Privacy Policy

Effective August 13, 2026 · Sonave ("we", "us") · Contact: [email protected]

Sonave detects AI-generated ("deepfake") voices in video meetings. A recording bot you deploy joins your meeting as a visible participant, streams each speaker's audio to our service, and returns live authenticity verdicts. This policy explains what we collect and why.

What we collect

Account information. When you sign in with Google we receive your name, email address, and profile picture. We do not receive your Google password.
Meeting audio. When you deploy a bot into a meeting, we receive and store per-speaker audio from that meeting, along with speaker display names as provided by the meeting platform.
Voiceprints. If you enroll a speaker, we compute and store a numerical voice embedding ("voiceprint") used only to verify that speaker's identity in your meetings. You can delete voiceprints at any time in the console.
Detection results. Authenticity scores, verdicts, and incident records produced by our models for your meetings.
Usage and billing. Monitored minutes, plan status, and payment status. Card details are collected and stored by Stripe, our payment processor — never by us.
Cookies. A session cookie to keep you signed in. No advertising or tracking cookies.

How we use it

To provide the service: real-time scoring, verdicts, incident alerts, and your capture archive.
To improve our detection models. Audio captured through the service may be used to train and evaluate our deepfake-detection models. Contact us to exclude your workspace's audio from training.
To meter usage and bill you, and to secure the service against abuse.

We do not sell your data, use it for advertising, or share meeting audio with other customers.

Recording consent

The Sonave bot always appears as a visible participant. You are responsible for notifying meeting participants that the call is being recorded and analyzed, and for obtaining any consent required by the laws that apply to you (some jurisdictions require all-party consent to record audio). Do not deploy the bot into meetings where you lack that consent.

Service providers

We use a small set of subprocessors to run Sonave: Railway (application hosting and audio storage), Modal (GPU inference), Recall.ai (the meeting bot that joins calls), Google (sign-in), and Stripe (payments). Each receives only what it needs to perform its function.

Retention & deletion

Meeting audio, detection results, and voiceprints are retained while your account is active so you can review them and, where applicable, for model improvement. You can delete voiceprints in the console at any time. To delete captures, detection history, or your entire account, email us and we will complete the deletion within 30 days.

Security

Data is encrypted in transit (TLS). Access to your workspace requires your Google sign-in; meeting audio streams are authenticated with single-purpose expiring tokens. No method of storage is 100% secure, but we take the audio of your meetings seriously.

Children

Sonave is a business tool and is not directed to children under 16.

Changes

We will post any changes to this policy here and update the effective date. Material changes will be flagged in the console.