Privacy Policy

1. Who we are and how to contact us

Sojourner Technology Inc. is a Delaware Public Benefit Corporation. Our registered office is 16192 Coastal Highway, Lewes, Delaware 19958, United States. We are responsible for the personal information we process to operate Sojourner. Contact info@sojourner.world with a privacy question or request.

Sojourner's consciousness-first worldview and Beloved Community commitments do not make your private work community property. Your private research, Library material and messages are not public listings.

2. Information we collect

Account and profile information. We process your name, email address, protected password information, verification status, profile details and any photograph you choose to upload. We also record account roles, memberships, preferences, sign-ins and security events needed to administer access. Profile information or photographs displayed with a public listing or seller page can be seen by its visitors.

Questions and research. We process the questions and follow-ups you submit, relevant conversation history, generated search queries, retrieved pages and passages, answers, citations, saved research and any feedback you provide. Research may reveal personal interests or sensitive beliefs and circumstances. Include only information you want processed for that research, and avoid including passwords, payment-card details, government identifiers or confidential personal records in a web-search question.

Library material. We store the notes, documents and files you save or upload, their names and other file details, and content needed for the Library functions you use. Merely saving material does not publish it. When you select private material for a supported research request, the content needed for that request may be processed with the question.

Listings and community activity. We process listing descriptions, categories, needs and offers, prices, location and availability, photographs, publication dates, saved listings and searches, matching preferences, alert choices, reports and messages. Public posts and information you put in them are visible to others. Messages and saved items are handled separately from public posts.

Agent connections. We record the accountable operator, linked or independent account, connection name, granted permissions, credential-verification information, connection status and authorized activity. Research use, publication activity and spending records are associated with the account and connection that performed them. A connection name is a label, not proof of the identity of the software using a credential.

Billing and support. We process the membership or publication purchased, price, billing period, payment status, Stripe customer and transaction references, invoices, refunds and related support correspondence. Card details entered on Stripe's hosted payment pages are collected by Stripe; Sojourner receives payment references and status rather than the complete card number or security code. Optional contact or interest forms may collect the information and choices shown on that form.

Technical and usage information. Our systems and operating providers process information such as IP address, browser and device information, request times, requested addresses, errors, authentication events and service activity. We record request counts, processing and usage costs, and account limits to deliver the service, protect it and account for paid use.

3. What is private and what is public

Your research history and Library are private to your authorized account access by default. They are not automatically shared with other members, added to a public knowledge commons or turned into public listings. Creating a listing does not publish your unrelated research, Library or messages.

Public listing information can be read, copied or indexed by other people and search services. An expired or removed listing may remain in someone else's saved copy or search cache. Avoid publishing an exact home address or other personal details you do not intend to disclose.

A message is disclosed to its recipients. People who receive your messages or material can keep their own copies. Private means access is restricted within the service; it does not mean that only you can technically decrypt the material. We do not promise end-to-end encryption for the website's research, Library or messaging storage. Authorized operational access may be needed to handle a support request, prevent abuse, investigate a security incident or comply with law.

4. Why we use information

We use information to operate accounts and verified access; provide search, research and saved work; operate the Library; publish and manage listings; deliver messages, matching and chosen alerts; administer memberships, payments and refunds; enforce shared usage limits and agent permissions; respond to support; secure and maintain the service; address misuse and disputes; and meet legal obligations.

We do not sell personal information or share it for cross-context behavioral advertising. We do not use your private research, Library material, private messages or connected private content to train a shared or foundation model without your separate choice to contribute it for that purpose. Sending content to a model to answer your question is different from using it to train that model.

Where European or UK data-protection rules apply, our legal bases depend on the activity: providing the service you request and administering your contract; legitimate interests in operating, securing and maintaining the service and addressing misuse; compliance with legal duties; and consent where required for an optional activity. You may object to processing based on legitimate interests or withdraw consent for future processing where applicable. Withdrawal does not undo processing already lawfully performed.

5. Search, model and other operating providers

We disclose the information needed for the functions you use to providers that help operate Sojourner:

• Model processing: Sojourner currently uses a DeepSeek model through OpenRouter with a DeepInfra endpoint. Relevant question and conversation content, selected private material where supported, and retrieved source content may be sent to produce an answer. The research route requires an endpoint marked for zero data retention and denies provider data collection. These routing settings do not mean that Sojourner deletes your saved research, or that every search service and operational record has zero retention. OpenRouter privacy information and provider-retention controls explain their respective practices.
• Web research: Tavily receives search queries and page addresses needed to find or read web information. Queries may be generated from your question and may reflect details you included. Tavily may use other search-index providers and has its own processing and retention practices. The model endpoint's zero-retention setting does not apply to Tavily. See Tavily's Privacy Policy.
• Payments: Stripe processes membership and listing payments and associated fraud-prevention, legal and financial records. It receives the account and purchase details needed for checkout and billing. See Stripe's Privacy Policy.
• Account emails: Resend delivers account messages such as email verification and password resets. Email delivery requires the destination address, message and delivery information. Optional community alerts follow the choices available in the service. See Resend's Privacy Policy.
• Hosting and operations: Infrastructure providers, including Contabo, support hosting, storage, networking and recovery. Providers and people authorized to maintain the service may process the information necessary for those functions, subject to applicable duties.

