Privacy notice
This notice covers the public SosoAPI website. The Start Free links take you to the SosoAPI app to create and verify an account; the app privacy policy covers account data and connected social accounts.
With optional analytics consent, this website may remember campaign (UTM) source, medium and name, the referring hostname (never its full address), and your first page in this browser tab. Global Privacy Control and Do Not Track stop this.
Historical waitlist records retain submitted email addresses, internal sequence identifiers, signup times and any historical referral or signup-source data. Supabase stores these records. The retained waitlist submission endpoint uses Cloudflare Turnstile for bot verification and does not ask for social account credentials. Public account signup does not require a waitlist invitation.
Cloudflare Turnstile protects forms from automated abuse, including security checks that run in the background. Cloudflare processes security signals to provide this service under its Turnstile Privacy Addendum, linked below.
Landing diagnostics and masked session replay start by default for new visitors in the United States, Hong Kong, Taiwan and Canada. They measure public visits, drop-off and signup-link interactions, without measuring App use or confirmed signups. A PostHog-generated anonymous identifier stays in sessionStorage for this browser tab only, separate from the App, accounts and the optional cross-site identifier.
Default Landing replay masks all text and blocks forms. Our first-party proxy handles events, recordings, configuration and recorder assets without sending email, names, form values, raw URLs, client IP addresses or browser user-agent headers to PostHog in the United States. Turn this mode off in Customize; its browser preference lasts up to 180 days. Existing refusals, malformed or expired preferences, Global Privacy Control and Do Not Track keep it off. Blocked storage, other or unknown regions, blockers, failures and rate limits leave coverage gaps.
Choosing optional analytics replaces the default Landing mode with a separate identifier; earlier Landing records are not joined to it.
Optional PostHog analytics load only after you explicitly allow analytics. PostHog uses a first-party cookie with an anonymous browser identifier across sosoapi.ai and app.sosoapi.ai for up to 180 days, with local browser storage on each site. Each site clears this local state when you withdraw there, or the next time you visit with an expired identifier or inactive analytics consent. Older website-only choices do not automatically enable this shared identifier or replay.
With your consent, signup that is confirmed and verified against the visit in the same tab can connect that visit to your new account. A website choice does not switch on tracking for an existing signed-in account. Analytics use a fixed list of events without email addresses, referral codes or raw query or hash values. We do not use autocapture.
Optional website replay starts only when you choose Accept all or enable it in preferences. It shows public page text, layout and interactions while masking inputs and private content. Request and response bodies, network headers, console contents, canvas recordings and embedded frames are excluded. This optional replay choice does not enable App replay or change account settings. Default Landing replay is controlled separately in Customize.
Your separate website replay choice lasts up to 180 days and is tied to your analytics choice. Uncheck replay and save in Privacy preferences to stop new recordings, or select Decline to stop optional analytics and replay. Withdrawal does not delete previously collected data.
PostHog processes this optional analytics and replay data in the United States. To request access or deletion, use the contact details in the App privacy policy linked below.
Global Privacy Control and Do Not Track keep default and optional PostHog analytics and replay off. If configured, Cloudflare Web Analytics may collect aggregate traffic and performance measurements independently of your PostHog choice. We do not load its analytics script when those browser privacy signals are enabled.