--- title: "Privacy - Socienne" url: https://socienne.com/privacy status: Private beta publisher: Zentered Studios LLC --- # Privacy Socienne is in private beta. This page says what Socienne stores, where, who processes it, and how an owner exports or removes it. It describes the service as built on 2026-10-15. A line marked planned is not built. It is not a promise and it carries no date. Socienne is operated by Zentered Studios LLC, a Colorado LLC. Write to [hello@socienne.com](mailto:hello@socienne.com). Socienne has not yet checked the entity against a public Colorado record, and cites none here. This page is not legal advice. It says what Socienne does. It does not say which law applies to you or to Socienne. ## What Socienne stores An owner connects Claude or ChatGPT to Socienne. The assistant calls Socienne's tools, and Socienne keeps the record. Socienne stores what the owner or their assistant enters, and what arrives for them. Expenses, LinkedIn posts, Wise bank lines and inbound mail are open to Zentered's own business only during the beta. ### In the database - **Business and people.** Business name, short name, base currency, time zone. For each member: sign-in email, identity ids, display name, role. - **Customers and contacts.** Customer and business names, addresses, tax ids, invoicing contact names and emails. Contacts with email, name and company. Logged emails with sender, recipients, subject, body and summary. - **Time and projects.** Projects, rates, retainers, time entries (dates, minutes, tasks, notes), proposed entries with the reason and evidence references, and an action log of what an agent wrote and how to undo it. - **Invoices.** Invoices and lines, the bill-to details (with the bill-to tax id) and seller details copied at issue, a log of each send (recipient addresses, subject, status), and a record of each export. - **Agreements and forms.** Agreements (title, text, counterparty name and email, signed date) and business forms (the W-9), each send with its recipient and copy addresses, subject, message and status. - **Outgoing mail.** A queue of each email Socienne sends for the business (invoices, forms, agreements, member invites and owner alerts): sender, recipients, subject, a reference to the stored body, and delivery events. - **Ledger and business lines.** Business lines, accounts, and journal entries and lines posted for invoices and payments. - **Ad campaigns.** Name, channel, dates, and hand-entered spend (date, amount, note). - **Business profile.** Legal and trading name, address, email, phone, website, tax id and bank account details, logo and payment QR references, reply-to address, payment instructions, payment link, invoice numbering. - **Expenses.** Vendors (name, address) and expenses (date, amounts, category, notes). Vendor tax ids are not stored. - **Bank lines, if you connect Wise.** Account reference, date, amount, fee, description, counterparty, reference, and the match to an invoice or expense. - **Social posts, if you connect LinkedIn.** Your LinkedIn member id, the text, time and status of each scheduled post, and a single-use hash of each LinkedIn sign-in link, valid 15 minutes. - **Connection secrets.** Your LinkedIn access token and your Wise API token, each sealed with a key held by Socienne, not a key per business. Socienne keeps the last four characters of the Wise token in plain form to show which token is connected. Socienne also keeps the id of the Wise business profile chosen for sync, which member connected it, connection and disconnection times, sync times and the last sync error code. - **Filing reminders.** The obligations you keep (title, due date, completion events and references) and which days a reminder was shown. Filing rules are reference data with a source and a check date. They hold no personal data. - **Private beta requests.** Name, email, company and note from the form on socienne.com. They go into Zentered's own business record. A request you email to [hello@socienne.com](mailto:hello@socienne.com) is not added to that list. Cloudflare Email Routing passes it to Socienne's mail service, which handles it as inbound mail, below. When a mail route covers the address, Socienne keeps the message in its mail store, and the route may also forward a copy to a mailbox the route names. Without a route, the mail is refused and is not forwarded anywhere else. Socienne sets no deletion date for the stored copy and states no keeping period for a mailbox a route forwards to. - **Upload links.