Privacy Policy | Sora2 API

Letstok Technologies Ltd operates the Sora2 API service. This policy describes how we collect, use, and protect your personal data when you use the service.

1. Data We Collect

We collect:

Email address – collected during account registration and login
Payment information – processed by Stripe; we do not store full payment details
API usage data – prompts, generation status, and usage metrics for our service

We limit collection to what is needed to operate the service.

2. How We Use Your Data

Your data is used to:

To create and manage your user account
To authenticate your login
To process credit purchases and manage your balance
To provide and improve the API service
To communicate important service-related information

We do not send marketing emails without your consent.

3. Legal Basis (GDPR)

For users in the EEA, we rely on:

Consent – where you have given us clear permission to process your data
Contract – to provide account-related functionality and the API service
Legitimate Interest – to ensure the security and performance of our service

4. Third-Party Services

We use the following third-party services:

Supabase – for authentication
Stripe – for payment processing

We may use analytics to understand user interaction with our service. We do not share or sell your personal data to third parties for marketing purposes.

5. Cookies and Tracking

We use session cookies for authentication. We use Google Tag Manager for analytics and advertising, which may set cookies when you consent. Stripe and Supabase may set their own cookies as part of their integrations.

You can manage your cookie preferences at any time:

6. Data Retention

We retain account data while your account is active. You can request deletion by emailing contact@letstok.com.

7. Your Rights (For EU/EEA Users)

If you are located in the EU/EEA, you have the following rights under the General Data Protection Regulation (GDPR):

Right to access your data
Right to correct inaccurate data
Right to request deletion
Right to object to or restrict processing
Right to data portability
Right to lodge a complaint with a supervisory authority

To exercise these rights, contact us at contact@letstok.com.

8. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect data from anyone under 13 years of age.

9. Data Security

We implement reasonable security measures to protect your data and account information. However, no system can be 100% secure, and we cannot guarantee absolute protection.

10. International Users

Your information may be transferred to and stored in countries outside of your jurisdiction, including Israel and the United States. By using our service, you consent to this transfer.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with the revised effective date.

12. Contact

For privacy-related questions, contact:

Letstok Technologies Ltd
Tel Aviv, Israel
Courts of Tel Aviv, Israel
Email: contact@letstok.com