Privacy Policy for Sora3

1. Introduction

This Privacy Policy describes how Sora3 collects, uses, stores, and discloses information when you access our website and services at https://sora-3.io.

Sora3 is an AI media generation platform focused on video workflows, including text-to-video, image-to-video, and related editing capabilities. By using the service, you acknowledge this Privacy Policy.

2. Information We Collect

We may collect the following categories of data:

1. Account Information

   • Examples: email address, login method, account identifier, and profile details you provide.
   • Purpose: registration, authentication, support, and order/billing management.

2. Generation Inputs and Outputs

   • Examples: prompts, uploaded images, videos or audio, generation parameters, generated outputs, and generation history.
   • Purpose: execute requests, return results, diagnose issues, prevent abuse, and improve reliability.

3. Payment and Transaction Data

   • Examples: subscription/plan type, credits purchased or consumed, order records, billing status, country/currency, and Stripe transaction identifiers.
   • Purpose: billing, fraud prevention, credit issuance, and handling refunds or chargebacks where applicable.
   • Note: complete card details are processed by payment providers (such as Stripe) and are not stored directly by Sora3.

4. Technical and Usage Data

   • Examples: IP address, device and browser type, operating system, timestamps, referrer, crash data, API logs, and cookie identifiers.
   • Purpose: security, analytics, troubleshooting, and performance optimization.

5. Support and Communication Data

   • Examples: support conversations, feedback submissions, and dispute records.
   • Purpose: issue resolution, legal response handling, and service improvement.

3. How We Use Information

We use personal information to:

• Provide, maintain, and operate the Sora3 service.
• Authenticate users and protect account security.
• Process subscriptions, payments, and credit-based usage.
• Detect abuse, fraud, policy violations, and unauthorized access.
• Improve product quality, model routing strategies, and generation consistency.
• Comply with legal obligations and enforce our Terms of Service.

4. AI Processing and Third-Party Model Providers

To fulfill generation requests, your prompts and uploaded media may be sent to third-party model or infrastructure providers selected by the workflow you use.

These providers process data under their own terms and privacy practices, and may operate in different countries. We share only data reasonably required to complete requested generation tasks, run operations, or perform safety checks.

5. Cookies and Similar Technologies

We use cookies and similar technologies for:

• Core features (session handling, security, fraud prevention).
• Preferences (language and product settings).
• Analytics and performance monitoring.

You can manage cookies through browser settings. Disabling some cookies may reduce or disable certain features.

6. How We Share Information

We do not sell your personal information for direct monetary compensation. We may share information with:

• Service Providers: vendors for hosting, storage, analytics, payments, moderation, and support.
• Model/Compute Providers: to process AI generation requests.
• Legal or Regulatory Authorities: when disclosure is required by law or legal process.
• Corporate Transactions: in connection with merger, acquisition, financing, or asset transfer, with appropriate safeguards.

7. Data Retention

We retain data for as long as necessary to:

• Provide the service and preserve account history.
• Process transactions, prevent abuse, and resolve disputes.
• Meet legal, tax, accounting, and compliance requirements.

Retention periods vary by data type and workflow. When information is no longer required, we delete or de-identify it where reasonably feasible.

8. International Data Transfers

Your information may be processed or stored in countries outside your place of residence. Where legally required, we apply appropriate safeguards for international transfers.

9. Your Rights and Choices

Depending on your location, you may have rights to:

• Access, correct, or delete personal information.
• Request a copy (data portability) of certain data.
• Object to, or request restriction of, certain processing.
• Withdraw consent where processing depends on consent.
• Unsubscribe from non-essential marketing communications.

You may submit requests to support@sora-3.io. We may need to verify your identity before processing your request.

10. User-Controlled Sharing

If the service offers publish/share features (for example, public links), content you choose to share may become publicly accessible. Please use sharing controls carefully.

11. Security

We implement administrative, technical, and organizational safeguards designed to protect data. However, no transmission or storage method can be guaranteed as fully secure.

12. Children's Privacy

Sora3 is not intended for children under 13 (or a higher minimum age required by local law). If we learn that we collected a child's personal information in violation of applicable law, we will take reasonable steps to remove it.

13. Changes to This Policy

We may revise this Privacy Policy from time to time. Material updates will be posted on this page with a revised effective date.

14. Contact

• Website: https://sora-3.io
• Support: support@sora-3.io

Last Updated: March 11, 2026