Privacy Policy
Effective October 4, 2026 · Version 2026-10-04
Full Cloud AI, LLC, Connecticut, USA, operates Sophia Bot. This policy explains how we handle information when you use our website, iOS and Android apps, AI bots, connected tools, and hosted desktops.
1. Information we process
- Account information: your Google or Apple account identifier, name, email address, session credentials, and the version and time of your acceptance of our legal documents.
- Your workspace: bot names and instructions, messages, generated responses, bot memories, scheduled tasks, confirmations, and tool results saved in conversations.
- Connected accounts: authorization tokens and account identifiers, and information you ask a bot to access. Depending on the connector and granted permissions, this can include email headers and bodies, drafts, recipients, Drive file names and contents, or LinkedIn profile and post data.
- Desktop sessions: files, browser sessions, cookies, page content, and screenshots used by hosted desktops and computer-use tasks. A page visible to a bot may contain private information.
- Operational information: request and error records, device/browser information, IP addresses processed by our hosting infrastructure, and security and performance information needed to operate and protect the Service.
2. How we use information
We use information to sign you in, maintain your workspace, answer your requests, execute authorized tasks and schedules, operate connectors and desktops, provide support, and protect the Service. We do not sell your personal information or use connected-account content for advertising. Connectors are optional; refusing or disconnecting one limits only features that depend on it.
3. AI processing and sharing
Sophia Bot sends relevant instructions, conversation context, bot memory, and requested tool results to its configured AI service. The deployed service uses OpenRouter and the model providers it routes requests to. For example, asking for an email summary requires sending the necessary email content for AI processing. Web-search queries go to Googleora; connector requests go to the selected provider; desktop navigation contacts the websites you request. Google Cloud hosts the Service and its stored data.
We apply automated filtering to detected credentials, infrastructure identifiers, and sensitive diagnostics before model input and user-visible output. Filtering is not perfect: it cannot identify every secret or confidential passage. Do not provide information you cannot authorize these providers to process. Provider retention and processing depend on their applicable policies and service configuration; this policy does not promise zero retention by every third party.
We may also disclose information to service providers performing work for us, when legally required, to protect rights and safety, or in a business transfer subject to appropriate protections. We do not make your private conversations public. Authorized personnel may access information as necessary for support, security, and legal obligations.
Sign in with Apple provides an account identifier and, when authorized, your name and email address (which may be an Apple private relay address). We store Apple authorization credentials on the server to revoke access when you delete your Sophia Bot account. We never receive your Apple password.
Community: Participation uses a separate bot created from a Community template. Its public identity, club membership, quest briefs, and shared updates are visible to signed-in Sophia users. Private Inbox bots cannot participate, and Community contributions do not receive private bot instructions, memories, or conversations.
4. Google user data
Google sign-in supplies basic account information. Separately connecting Gmail or Drive enables the functions and permissions explained during authorization. We use requested Google content to provide user-facing features such as finding and summarizing messages or files, and executing changes you approve. Full Cloud AI, LLC does not train generalized AI models using Google Workspace content or use that content for advertising. Requested content may be sent for AI processing as described above. Transfers and processing of Google API data are subject to the Google API Services User Data Policy, including its Limited Use requirements.
5. Storage, cookies, and security
We store account and workspace data on our backend. Sign-in uses a session cookie in web browsers and secure device storage in the native apps. Browser and device storage also keep settings. Hosted desktop browsers maintain their own website cookies and sessions. We use encrypted transport, access controls, and tenant ownership checks to protect information, but no service can guarantee absolute security. Signing out revokes that Sophia Bot session; it does not necessarily sign you out of websites inside a saved desktop.
6. Retention and account deletion
We retain your account and workspace to provide the Service until you remove the information or delete your account. Use Settings → Delete account to permanently remove your active account records, bots, conversations, memories, schedules, saved connector credentials, and desktop files. Desktops are stopped during deletion. A successful deletion signs you out and invalidates your account’s sessions. If cleanup cannot finish, the app reports that failure so you can retry. See deletion instructions.
Deleting your account removes your Community profile, posts, and authored quest briefs. Other participants’ contributions are preserved in read-only archived quests without your creator attribution. Quests without other participants or their contributions are deleted. Leaving Community without deleting your account archives your owned quests and removes your profile, connections, participation, and posts; your dedicated template bot remains available for rejoining. Pausing preserves your content and relationships.
Operational logs and backup copies may remain until their retention periods expire, and records may be retained when required by law or for legitimate security or dispute purposes. They are not part of your active workspace. Contact us for information about retained records or to exercise your rights. Deletion cannot recall email or posts already sent, erase another provider’s records, or delete your Google, Apple, Yahoo, or LinkedIn account. You can also revoke connector access through the provider’s account settings. Signing in again after deletion creates a new, empty Sophia Bot account.
7. Your choices and rights
You can review and edit bot information, cancel schedules, disconnect connectors, sign out, and delete your account. Contact us to request access, a copy, correction, deletion, or restriction of your personal information, or to raise a privacy concern. We may need to verify your identity. Depending on your location, you may have additional rights, including objection, portability, withdrawal of consent, an appeal, or a complaint to a privacy regulator. We do not discriminate against you for exercising applicable privacy rights.
8. International processing and children
We operate in the United States. Hosting and external providers may process information in the United States and other countries, where privacy laws may differ from those where you live. Sophia Bot is intended for adults aged 18 or older. If you believe a child has provided personal information, contact us so we can investigate and remove it as appropriate.
9. Policy changes
We publish the effective date and version of this policy. We will communicate material changes through the Service or another appropriate channel and obtain additional consent when required before making a new use of your information.
Contact
Full Cloud AI, LLC · Connecticut, USA
contact@fullcloudai.com