** Only a hash of each single-use link, which expires after 15 minutes. ### Files Files sit in Cloudflare R2, in private buckets. - `socienne-documents`: logos, payment QR images, invoice PDFs, imported invoices, expense receipts, signed W-9 forms, which carry a tax id, agreement PDFs, and the text and attachments of each outgoing mail. No expiry. - `socienne-staging`: an upload waiting for its check. Deleted after one day. - `socienne-exports`: export archives. Deleted after 7 days. - `socienne-mail`: inbound mail, below. ### Inbound mail For an address or domain an owner routes to Socienne, Socienne stores each message: headers, text, HTML, the raw message, attachments, the sender checks (SPF, DKIM, DMARC) and a search index of subject, sender and text. The index sits in Socienne's Postgres database at PlanetScale. A route can use the policy authenticated: mail that passes no SPF, DKIM or DMARC check is then still stored, marked spam, and not forwarded. A route with the policy all stores every message and forwards it when the route has a forward address, whatever the checks say. The routes in Socienne's code belong to Zentered's own business. Mail to an address with no route is refused. If Socienne cannot look up a route, it forwards the message to no one: the sending server is told to try again later. ### Logs Cloudflare Workers Logs keep one line for each request to the Socienne service: status, tool name, duration, outcome, error code and a few counters. The platform log also keeps request and response details, including the request URL, which includes a single-use upload link while it is valid. Cloudflare states a maximum log retention of 7 days. Socienne has not confirmed which Workers plan it is on, so the period may be shorter. Source: [Cloudflare Workers Logs](https://developers.cloudflare.com/workers/observability/logs/workers-logs/), checked 2026-10-15. ### This website and cookies `socienne.com` is served by Cloudflare. The page runs no script and sets no cookie. The beta form posts to `socienne.ai/beta`. Cloudflare sees ordinary request data, such as an IP address, when you visit. Source: [Cloudflare privacy policy](https://www.cloudflare.com/privacypolicy/), checked 2026-10-15. Two pages on `socienne.ai` set short-lived cookies: the export download and the Wise connect page. Each name starts with `__Host-`. They are HttpOnly and Secure and last ten minutes. The Wise connect page sets two. Sign-in runs on Auth0's page, which sets its own cookies. ## Who processes it These companies handle data for Socienne or for the owner. - **Cloudflare.** Runs the Socienne service (Workers), connects it to the database (Hyperdrive), holds its secrets (Secrets Store) and feature flags (Flagship, which stores the business ids a flag rule names), keeps the logs above, and serves socienne.com. - **Cloudflare R2.** Stores the files, and the raw inbound mail and its attachments. Cloudflare states that R2 encrypts objects at rest with AES-256 and in transit with TLS. Source: [Cloudflare R2 data security](https://developers.cloudflare.com/r2/reference/data-security/), checked 2026-10-15. - **Cloudflare Email Service.** Sends the email listed under Outgoing mail from `notifications@socienne.ai`. Cloudflare describes Email Sending as for outbound transactional email. Source: [Cloudflare Email Service](https://developers.cloudflare.com/email-service/), checked 2026-10-15. - **Cloudflare Email Routing.** Receives mail sent to an address or domain an owner routes to Socienne, including hello@socienne.com, and passes it to Socienne's mail service. - **Cloudflare, full list.** Cloudflare publishes its own subprocessors. Source: [Cloudflare subprocessor list](https://www.cloudflare.com/gdpr/subprocessors/), checked 2026-10-15. - **Cloudflare Workers AI.** Socienne's own background agents may use it. Workers AI is planned. The service has no connection to it today, and no data goes there. Source: [Cloudflare Workers AI data usage](https://developers.cloudflare.com/workers-ai/platform/data-usage/), checked 2026-10-15. - **PlanetScale.** Hosts the Postgres database and its backups. Socienne's own record puts the database on AWS in `us-west-2`. PlanetScale states that the infrastructure behind databases and backups is in the provider and region where the database is created. Source: [PlanetScale security](https://planetscale.com/docs/security), checked 2026-10-15. - **Auth0, part of Okta.** Handles sign-in and holds the identity (email, name) of each member. Auth0 describes its own data handling on the page linked here. Socienne has not verified Auth0's terms. Source: [Auth0 data privacy and compliance](https://auth0.com/docs/secure/data-privacy-and-compliance), checked 2026-10-15. - **Anthropic.** Not chosen by Socienne. It runs Claude, the owner's own AI client. What a Socienne tool returns goes into that client. The owner's terms with Anthropic apply. Socienne has not verified Anthropic's data terms. Source: [Anthropic privacy policy](https://www.anthropic.com/legal/privacy), checked 2026-10-15. - **OpenAI.