace content: the business data you or your agent create in a workspace (contacts, documents, messages, and so on).
Technical data: IP address, device and browser information, and approximate region (used to choose a default language).
Communications: messages you send us, including data-rights requests submitted through this site.

3. How we use it

To provide, secure, and improve the platform and this website.
To authenticate you and enforce permissions, so an agent only ever acts within the access of the person it acts for.
To meter and bill usage, and to prevent abuse.
To respond to your requests and to meet legal obligations.

4. Legal bases

Where the GDPR applies, we rely on: performance of a contract (to provide the service you asked for); legitimate interests (to secure, improve, and run the platform); consent (for optional cookies and marketing, where used); and compliance with legal obligations.

We do not sell personal data. We share it only with service providers who help us run the platform (such as cloud hosting, payment processing, and email delivery), each under contract and only as needed. When you connect your own AI agent or third-party services, data flows to those providers under their terms and your control.

6. International transfers

We may process data in countries outside your own. Where we do, we use appropriate safeguards such as standard contractual clauses to protect it.

7. Retention

We keep personal data only as long as needed for the purposes above, then delete or anonymise it. Workspace content is retained according to the operator's settings and is removed on account closure subject to legal requirements.

8. Your rights

Subject to local law, you may have the right to access, correct, delete, export, or restrict the processing of your personal data, and to object to it. You can exercise any of these through our data-rights request form. We respond within the timeframes the law requires. If you used a workspace operated by a network operator, send the request to that operator; we will help them fulfil it.

9. How to reach us

For any privacy question or to exercise a right, use the data-rights request form. It reaches our data team directly. You also have the right to complain to your local data protection authority.