Draft for counsel review. Not legal advice.
Privacy
This note describes the desk as it runs today. A production entity still needs a policy reviewed for the Australian Privacy Act and any other law that applies. Sotto is not giving that advice here.
What the desk stores
Account name and email, the 18+ attestation (time, IP, user agent), tone kits, pasted messages, drafts, consent records, voice samples and voice notes, export packs, and an audit log. With no database configured, that stays in a file on the machine running the app. With a database configured, it is stored there. Object storage is used for audio and packs when it is connected.
What it does not collect on purpose
Platform passwords are not requested. Payment details for the people you reply to are not processed. If you pay for a software seat, Stripe processes that charge. The audit log keeps actions, ids, model ids, and disclosure versions. It is a record of the desk, not a copy of every message, and not a compliance certificate.
Revoke
Revoking voice consent marks the record revoked, disables the voice profile, and cancels queued synthesis for that profile. Export history already created stays in the audit log.
Contact
Write to hello@sotto.tech about a record on your seat.