Privacy Policy

Effective July 2026

This is an initial launch version of our Privacy Policy. We may refine it as Sonar grows — if anything here is unclear or you have a question, email hello@8x.social.

This policy explains what Sonar collects, how we use it, and who processes it on our behalf. We aim to collect only what we need to run the service.

What we collect

Account details — your email address and the company or workspace name you sign up with.
Run inputs — the brand names, niche direction, and other parameters you give a run, plus the reports and usage metadata those runs generate.
Billing identifiers — Stripe processes your payment and stores your card details. We never see or store your full card number; we keep only the Stripe customer and subscription identifiers needed to manage your credits.
Public social content — to build your reports we analyze publicly available posts, profiles, and videos from TikTok and Instagram.

How we use it

We use this information to run analyses, deliver and improve your reports, manage your credits and billing, secure the service, and respond to support requests. We do not sell your data, and we don't use your private run inputs to advertise to you.

Who processes your data

We rely on a small number of trusted processors to run Sonar:

Supabase — authentication and database hosting for your account and reports.
Stripe — payment processing; Stripe handles all card data directly.
Anthropic — AI models that classify public social content into insights.

These providers process data only to provide their service to us, under their own security and privacy commitments.

Cookies

We use a secure, httpOnly session cookie to keep you signed in. We don't use third-party advertising or cross-site tracking cookies.

Data retention and deletion

We keep your account and reports while your account is active. You can ask us to delete your account and associated data at any time by emailing hello@8x.social, and we'll remove it, except where we're required to retain limited records (for example, billing history).

Security

Data is encrypted in transit, sessions are held in httpOnly cookies, and access to production data is limited. No system is perfectly secure, but we take reasonable measures to protect your information.

Contact

For any privacy question or request, email hello@8x.social or see our contact page.