Privacy Policy

TL;DR: We protect your data like it's the secret formula for the perfect marketing soda. We don't sell it, we don't abuse it, and we definitely don't share it with shady third parties. This is the boring-but-important legal version.

🥤 The Fizzy Facts About Your Privacy

Last Updated: November 24, 2025

Welcome to SodaFlex's Privacy Policy! We're legally required to have one of these, but we're going to try to make it less painful than reading the ingredients on a diet soda can. (Spoiler: This policy has fewer chemicals.)

1. Who We Are (And Why We Care About Your Privacy)

SodaFlex is a marketing platform that helps small businesses stop juggling 47 browser tabs. We're based in the United States, and we take your privacy seriously. Not "we say we do but actually sell your data" seriously—like, actually seriously.

You can reach us at: privacy@sodaflex.com (We promise a human will read it, not just an auto-responder.)

2. What Data We Collect (The Necessary Stuff)

Account Information

When you sign up, we collect the basics:

  • Name and email address - So we know who you are and can send you important stuff (not spam)
  • Password - Encrypted and hashed (we can't see it, even if we wanted to)
  • Business information - Company name, industry, that kind of thing
  • Payment information - Processed securely through Stripe (we never see your full credit card number)

Usage Data

Like every other website on the internet, we collect:

  • Log data - IP address, browser type, operating system, pages you visit
  • Analytics data - How you use our app (so we can make it better, not to judge you for clicking "Generate" 47 times in a row)
  • Cookies - Small text files that remember your login and preferences (not the chocolate chip kind, sadly)

Marketing Content You Create

When you use SodaFlex to generate emails, social posts, ads, etc., we store that content. This includes:

  • Your brand assets (logos, colors, voice)
  • Contact lists and CRM data
  • Campaign content and performance data
  • AI-generated content and your edits

3. How We Use Your Data (The Real Talk)

We use your information to:

  • Provide the service - Kind of the whole point
  • Improve SodaFlex - Fix bugs, add features, make things less janky
  • Send important emails - Account updates, security alerts, that kind of thing (we hate spam as much as you do)
  • Provide customer support - When you email us asking "where did my campaign go?"
  • Prevent fraud and abuse - Keep the bad actors out
  • Comply with legal obligations - Because laws exist

What we DON'T do:

  • ❌ Sell your data to third parties (never, ever, ever)
  • ❌ Use your data to train AI models for other companies
  • ❌ Share your contact lists with competitors
  • ❌ Send you marketing emails without your permission

4. AI and Your Data (The Important Part)

SodaFlex uses AI (specifically, Anthropic's Claude) to generate marketing content. Here's what you need to know:

  • We send your brand context and prompts to Anthropic's API to generate content
  • Anthropic does NOT use your data to train their models (per their commercial terms)
  • Your generated content stays in your SodaFlex account
  • We don't share your content with other users

5. Data Sharing (When We Have To)

We only share your data with:

Service Providers

  • Stripe - Payment processing
  • Anthropic - AI content generation
  • AWS/Hosting providers - Where our servers live
  • Email service - Transactional emails (account confirmations, password resets)

All these providers are bound by strict data protection agreements. They can't use your data for their own purposes.

Legal Requirements

We may disclose your information if required by law, court order, or government request. We'll notify you unless legally prohibited from doing so.

6. Data Security (How We Protect Your Stuff)

We take security seriously (like, "we-lose-sleep-over-this" seriously):

  • 🔒 All data transmission is encrypted with SSL/TLS
  • 🔒 Passwords are hashed and salted (not stored in plain text)
  • 🔒 Database backups are encrypted and stored securely
  • 🔒 We use industry-standard security practices
  • 🔒 Regular security audits and updates

That said, no system is 100% secure. If we ever experience a data breach, we'll notify you ASAP (and probably freak out a little).

7. Your Rights (You're In Control)

You have the right to:

  • Access your data - Request a copy of everything we have on you
  • Correct your data - Update inaccurate information
  • Delete your data - Request account deletion (we'll miss you though)
  • Export your data - Take your data with you if you leave
  • Opt out of marketing emails - Unsubscribe anytime (but you'll still get important account emails)
  • Object to processing - Tell us if you don't want us to use your data in certain ways

To exercise any of these rights, email us at privacy@sodaflex.com. We'll respond within 30 days.

8. Cookies (The Digital Kind)

We use cookies to:

  • Keep you logged in - So you don't have to re-enter your password every 5 minutes
  • Remember your preferences - Dark mode, language, that sort of thing
  • Analytics - Understand how people use SodaFlex (aggregate data, not creepy tracking)

You can disable cookies in your browser, but some features might not work properly. (It's like trying to drink a soda without opening the can—technically possible, but not recommended.)

9. Data Retention (How Long We Keep Your Stuff)

We keep your data as long as your account is active. If you delete your account:

  • We'll delete your personal data within 30 days
  • Some data may be retained for legal/accounting purposes (like payment records)
  • Anonymized usage data may be kept for analytics

10. International Users (GDPR & Friends)

SodaFlex is based in the United States. If you're using our service from the EU, UK, or other regions with data protection laws:

  • We comply with GDPR, CCPA, and other privacy regulations
  • Your data may be transferred to/stored in the US
  • We use appropriate safeguards for international data transfers
  • You have all the rights listed in Section 7 above

11. Children's Privacy

SodaFlex is not intended for users under 16 years old. We don't knowingly collect data from children. If you're a parent and think your child has created an account, please contact us and we'll delete it.

12. Changes to This Policy

We may update this policy from time to time (hopefully to make it better, not worse). When we do:

  • We'll update the "Last Updated" date at the top
  • We'll notify you via email for material changes
  • You'll see a notification in the app

Continued use of SodaFlex after changes means you accept the updated policy.

13. Questions? Concerns? Just Want to Chat?

We're here to help. Seriously. Email us at privacy@sodaflex.com with any questions about this policy or how we handle your data.

You can also reach our Data Protection Officer (yes, we have one) at dpo@sodaflex.com.

This Privacy Policy was written by humans (with some AI assistance, because meta) and reviewed by lawyers. We tried to make it readable while still covering all the legal bases. If you made it this far, you deserve a cookie. 🍪 (The chocolate chip kind, not the tracking kind.)