Privacy Policy for SoraAI

Effective Date: January 2025

Introduction

Welcome to SoraAI ("we," "our," or "us"), the AI-powered platform that generates Sora AI videos from text and images — no invite codes, no watermarks, global access. At SoraAI.run, your privacy is of utmost importance to us, and this privacy policy outlines how we collect, use, and protect your personal information when you use our services.

Information Collection and Use

We collect the following types of data to provide you with our AI video generation services:

1. Account Information

   • What We Collect: Your name, email address, profile picture, and authentication information when you sign up through Google or GitHub OAuth.
   • Purpose: To create and manage your account, process your video generation requests, and provide customer support.

2. Content and Media

   • What We Collect: Images you upload for image-to-video generation, text prompts, generated videos, and associated metadata.
   • Storage Policy: Uploaded images are automatically deleted after 1 day to save storage space. Generated videos are stored until you delete them.
   • Purpose: To process your video generation requests and store your creations.

3. Usage and Analytics

   • What We Collect: Information about how you use SoraAI, including features accessed, generation history, credits usage, and session data.
   • Purpose: To analyze user engagement, improve our services, and provide personalized recommendations.

4. Device and Technical Information

   • What We Collect: IP address, device type, operating system, browser type, and connection information.
   • Purpose: To ensure service compatibility, prevent fraud, and optimize performance across different devices.

5. Payment and Billing Information

   • What We Collect: Payment method details, billing address, transaction history, and credit purchase records.
   • Purpose: To process credit purchases, manage your account balance, and comply with financial regulations.

Data Storage and Security

We implement industry-standard security measures to protect your personal information:

• Encryption: All data transmission is encrypted using SSL/TLS protocols
• Access Controls: Strict authentication and authorization mechanisms for data access
• Data Centers: Your data is stored in secure, SOC 2 compliant data centers
• Regular Audits: We conduct regular security assessments and vulnerability testing
• Backup and Recovery: Automated backup systems ensure data availability and integrity

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to continuously improving our security practices.

Data Retention

We retain your personal information for the following periods:

• Account Information: Until you delete your account or request data deletion
• Uploaded Images: Automatically deleted after 1 day
• Generated Videos: Stored until you delete them or your account
• Usage Data: Analytics and usage data is retained for up to 2 years for service improvement
• Payment Data: Transaction records are kept for 7 years for legal and accounting purposes

Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information ("right to be forgotten")
• Portability: Request a copy of your data in a structured, machine-readable format
• Opt-out: Unsubscribe from marketing communications at any time

To exercise these rights, please contact us at support@soraai.run.

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• AI Service Providers: We share uploaded images and text prompts with EVOlink AI solely for Sora video generation processing
• Payment Processors: Payment information is shared with Stripe for transaction processing
• Storage Providers: Generated content is stored with Cloudflare R2 for global delivery
• Legal Compliance: To comply with legal obligations, court orders, or government requests
• Service Protection: To protect our rights, property, safety, or that of our users
• Business Transfers: In connection with a merger, acquisition, or sale of assets

All third-party partners are bound by strict confidentiality agreements and data processing terms.

Third-Party Services

Service	Purpose	Data Shared
EVOlink AI	Sora video generation	Text prompts, uploaded images
Stripe	Payment processing	Email, payment information
Cloudflare R2	File storage and delivery	Generated videos
Google OAuth	Authentication	Email, name, profile picture
GitHub OAuth	Authentication	Email, name, profile picture

International Data Transfers

SoraAI operates globally, and your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses approved by regulatory authorities
• Adequacy decisions for data transfers to approved countries
• Additional safeguards where required by applicable law

Children's Privacy

SoraAI is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by:

• Posting the updated policy on our website
• Sending an email notification to your registered email address
• Displaying a prominent notice on our platform

The updated policy will be effective 30 days after notification, unless you disagree with the changes and choose to delete your account.

Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:

Company: SoraAI Website: soraai.run Email: support@soraai.run Response Time: We aim to respond to all privacy-related inquiries within 30 days.

By using SoraAI, you consent to this privacy policy and agree to its terms. Thank you for trusting us with your information!