Short version: Sorec helps you make real-world plans by reading your WhatsApp messages to us, understanding what you want to do, and coordinating with the right people and venues. We collect what we need to do that job, we don't sell your data, and you can ask us to delete everything at any time.
This Privacy Policy explains how Sorec ("we", "us", "our") — operated from Pune, India — collects, uses, discloses, and safeguards your information when you use our WhatsApp agent, our website at sorec.app, or any related service (collectively, the "Service").
By using Sorec, you agree to this policy. If you don't agree, please don't use the Service.
What we collect
We collect the following categories of information:
Information you give us directly
- WhatsApp identity. Your phone number, display name, and profile photo as shared by WhatsApp when you message us.
- Messages you send to Sorec. Every message you send our agent, including text, voice notes, images, location pins, and shared contacts.
- Profile details. Interests, preferred activities, availability windows, dietary preferences, skill levels, friends you've connected, and any other details you tell us.
- Payment details. When you book a paid activity, we use a third-party payment processor to collect card/UPI details. We do not store raw card numbers on our servers — only transaction identifiers and receipts.
Information we infer
- Social graph. Who you've planned activities with, who invited whom, and your implicit affinity with other Sorec users.
- Reliability signals. Whether you show up to plans you confirm, cancellation frequency, and punctuality — used to build a reliability score that other users may see.
- Taste signals. The activities you've responded positively to, your rejections, and patterns we can use to improve future suggestions.
Information we receive from third parties
- WhatsApp / Meta. Message delivery metadata, via the WhatsApp Business Platform.
- Venue & event partners. Booking confirmations, capacity, and attendance data for activities you book through us.
- Payment processors. Transaction status, refunds, and chargeback information.
- Website analytics. Aggregate visit data (IP-derived country, device type, referrer) from our marketing site.
How we use your information
We use what we collect to run the Service — nothing more than that:
- Understand your intent. Our AI agent parses your messages to figure out what kind of plan you want.
- Match & suggest. We rank activities, venues, and people based on your taste, availability, and social graph.
- Coordinate 1:1. We message matched users individually on your behalf to check availability, confirm attendance, and handle cancellations.
- Handle logistics. Book venues, collect payments, send reminders, and find replacements when someone drops out.
- Improve the product. We analyse aggregate and anonymised usage patterns to make matching and coordination better over time.
- Keep things safe. Detect abuse, fraud, harassment, and bad-actor behaviour across the platform.
How AI processing works
Sorec's agent is built on large language models. When you message us, the content of your message may be sent to third-party AI providers (such as Anthropic, OpenAI, or Google) for the sole purpose of generating Sorec's response. We have data processing agreements with these providers requiring that your messages are not used to train their public models.
Before sending messages to AI providers, we strip identifying details where possible (e.g. replacing phone numbers with internal user IDs) so that the model sees the intent, not the identity.
Who we share information with
We share information only when one of the following applies:
- With matched users — only when you opt in. If you confirm a plan with other Sorec users, we share your first name, display photo, and relevant context (e.g. skill level for a sport) with them.
- With venues and event hosts. Your first name and contact details are shared with the venue or host for the specific plan you've booked.
- With service providers. WhatsApp/Meta for message delivery, AI providers for language processing, payment processors for transactions, and cloud infrastructure providers (e.g. AWS) for hosting.
- For legal reasons. When required by law, court order, or to protect rights, safety, and property.
- In a corporate transaction. If Sorec is acquired or merged, your data may transfer to the successor entity under the same protections.
We do not sell your personal data. Period.
How long we keep it
- Chat messages: retained for up to 24 months to support context, memory, and dispute resolution.
- Profile & preferences: retained while your account is active.
- Transaction records: retained for as long as required by Indian tax and accounting law (typically 7 years).
- Deleted accounts: personal data is purged within 30 days of deletion; anonymised analytics may persist.
Your rights
Under India's Digital Personal Data Protection Act, 2023 and applicable laws, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your account and associated personal data.
- Withdraw consent for processing at any time.
- Export a copy of your data in a machine-readable format.
- Complain to the Data Protection Board of India if you believe we've mishandled your data.
To exercise any of these rights, send "delete my data" or your request to privacy@sorec.app or type /delete in your WhatsApp chat with Sorec.
Security
We use encryption in transit (TLS) and at rest, strict access controls on our production systems, and regular security reviews. No system is perfectly secure, though — if you believe your account has been compromised, contact us immediately at security@sorec.app.
Children
Sorec is for users 18 and older. We do not knowingly collect data from minors. If you believe a minor is using the Service, tell us and we will remove their account.
International transfers
Your data is primarily processed in India. Some service providers (AI models, cloud infrastructure) may process data in other regions. Where we transfer data internationally, we rely on standard contractual clauses and equivalent safeguards.
Cookies & website tracking
Our website uses minimal cookies for essential functionality and privacy-friendly analytics. We do not use third-party advertising trackers or sell browsing data. The WhatsApp agent itself is not cookie-based.
Changes to this policy
We'll update this policy as the Service evolves. Material changes will be announced via WhatsApp to active users at least 14 days before they take effect. The "Last updated" date at the top of this page always reflects the current version.
Contact
Questions, concerns, or data requests? Reach the team at privacy@sorec.app.
Sorec is operated from Pune, Maharashtra, India.