Privacy Policy

Last updated: June 26, 2026

SotaTek AI ("the App") is an internal AI chat assistant operated by SotaTek for its staff. This Privacy Policy explains what information the App collects, how it is used, and how it is protected. By signing in and using the App you agree to this policy.

1. Information we collect

Account information from your Google Workspace account when you sign in (name, email address, and profile picture), used to identify you and restrict access to the @sotatek.com domain.
Chat content you send — messages and any images or documents you attach — so the App can generate AI responses.
Google Drive files you select. When you choose a file through the Google Picker, the App reads only that specific file (via the drive.file scope) to include its content in your chat. The App does not access, list, or read any other files in your Drive.
Usage metadata such as token counts per message, used to display your estimated usage.

2. How we use information

To provide the AI chat service and show your conversation history.
To process your requests, message and attachment content is sent to our AI gateway (Bifrost) which forwards it to the underlying AI models (Claude, MiniMax, DeepSeek).
To estimate and display your token usage.

3. Storage and retention

Conversations and messages are stored (Supabase) until you delete them.
Uploaded images and documents are kept for 30 days, after which the file content is deleted automatically (the file name remains in history, marked as expired).
Your virtual API key is stored only in your browser, never on our servers.

4. Sharing

We do not sell your data. Content is shared only with the AI gateway and model providers strictly to process your requests. We do not use your data for advertising.

5. Google API Services — Limited Use

SotaTek AI's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google Drive file content accessed through the App is used solely to fulfill your in-chat request and is not used for any other purpose, not transferred to third parties except as needed to provide the feature, and not used for advertising or sold.

6. Security

Access is restricted to authenticated @sotatek.com accounts. Data in transit is encrypted (HTTPS). Files are stored in a private storage bucket accessible only to the owner.

7. Contact

For questions about this policy, contact sotatekdev3@gmail.com.