Sotto is operated by Samijoe El Hayek, an individual based in Lebanon, who is responsible for your data. Questions or deletion requests: support@sottohq.app.
The short version
- Your call’s audio is transcribed on your Mac and never uploaded.
- When you ask for an answer, Sotto sends that request — the new transcript, your profile, and for screen analysis one screenshot — to Sotto’s servers, which pass it to Anthropic’s Claude API to write the answer.
- Sotto’s servers don’t store transcripts, profiles, screenshots or answers. They keep your account, your credits, and how many tokens each request used.
What we hold
| Data | Why | How long |
|---|---|---|
| Email address and account ID | To sign you in and support you | Until you delete the account |
| A salted hash of your Mac’s hardware ID | One free daily allowance per machine | Until you delete the account |
| Credits, purchases and refunds | To run the ledger and meet tax rules | As long as the law requires |
| Per-request token counts, timings and errors | To keep the service working and priced honestly | 12 months |
| Your requests and answers | Not stored at all | — |
Who else processes your data
- Anthropic (Claude API) writes the answers. Anthropic does not train on API content and does not retain it by default; content flagged by their safety systems can be kept up to two years.
- Supabase stores the account database and handles sign-in.
- Fly.io runs Sotto’s servers.
- Resend delivers the emails with your sign-in code, so it handles your email address.
- Paddle is the merchant of record for purchases and holds the payment details; Sotto never sees your card.
Recording other people
Sotto transcribes whatever your Mac hears. Whether you may record or transcribe a conversation depends on where you and the other people are; in many places everyone has to agree. That is your responsibility, and Sotto shows an AI notice at the start of every session to make the assistance visible.
Your choices
Ask us at support@sottohq.app for a copy of your data or to delete your account. Crash reports and anonymous usage statistics are off unless you switch them on.