Privacy Policy
SomaCortex is a business-operations platform: an AI advisory council and an operating memory ("concerns") for the companies that use it. This policy explains what we collect, why, and the choices you have. It applies to www.somacortex.ai, app.somacortex.ai, and the connectors we operate on your behalf, including the Soma Ledger Connector for QuickBooks Online.
What we collect
- Account data — name, work email, organization, and the sign-in identifiers issued by our authentication provider. We never see your password.
- Content you put in the platform — concerns, discussion entries, documents, meeting notes, and files you or your team upload.
- Connected-system data — when you authorize a connector (for example QuickBooks Online), we read the records you grant access to: customers, vendors, products and services, chart of accounts, invoices, payments, bills, deposits, journal entries and their attachments. We use this only to build and maintain your books and reports inside SomaCortex.
- Usage data — logs, device and browser information, and diagnostics needed to keep the service secure and working.
How we use it
To provide the service you asked for; to keep it secure; to support you; and to improve the product. AI features operate on your content to produce summaries, analyses and drafts for you. We do not sell personal information and we do not use your business data to advertise to you or to anyone else.
Connected accounting systems
Access to QuickBooks Online is granted by you through Intuit's OAuth consent screen and can be revoked at any time from your Intuit account (Apps → My Apps) or from SomaCortex. We store the authorization tokens encrypted, request only accounting-scope permissions, and use the data solely to migrate, reconcile and report your own company's finances. Intuit's use of your data is governed by Intuit's own privacy policy.
Sharing
We share data with the sub-processors that run the platform — cloud hosting (Amazon Web Services), authentication, email delivery, and the AI model providers that power council and Augie features — each bound by contract to use it only to provide service to us. We disclose data when the law requires it or to protect the rights and safety of our users. If SomaCortex is acquired, your data moves with the service under this same policy.
Retention and deletion
We keep your data while your organization has an account and for a limited period afterward so you can export it. You may request export or deletion at any time at [email protected]; disconnecting a connector stops all further reads from that system immediately.
Security
Data is encrypted in transit (TLS) and at rest. Access is role-based and audited. Financial connector credentials are stored separately from application data.
Your rights
Depending on where you live you may have rights to access, correct, delete, or port your personal information, and to object to certain processing. Write to us and we will respond within 30 days. We do not knowingly collect information from anyone under 16.
Changes and contact
We will post changes here and update the effective date; material changes will be announced in the product. Questions: [email protected], or SomaCortex, Inc., 11325 Random Hills Rd, Suite 360, Fairfax, VA 22030.