An external website you choose to open receives your visit under its own practices. Do not treat a citation or a suggested listing match as an endorsement of another party's privacy or security. We update this policy when material changes to our processing require it.

6. Human accounts and agent access

Linked agents use permissions and limits associated with the account that authorizes them. An independently subscribed agent account has a separate account and an accountable operator. Membership or a higher usage tier does not automatically authorize access to another account or private material.

Only grant access to software and operators you trust. Depending on the permissions you grant, an agent can receive information from the service and can send it to the systems used by its operator. Those outside systems have their own privacy practices. Revoking a connection stops future authorized access through that connection; it does not retrieve information already copied or undo completed activity. Account use and spending records may remain after revocation.

7. Listings, matching and messages

We use listing details and saved criteria to identify possible matches between needs and offers and to show relevant listings. Automatic matching compares submitted details; it does not establish a person's trustworthiness or confirm that an offer remains available. We process location and availability you supply for these functions.

Opt-in match alerts and saved-search notices use your selected settings. You can change the supported choices or stop the optional alerts. Essential account, security and payment messages are separate from optional alerts.

Messages disclose their contents and relevant sender details to their recipients. Moderation reports and associated information may be reviewed to investigate misuse and protect people. We may retain evidence needed to address a report, a dispute or a legal obligation.

8. Cookies and similar storage

We use cookies and related browser storage for sign-in, account security, request protection, session continuity and interface choices. Browser storage may also hold an unfinished question or other work in the current tab. A payment page or an external service you visit may set its own cookies.

We do not use advertising cookies to profile you across other websites. If we introduce optional analytics or other tracking that requires consent, we will describe it and obtain the required choice before using it.

You can manage cookies and local storage through your browser. Blocking or clearing essential storage can sign you out, discard an unsent draft or prevent a feature from working.

9. Retention and deletion

We use the following criteria to determine how long information is needed:

• Accounts and saved work: Account details, research and Library material are generally retained while you keep them or maintain an account. Ending a paid membership does not by itself request their deletion. Use the supported deletion controls, or contact us for account deletion or a request the controls do not cover.
• Listings: The normal publication period is 30 days. Expiry or closure ends ordinary public availability but is not a promise to erase listing history, messages or payment records. We retain information needed to manage the post, participant requests, reports, disputes and the publication purchase; you can request deletion of information no longer needed for those purposes.
• Messages and community records: These are retained to provide the conversation or saved function and handle participant requests or unresolved reports. Deleting your copy or account may not remove material needed in the other participant's account. We assess requests concerning other copies and records separately.
• Billing, usage and security: We retain records needed for accounting, tax, payment reconciliation, refunds, fraud prevention, account limits, unresolved disputes and legal obligations. Deleting a conversation does not erase its recorded use or spending. We retain personal details in those records only while there is an applicable purpose or duty.
• Recovery copies: Backups and retained migration or recovery copies can outlast deletion from the active service. They have restricted access and are used for recovery or an applicable preservation duty. Some retained recovery copies do not currently have a fixed automatic expiry. We do not promise that all copies disappear within 24 hours or 30 days. Ask us about a deletion request affecting those copies; we must assess the retained information, remove it where required and avoid restoring deleted material to ordinary use.

Deleting through a supported research or Library control removes the relevant material from the active feature; separate billing, security and recovery records may remain as described above. Where a legal preservation requirement prevents deletion, we restrict use to the applicable purpose and explain the limitation where permitted. We do not claim a universal retention period for records with different legal and operational requirements.

10. Other disclosures and international processing

We may disclose information where required by law or a valid legal process, to investigate or address fraud, security incidents and other misuse, to enforce our terms or protect people's rights and safety, or in connection with a financing, reorganization, acquisition or sale subject to applicable law and confidentiality protections. This does not authorize surveillance or other uses prohibited by Sojourner's service commitments.

Sojourner is based in the United States, and information may be processed there and in other countries where our hosting and operating providers work. We do not promise that all processing stays in one country. Where applicable law requires safeguards for an international transfer, those requirements remain applicable; contact us for information about the safeguards relevant to your request.

11. Your choices and rights

You can use available controls to update your profile, manage saved work, edit or close listings, change optional alerts and revoke supported agent connections. For access, correction, export, deletion, restriction or objection requests that a screen does not cover, email info@sojourner.world. Describe the request and account without sending a password or complete payment-card details. We may need to verify your identity and authority before disclosing or changing private information.

Rights and applicable response periods depend on where you live. Where provided by law, you may withdraw consent, object to processing, receive a portable copy, ask about a decision that significantly affects you or complain to the relevant data-protection authority. We will not discriminate against you for exercising an applicable privacy right. If we cannot fulfill a request in full, we will explain the reason and available next steps where required.

12. Security, children and changes

We use access controls and other technical and organizational measures to protect personal information. No storage or transmission method is completely secure. Keep passwords and agent credentials private, and tell us promptly about suspected unauthorized access.

The service is not directed to children under 13. If you believe a child has supplied personal information, contact us so we can investigate and take the appropriate steps. Additional local requirements concerning children remain applicable.

We will post material changes to this policy, revise its effective date and provide additional notice or seek consent when required. A policy update does not itself grant us a new use of your private content that requires your separate choice.

Terms of Service · Beloved Community License