Privacy policy

Soarcery, Inc. ("Soarcery", "we", "us") respects your privacy. This policy explains, in plain language, what personal data we handle, why, and the choices you have. We have tried to keep it honest and specific rather than vague and defensive.

Who we are

Soarcery provides an AI-native security automation platform (an agentic SOC). For personal data described in this policy, Soarcery is the data controller. You can reach us at privacy@soarcery.ai.

What this policy covers

This policy covers personal data we handle as a business: visitors to this website (soarcery.ai) and people who contact us, request a demo, apply for a role, or administer a Soarcery account.

It does not cover the security data your organization sends into the product (alerts, logs, indicators, and similar operational data). For that data we act as a processor on your behalf, and our handling is governed by your customer agreement and, where applicable, a data processing addendum. Our standard DPA, incorporating the EU/UK Standard Contractual Clauses, is available on request at privacy@soarcery.ai. See our terms and subprocessors.

What we collect

We collect only what we need for a clear purpose.

• Information you give us. When you request a demo, we collect your name, work email, company, and role. When you contact us, we collect your name, email, the topic you select, and your message. When you apply for a role, we collect the information in your application.
• Account information. If your organization uses the product, we process the account and profile information needed to authenticate users and operate the service, through our authentication provider.
• Information collected automatically. When you visit the site, our hosting and security provider processes basic technical data such as IP address, request metadata, and approximate location, to deliver pages and protect the site against abuse. We do not run third-party advertising or cross-site tracking. See our cookie policy.

We do not intentionally collect special categories of personal data (such as health or biometric data) through this website, and we ask that you not send them to us.

How we use it

We use personal data to:

• respond to your requests, schedule and prepare demos, and answer questions;
• provide, secure, maintain, and improve the product and the site;
• send service and administrative messages, and (where permitted) occasional updates you can opt out of;
• evaluate job applications; and
• comply with law, enforce our terms, and protect the rights, property, and safety of Soarcery, our users, and the public.

We do not sell your personal data, and we do not share it for cross-context behavioral advertising. We do not use the security data customers send into the product to train shared or third-party AI models.

Legal bases (EEA and UK)

Where the GDPR or UK GDPR applies, we rely on: your consent (which you can withdraw); performance of a contract with you or your organization; our legitimate interests in operating, securing, and growing our business in a way that does not override your rights; and compliance with legal obligations.

When we share

We share personal data only in these situations:

• Service providers (subprocessors). Vendors who host, secure, and support our operations, under contract and only as needed to perform their service. See the current list of subprocessors.
• Legal and safety. Where required by law, regulation, legal process, or government request, or where necessary to protect rights, property, or safety.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, with notice consistent with this policy.

Retention

We keep personal data only as long as needed for the purposes above, then delete or anonymize it. Demo and contact inquiries are kept for as long as needed to follow up and for a reasonable period afterward for our records; account data is kept for the life of the account and a limited period after closure as required for legal, security, and audit purposes.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of your personal data, and to object to or restrict certain processing. Where we rely on consent, you may withdraw it at any time. To make a request, email privacy@soarcery.ai. We will respond within the time required by applicable law and may need to verify your identity first. You also have the right to complain to your local data protection authority.

US state privacy rights

If you are a resident of California or another US state with a comprehensive privacy law, you may have rights to know, access, correct, and delete your personal information, to obtain a portable copy, and to appeal a decision. We do not sell personal information or share it for cross-context behavioral advertising, and we do not knowingly process sensitive personal information for purposes that would require an opt-out. To exercise a right, contact privacy@soarcery.ai. We will not discriminate against you for exercising these rights.

International transfers

We are based in the United States and our providers may process data in the United States and other countries. Where we transfer personal data out of the EEA, the UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, together with additional measures where needed.

Children

Our site and product are for businesses and are not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

Security

We protect personal data with encryption in transit and at rest, least-privilege access controls, tenant isolation in the product, and ongoing monitoring. No method of transmission or storage is perfectly secure, but we work to protect your data and to improve continuously. Learn more on our trust page. To report a security issue, see our responsible disclosure policy.

Changes to this policy

We may update this policy as our product and the law evolve. When we make material changes, we will update the date above and, where appropriate, provide additional notice. Your continued use of the site after an update means you accept the revised policy.

Contact

Questions or requests: privacy@soarcery.ai, or use our contact page. Postal address available on request.