Privacy policy

Sondar is operated by a single operator who acts as the data controller for the information described here. Every request in this policy goes to jdiawara@gmail.com.

When you request a free scan, the form stores exactly these fields and nothing more:

• your name and email address
• your company name and website
• the vertical your business operates in
• one competitor, if you choose to name one
• the timestamp of your consent

Together this is a Lead. The prompts Sondar sends to AI engines simulate buyers and never contain personal or patient data, so nothing about you is ever sent to ChatGPT, Perplexity, Gemini or Google AI Overviews.

Sondar processes Lead data on the basis of your explicit consent: the scan form cannot be submitted without ticking the consent checkbox, and the moment you do is stored with the Lead. You can withdraw consent at any time by asking for deletion (below), which does not affect processing that happened before.

Analytics run on the same basis. The public site loads no analytics script and sets no analytics cookie until you accept the banner; declining changes nothing about how the site works.

Lead data is used to run the Teaser Scan you asked for, to email you the Teaser Report, and to follow up about a strategy call. It is not sold, rented or used for any other marketing.

If you become a client, the audit and monitoring evidence Sondar stores about your business is business data (what the engines said about your company), kept as immutable, hashed records so the reports stay verifiable.

• Lead data is deleted after 1095 days (about 37 months) of inactivity, meaning no scan, call or email exchange in that period.
• Client Response Records and reports are retained for the duration of the engagement plus 1825 days (about 61 months) after it ends, the contractual period agreed for follow-up and dispute handling.

Email jdiawara@gmail.com from the address you used on the form and ask for deletion. One documented operator action removes your Lead and its consent record; you receive a confirmation once it is done. The same address handles access and correction requests.

Sondar runs on EU hosting, and the database and object storage that hold Lead data, evidence and reports stay in the European Union. Every page is served over TLS. Emails are sent through a transactional email provider, and analytics, when you accept them, are processed by PostHog on its EU cloud; both act as processors under written terms.

Under the GDPR you can ask for access to, correction or deletion of your data, restrict or object to its processing, and receive a copy of it in a portable format. Write to jdiawara@gmail.com; you also have the right to lodge a complaint with your national supervisory authority.

The terms of service describe the service itself.