SoulQuest Share

Legal

Privacy Policy

Privacy Policy — SoulQuest Share

Last updated: June 11, 2026

1. Introduction

This Privacy Policy describes how SoulQuest Share ("we", "us", or "our") collects, uses, stores, and protects your personal information when you use the SoulQuest Share platform and related services.

SoulQuest Share is a product of Corton Labs, a sole proprietorship operated by Anitta Corton, based in Toronto, Ontario, Canada. This policy complies with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

We are committed to protecting your privacy and handling your data with transparency and care. By using the Service, you agree to the practices described in this policy.

2. Information We Collect

Account information: name, email address, hashed password, and profile details you provide at signup.

Practice and voice data: information you provide about your spiritual practice, brand values, tone of voice, and content preferences — used to train the AI to generate content aligned with your style ("Voice Resonance" data).

Generated content: AI-generated posts, captions, and content drafts created during your use of the platform.

Usage data: log data, device information, IP address, browser type, pages visited, features used, and interaction patterns within the platform.

Billing data: handled by our payment processor, Stripe. We store only a customer ID and subscription status. We never store your full card number on our servers.

Communications: support tickets, emails you send us, and any feedback or survey responses you choose to submit.

3. How We Use Your Information

We use your personal data for the following purposes:

  • To provide the platform: authenticate you, save your content, and personalize AI outputs to your voice and values
  • To improve the product: aggregate, anonymized analytics on platform usage and feature performance
  • To communicate: send transactional emails (receipts, password resets, trial expiration notices) and, only if you opt in, product updates and newsletters
  • To process payments and manage your subscription
  • To keep the platform safe: detect fraud, abuse, bots, and policy violations
  • To comply with applicable legal obligations, including PIPEDA and Canadian tax law

We will never sell your personal information to third parties.

4. How We Use Your Voice and Practice Data

The information you provide about your practice, values, and tone is used exclusively to generate content personalized to you within the platform. Specifically:

  • We use your Voice Resonance data to train the AI model to reflect your individual style
  • We do not use your voice or practice data to train general AI models shared across other users or third parties
  • We do not share your practice data with advertisers, data brokers, or any third party for marketing purposes
  • If you close your account, your Voice Resonance data will be deleted within 30 days

5. Legal Basis for Processing

We process your personal data on the following grounds:

  • (a) Contract: to fulfill our obligations to you as a subscriber
  • (b) Legitimate interests: to operate, secure, and improve the platform
  • (c) Legal obligations: to comply with applicable laws including PIPEDA
  • (d) Consent: for marketing communications and any other processing where consent is required

6. Data Sharing

We do not sell your personal data. We may share it only with the following categories of recipients:

  • Payment processors: Stripe (stripe.com) processes checkout, subscription billing, and invoicing securely on our behalf. We intend to transition to Lemon Squeezy as our Merchant of Record in the future. You will be notified in advance of any such change.
  • Hosting and infrastructure providers: Cloudflare, Supabase, and Vercel — services that host the platform and store data securely
  • Email delivery providers: Resend or similar services used to send transactional and, where consented, marketing emails
  • Analytics providers: Google Analytics 4 (Google LLC) for privacy-preserving, aggregated usage insights — loaded only after you accept analytics cookies in our consent banner
  • Professional advisers: legal, accounting, and compliance professionals where necessary
  • Authorities: when required by applicable law, court order, or regulatory process

All third-party providers are contractually required to handle your data securely and only for the purposes we specify. We do not share your data with advertisers or data brokers.

7. International Transfers

Our infrastructure providers may process your data in countries outside Canada, including the United States and the European Union. Where applicable, we rely on Standard Contractual Clauses (SCCs) or other recognized adequacy mechanisms to ensure your data receives an appropriate level of protection.

8. Data Retention

We retain your account and content data while your account is active. Financial and billing records are retained for a minimum of seven (7) years in accordance with Canadian tax law.

If you close your account, we will delete or anonymize your personal data, including your Voice Resonance data and generated content, within 30 days — except where retention is required by law. Backups are purged on a rolling 90-day cycle.

9. Your Rights Under PIPEDA

Under PIPEDA, you have the right to:

  • Access — request a copy of the personal information we hold about you
  • Correction — request that inaccurate or incomplete information be corrected
  • Withdrawal of consent — withdraw consent to our collection or use of your data, subject to legal or contractual restrictions
  • Complaint — file a complaint with the Office of the Privacy Commissioner of Canada if you believe your rights have been violated

To exercise any of these rights, contact us at privacy@soulquestshare.com. We will respond within 30 days.

If you are located in the EU or UK, you also have rights under GDPR including erasure, restriction, portability, and objection. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.

10. Security

We implement appropriate technical and organizational measures to protect your data, including:

  • TLS encryption for data in transit
  • Encryption at rest for stored data
  • Hashed passwords
  • Access controls limiting who can view personal data
  • Rate limiting and bot protection
  • Regular security scans and assessments

No system is completely secure. If we detect a breach affecting your data, we will notify you and relevant regulators as required by applicable law.

11. Cookies and Analytics

Strictly necessary cookies: required for authentication, session management, and core platform functionality. These cannot be disabled without breaking the Service.

Analytics cookies — Google Analytics 4 (measurement ID G-MS0B7E3HZ5): with your consent, we use Google Analytics, a service provided by Google LLC, to understand aggregate platform usage. Google Analytics sets first-party cookies (typically _ga and _ga_*) and may process data including your IP address (truncated / anonymized via the anonymize_ip setting), device and browser information, pages visited, and referring URLs. This data may be transferred to and processed by Google in the United States and other countries; Google relies on Standard Contractual Clauses for such transfers. We have disabled Google Signals, advertising features, and ad personalization. We do not share Analytics data with advertisers.

Your choice: when you first visit the site, a cookie banner asks for your consent. Analytics cookies are only set if you click "Accept". You can withdraw consent at any time by clearing the sqs_cookie_consent_v1 value in your browser storage and reloading the page, or by enabling "Do Not Track" / using browser-level cookie controls. You can also install the Google Analytics Opt-out Browser Add-on.

We do not use third-party advertising cookies or cross-site trackers.

12. Children's Privacy

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, contact us immediately and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the platform at least 14 days before they take effect. The "Last updated" date at the top reflects the current version. Continued use of the Service after changes take effect constitutes your acceptance.

14. Contact

Questions, requests, or complaints about this Privacy Policy: Email: privacy@soulquestshare.com SoulQuest Share is a product of Corton Labs — cortonlabs.com Toronto, Ontario, Canada