Privacy Policy

Samoku (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the “Service”). Please read this policy carefully. By using the Service, you consent to the practices described herein.

1. Information We Collect

Account Information

When you register for an account, we collect your name, email address, and authentication credentials. If you sign in using a third-party provider (e.g., Google), we receive your name and email from that provider.

Payment Information

When you make a purchase, payment details are collected and processed by our third-party payment processor, Stripe. We receive a transaction confirmation and your Stripe customer ID, but we never store your full credit card number on our servers.

Document Information

Information you provide when using our tools — such as details about your medical bills, parking tickets, lease disputes, or invoices — is used solely to generate your requested documents. This data is stored in your account so you can access your letter history.

Usage Data

We automatically collect information about how you interact with the Service, including your IP address, browser type, device information, pages visited, and timestamps. This data helps us improve the Service and diagnose technical issues.

Cookies

We use cookies and similar tracking technologies to maintain your session, remember preferences, and analyze usage. We use only essential cookies (authentication, session management) and analytics cookies (understanding how users interact with the Service). You can control cookies through your browser settings.

2. How We Use Your Information

• Provide, maintain, and improve the Service.
• Generate personalized documents based on the information you provide.
• Process payments and fulfill orders.
• Communicate with you about your account, transactions, and Service updates.
• Analyze usage patterns to improve user experience and develop new features.
• Detect, prevent, and address fraud, abuse, or technical issues.
• Comply with legal obligations.

3. Data Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party vendors who assist in operating the Service (Stripe for payment processing, Google Cloud Vertex AI Gemini for document generation, Resend for email delivery, and cloud hosting providers), subject to confidentiality obligations.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
• With Your Consent: When you have given us explicit permission to share your information.

4. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information. These measures include encryption of data in transit (TLS/SSL), secure server infrastructure, access controls, and regular security reviews.

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access and Portability: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to certain legal exceptions.
• Opt-Out: Opt out of marketing communications at any time.
• Restriction of Processing: Request that we limit the processing of your data in certain circumstances.

For California Residents (CCPA)

You have the right to know what personal information is collected, to request deletion, and to opt out of the sale of personal information. We do not sell personal information.

For EU/EEA Residents (GDPR)

You have the right to access, rectify, erase, restrict, and port your personal data. You also have the right to withdraw consent and to lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at support@samoku.com.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. We may also retain information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. When your information is no longer needed, we will securely delete or anonymize it.

7. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it promptly. If you believe a child under 13 has provided us with personal information, contact us at support@samoku.com.

8. Third-Party Services

The Service may contain links to third-party websites or integrate with third-party services (such as Stripe for payments and Google for authentication). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy with a revised date. Your continued use of the Service after changes constitutes your acceptance of the revised policy.

10. Contact

If you have questions about this Privacy Policy, contact us at support@samoku.com.