SONORA / PRIVACY
Privacy policy
Sonora is operated by dong in China. Public contact region: Shandong Binzhou, China. A street-level mailing address is not currently published.
Transcription and saved history
When you submit a public media URL, Sonora sends the source URL and any selected language to Supadata to obtain a transcript. An anonymous result stays in the current page session and is not saved to a Sonora account. If you sign in and save a transcript, Sonora stores its source URL, language, duration, text segments, and timestamps in Cloudflare D1 so you can reopen and edit it. You can delete an individual saved transcript in History.
Account and browser-session data
Google sign-in gives Sonora your Google account identifier, verified email address, and display name. Sonora uses a session cookie to keep you signed in. For safe retries, the browser's sessionStorage holds checkout and paid-transcription idempotency keys. For an in-progress paid job, sessionStorage also holds its source URL and language in that browser tab so the result can reopen with its source. These browser values are not the authoritative payment or balance record; clearing the tab's session data can remove them without deleting a completed paid result from your account.
Payment and paid-job records
Checkout is open for one-time minute packs: Starter $9 / 120 minutes, Creator $19 / 300 minutes, and Pro $39 / 750 minutes. Waffo handles payment through its hosted checkout; Sonora does not store payment card details. In Cloudflare D1, Sonora records an account-linked checkout intent, product and checkout identifiers, a return origin and checkout expiration, verified Waffo event receipts, order and payment IDs, amounts, refund IDs and amounts, and timestamps. A verified payment or confirmed refund updates the account's minute balance.
For paid generation, D1 stores the account ID, a source URL hash derived from the source URL and requested language rather than the raw source URL in the paid-usage record, the request key, reserved and used seconds, job status, a provider job ID when available, timestamps, and the resulting paid transcript with its language and text segments. Large results may span multiple D1 rows. A separately saved History item can contain the raw source URL. Paid jobs and results remain discoverable through paginated account lists even if you did not save them to History; deleting a History item does not delete payment or paid-job records.
Deletion and service providers
Accounts without a checkout attempt, order, or paid-usage job can use self-service deletion to remove the profile, sign-in sessions, and saved transcripts from the live database. An account with any checkout attempt, including an unpaid or expired attempt, requires support-assisted deletion and payment review; an order or paid-usage job also requires reconciliation. The app blocks self-service deletion so a delayed payment and its balance are not silently lost. Cloudflare D1 recovery points may retain recoverable database state after a live deletion under Cloudflare's backup policy.
Google verifies sign-in, Cloudflare hosts the site and D1 database, Supadata processes submitted sources and transcription requests, and Waffo processes checkout payments when checkout is enabled. Cloudflare may also process request metadata for delivery and security. Do not submit content unless you have permission to process it.
Contact
Privacy questions and payment-record requests: [email protected].