What Sondel does with your data.

What Sondel never does.

Code outside the model checks these rules. They are tested, not guaranteed: a check can miss a case.

1. Never states a price, discount, code, or refund term unless a source states it exactly.
2. Never promises an exception, a timeline, or compensation.
3. Never gives legal, medical, or financial advice.
4. Never claims an action succeeded without confirmation from your system.
5. Offers a person each time it declines. A refused reply is the one exception, and it uses fixed text.

Data use.

Only for you

Your content serves your own organization's agent.

No sale, no training

Sondel does not sell your content or train or fine-tune a model on it. Sondel does not allow a provider to train a model on it.

Learning needs your yes

Sondel may ask your admin for permission to use your data to improve the product. It is off until an admin agrees.

Excluded data

Early access terms exclude regulated health data and card data. There are no HIPAA agreements yet.

Subprocessors.

Railway, Neon, BaseTen, OpenRouter, Voyage AI, Resend, Stripe, Cloudflare Turnstile, and Google Analytics. The subprocessors page says what each one receives.

Notice of a new one

Sondel commits to give your admins 30 days' notice before it adds a provider that receives customer content. Sondel sends this notice by email.

Retention.

Conversations

The setting is 90 days by default. An admin can set 30 to 365 days. Sondel switches on deletion for each environment, and it was on for the MentorStack production environment from 2026-10-25.

Other items

See the retention list.

Deletion.

On request

An admin can find and delete one person's data in the owner area. Sondel keeps a record of the deletion without the deleted content. You can also write to hello@sondel.cx and ask.

Closing your account

AI processing and writes stop at once. You keep read-only access for 30 days. Then content and derived data are deleted.