Owner review draft

Beta privacy notice

This beta notice is a draft. Active-account retention and the account-closure process remain under review.

Orkka LLC operates Soughto.

Soughto helps you search your private library and send questions to a circle you choose. Local search supports private questions and circle requests on your device. Optional cloud-agent features are separate and gated in the beta.

You choose which sources to connect and import. In device-only mode, imported source content, local indexes, questions and answers stay in your device library. For sync, approved devices encrypt transfers before upload. The sync service stores ciphertext and cannot decrypt the library with its service credentials. The service still sees account and device records, public keys, membership, transfer sizes, timing and delivery metadata. Google sign-in does not recover library contents if you lose every approved device.

The optional cloud-agent design adds encrypted storage for delegated information and persistent tasks. Authenticated, authorized workers can process the information you delegate. This mode does not mean that only your devices can read the content. Cloud-agent availability, worker permissions, provider access and retention details must be confirmed before activation. The device-sync retention settings below do not define cloud-agent retention.

When you send a circle request or reply, you approve its text. The app encrypts it for its recipients. Recipients can keep or disclose what they receive. Deleting your local copy cannot delete copies already held by another person.

Google handles sign-in and the source permissions you approve. The bundled Google Sign-In SDK declares linked account information, coarse location, identifiers and usage data. Some SDK declarations include Analytics. This beta therefore does not claim that every component collects no data or performs no analytics. The app and SDK manifests mark their declared data as not used for tracking.

Library transfers have a 24-hour access limit. Acknowledgement and expiry trigger cleanup. The ciphertext bucket also has a deletion rule at object age one day, with versioning and soft deletion disabled. The global default log bucket retains records for 30 days. The required audit-log bucket retains records for 400 days. The database retains seven backups and seven days of transaction logs. Active account records have a separate lifecycle that the owner must define. These settings are not a verified deadline for physical erasure of every copy.

You can disconnect a source, remove imported data or sign out. These actions have different effects. Sign-out does not delete your local library or server account. A complete account-closure and server-deletion process is not established by this draft.

The website waitlist uses Waitlister. When you submit the form, your browser sends your email directly to Waitlister, which stores it to manage beta invitations and updates for Orkka LLC. Waitlister also receives the connection information needed to process the request. Joining the waitlist does not create a Soughto account or grant access to an app library. For waitlist removal requests, contact [email protected].

The public website uses Google Analytics to measure visits and interactions. The Google tag can use cookies and send page, browser, device and interaction information to Google. This website measurement is separate from on-device library processing. We do not add waitlist email addresses or app library content to analytics events. Read how Google uses information from sites that use its services.

For beta privacy questions, contact [email protected].