Draft for counsel review. Not legal advice.

Privacy

This note describes the desk as it runs today. A production entity still needs a policy reviewed for the Australian Privacy Act and any other law that applies. Sotto is not giving that advice here.

What the desk stores

Account name and email, the 18+ attestation (time, IP, user agent), tone kits, pasted messages, drafts, consent records, voice samples and voice notes, export packs, and an audit log. With no database configured, that stays in a file on the machine running the app. With a database configured, it is stored there. Object storage is used for audio and packs when it is connected.

What it does not collect on purpose

Platform passwords are not requested. Payment details for the people you reply to are not processed. If you pay for a software seat, Stripe processes that charge. The audit log keeps actions, ids, model ids, and disclosure versions. It is a record of the desk, not a copy of every message, and not a compliance certificate.

Revoke

Revoking voice consent marks the record revoked, disables the voice profile, and cancels queued synthesis for that profile. Export history already created stays in the audit log.

Contact

Write to hello@sotto.tech about a record on your seat.