Privacy policy

Effective [DATE]. Draft: to be reviewed by a lawyer before it's published.

Sorus is made by eta reduce ("we", "us"). This policy says what Sorus does with your information. The short version: your notes live on your computer. We only hold what you choose to sync, and we don't sell or share it, or use it for advertising.

What stays on your computer

Everything you write in Sorus, including pages, objects, files, recordings, your calendar's events and your time log, is kept in a database on your computer. Without a Sorus account, none of it leaves your computer, except as described under "Things you ask Sorus to do" below.

Sign-in details for services you connect, such as Google Calendar or your Sorus account, are kept on your computer, encrypted with your system's keychain where it has one.

If you create a Sorus account and sync

To sync workspaces between your devices, or to share them with others, you create a Sorus account. Then we keep:

• Your account: your email address, and the sign-in details Amazon Cognito keeps for us to sign you in.
• Your devices: a name and an ID for each device you sync from.
• What you sync: the workspaces you choose to sync, meaning their pages, objects, files and the history of changes to them, so your other devices and the people you share with can get them.
• Who's in each workspace, and what each of them can do.

This is stored with Amazon Web Services in the United States (us-east-1, Virginia). It's encrypted in transit and at rest. A workspace stays synced until its owner deletes it. Deleting it removes it from our servers, along with its history and files, though copies already on devices stay there. To delete your account and everything in it, write to privacy@etareduce.com.

We look at your synced data only to keep the service running: to fix a problem you've reported, or when the law requires it.

Things you ask Sorus to do

Some features reach other services, only when you use them:

• Google Calendar. If you connect it, Sorus reads your calendars and events (read-only) to show them beside your notes. They're kept on your computer. Sorus's use of information from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We don't move that information to our servers, unless you sync a workspace holding it, and we never use it for advertising. Disconnect at any time in Sorus, or from your Google account.
• Your Mac's calendars. If you allow it, Sorus reads them on your computer.
• Web pages. Sorus's built-in browser loads the sites you visit, as any browser does. Searches typed in its address bar go to DuckDuckGo. When you put a link in a page, Sorus fetches the link to show its title and picture.
• The microphone, only while you record a voice note.
• Extensions you install can read and change what you allow them to, as Sorus asks when you install them.

What we don't do

Sorus has no ads and no advertising trackers. It doesn't collect analytics about how you use it. We don't sell your information or share it with anyone except the providers that run the service for us: Amazon Web Services for hosting and sign-in, and Amazon Simple Email Service for account emails.

Children

Sorus isn't meant for children under 13, and we don't knowingly keep their information.

Changes

If this policy changes, we'll update the date at the top. If the change is significant, we'll tell people with accounts before it takes effect.

Contact

eta reduce, [ADDRESS]. hello@etareduce.com; for privacy, privacy@etareduce.com.