Owner review draft

Beta privacy notice

This beta notice is a draft. Active-account retention and the account-closure process remain under review.

Orkka LLC operates Soughto.

Soughto helps you search your private library and send questions to a cohort you choose. Your library searches and answers run on your devices.

You choose which sources to connect and import. Imported source content, local indexes, questions and answers stay in your device library. For sync, approved devices encrypt transfers before upload. The sync service stores ciphertext and cannot decrypt the library with its service credentials. The service still sees account and device records, public keys, membership, transfer sizes, timing and delivery metadata. Google sign-in does not recover library contents if you lose every approved device.

When you send a cohort request or reply, you approve its text. The app encrypts it for its recipients. Recipients can keep or disclose what they receive. Deleting your local copy cannot delete copies already held by another person.

Google handles sign-in and the source permissions you approve. The bundled Google Sign-In SDK declares linked account information, coarse location, identifiers and usage data. Some SDK declarations include Analytics. This beta therefore does not claim that every component collects no data or performs no analytics. The app and SDK manifests mark their declared data as not used for tracking.

Library transfers have a 24-hour access limit. Acknowledgement and expiry trigger cleanup. The ciphertext bucket also has a deletion rule at object age one day, with versioning and soft deletion disabled. The global default log bucket retains records for 30 days. The required audit-log bucket retains records for 400 days. The database retains seven backups and seven days of transaction logs. Active account records have a separate lifecycle that the owner must define. These settings are not a verified deadline for physical erasure of every copy.

You can disconnect a source, remove imported data or sign out. These actions have different effects. Sign-out does not delete your local library or server account. A complete account-closure and server-deletion process is not established by this draft.

For beta privacy questions, contact csl@soughto.io.