Privacy Policy

Effective date: October 3, 2026

1. Scope

This Privacy Policy applies to information processed through SOMARIM websites, applications, services and supported connected-service features, unless a separate privacy notice or agreement expressly applies.

2. Information we may process

Depending on how SOMARIM is used, information may include account and identity information; access requests; prompts and instructions; files or content supplied by users; memory and contextual information; system, security and diagnostic information; mission, tool and workflow records; communication metadata and message content where a communication feature is used; and information returned by connected providers within authorized scopes.

3. Connected platforms and APIs

SOMARIM may connect to social, communication, identity, development, commerce, payment and other third-party services. The information available through an integration depends on the permissions and scopes authorized by the user and the provider's API. SOMARIM does not claim that every integration receives the same information, and it aims to request only the permissions necessary for the intended function.

4. How we use information

Information may be used to authenticate and authorize users; operate requested features; maintain memory and continuity; perform research and analysis; execute authorized missions and tools; provide connected-service functionality; communicate with users; maintain security; detect misuse; troubleshoot failures; measure outcomes; improve the platform; and satisfy legal or operational obligations.

5. AI processing

Information supplied to SOMARIM may be processed by AI models or other computing components necessary for the requested feature. Depending on configuration, this may include local or self-hosted models and external model providers. The applicable product configuration and agreements determine which processors are involved.

6. Memory and contextual data

SOMARIM may retain selected information to support memory, continuity, evidence, world-model context, mission history and learning workflows. Retention and deletion depend on the specific feature, system configuration and applicable legal requirements.

7. Credentials and secrets

Connected-service credentials, authorization tokens and other secrets are intended to be handled through protected application mechanisms and should not be exposed in ordinary user interfaces or logs. Users remain responsible for maintaining the security of credentials they control and for revoking access with a provider when appropriate.

8. Communications

Where SOMARIM is configured to draft or deliver communications, information necessary to prepare, authorize, send, receive or audit those communications may be processed. External communications may be subject to owner approval, provider policies and applicable law.

9. Economic and payment information

Some SOMARIM workflows may interact with commerce or payment providers. SOMARIM should process only information necessary for the configured workflow. Payment credentials and payment processing may be handled directly by specialized payment providers rather than stored by SOMARIM. Users should review the relevant provider's privacy notice.

10. Legal bases and user rights

Where data-protection laws such as the EU General Data Protection Regulation apply, the relevant legal basis for processing depends on the context and purpose. Depending on applicable law, individuals may have rights including access, correction, deletion, restriction, objection, portability and withdrawal of consent. Requests should be made through the official SOMARIM privacy contact channel.

11. International processing

SOMARIM and its infrastructure or service providers may process information in countries other than the country where the user is located. Where applicable law requires safeguards for international transfers, appropriate mechanisms are intended to be used.

12. Sharing and processors

SOMARIM does not sell personal information as a business model. Information may be shared with infrastructure, hosting, model, communications, analytics, security, payment or other service providers when necessary to provide requested functionality or operate the platform. Information may also be disclosed where required by law or necessary to protect rights, safety and system integrity.

13. Security

SOMARIM is designed to use technical and organizational safeguards appropriate to the nature of the information and the risks involved, including access controls, authorization boundaries, protected credentials, controlled execution and operational monitoring. No system connected to the internet can guarantee absolute security.

14. Retention

Information is retained only for as long as reasonably necessary for the applicable purpose, operational continuity, security, contractual requirements or legal obligations, subject to the specific system and applicable law.

15. Cookies and similar technologies

SOMARIM may use essential browser storage, cookies or similar mechanisms required for authentication, security and application functionality. If non-essential analytics, advertising or similar technologies are introduced, applicable notices and consent mechanisms will be provided where required by law.

16. Children

SOMARIM is not intended to be used by children in circumstances where applicable law requires parental authorization unless the relevant product expressly supports such use.

17. Third-party privacy policies

When you connect a third-party service, that provider may independently process information under its own privacy policy and terms. Users should review those policies before authorizing an integration.

18. Data requests and account controls

Where available, users may revoke integrations, stop using features, request deletion or exercise applicable privacy rights through the appropriate SOMARIM or third-party channel. Certain records may need to be retained where required by law, security, fraud prevention or legitimate operational purposes.

19. Changes to this policy

SOMARIM may update this policy as the platform, integrations and legal requirements evolve. The effective date at the top identifies the current version published on this page.

20. Contact

For privacy, data-protection or security questions, use the official SOMARIM contact channel published on the website. If a formal legal entity or data-protection contact is designated for a particular SOMARIM product, that information will be provided in the applicable product notice.