** Not chosen by Socienne. It runs ChatGPT, the owner's own AI client, on the same terms. Socienne has not verified OpenAI's data terms. Source: [OpenAI privacy policy](https://openai.com/policies/privacy-policy/), checked 2026-10-15. - **LinkedIn.** Only if the owner connects it. Socienne posts to LinkedIn on the owner's schedule with the owner's token. Source: [LinkedIn privacy policy](https://www.linkedin.com/legal/privacy-policy), checked 2026-10-15. - **Wise.** Only if the owner connects it. The token an owner enters can do more than read. Socienne's code sends only read requests, to three fixed Wise paths. Source: [Wise privacy notices](https://wise.com/gb/legal/privacy-notices), checked 2026-10-15. ## Who can read it - In the database, row-level security is designed to keep one business's rows apart, under a login that cannot bypass it. The service tells the database which business a request is for. Anyone who holds the service's own database login can name any business. - Files and raw mail in R2 are kept apart by Socienne's code, not by the database. - These can read every business's records: a holder of the database administrator credential; a holder of the service's database login; a member of Socienne's Cloudflare account, which runs the service, holds its keys and stores the files, mail and logs. Zentered Studios holds these today. A step where an owner approves access and sees a log of it is planned, not built. - Socienne's service reads records in plain form to do its work. No key that only the owner holds protects the record. Socienne uses no separate encryption key for each business. - PlanetScale states that databases and backups are AES encrypted at rest. Cloudflare states encryption at rest for R2, in the row above. Source: [PlanetScale security](https://planetscale.com/docs/security), checked 2026-10-15. - Disk encryption by Cloudflare and PlanetScale protects lost disks. It does not protect against someone who holds a credential. - Tool results are kept short. Some fields are masked: a write returns the seller's payment instructions as a hash only. - Some actions are owner-only, such as the export. ## Your AI client Every tool result enters the context of the AI client you chose, at Anthropic, OpenAI or another provider. That is between you and the provider. Check the data terms of your plan with them. Source: [Anthropic privacy policy](https://www.anthropic.com/legal/privacy), checked 2026-10-15. ## Export Ask your assistant to run `export_time`. Only an owner can. Socienne builds a zip with one CSV for each table listed below, each stored file under `documents/`, and `manifest.json` with every file's size and checksum. The assistant gives you a link on `socienne.ai`. You open it in a browser and sign in again. The link works for 168 hours after the export is made, then it is refused. The zip is deleted from storage after 7 days. A record of the export stays. The archive holds: business, members, member grants and their revocations, business lines, customers, projects, rates, retainers, time entries, proposed entries and their evidence, the action log, documents, invoices and lines, invoice sends, business forms and their sends, agreements and their sends, the outgoing mail queue and its delivery events, exports, bank lines, expenses, vendors, LinkedIn accounts and posts, the ledger (accounts, journal entries and lines), ad campaigns and ad spend, contacts, logged emails, filing obligations and events, reminder days, the business profile, and the filing rules your obligations cite. The archive does not hold inbound mail and its files, the Wise connection record (the sealed token, its last four characters, the id of the Wise business profile chosen for sync, which member connected it, connection and disconnection times, sync times and the last sync error code), the sealed LinkedIn token, the hashes of upload and LinkedIn sign-in links, or private beta requests. The archive is capped at 24 MB for now. Stored files that do not fit are left out and named in `manifest.json`. If the records alone pass 24 MB, no archive is made. ## Removal - Nothing is deleted when you correct an entry. A wrong entry is voided or replaced by a new row, and the old row stays in the record. - Deleting a whole business's records and files is planned, not built. Erasing one person's data inside a business has no design yet. - To ask about removal, write to [hello@socienne.com](mailto:hello@socienne.com). Socienne has no tool that removes data today and cannot promise to carry out a request. A request does not shorten the backup window below. Socienne states no response time. - Data removed from the database stays in backups until the backup window ends. - Socienne's records say database backups are kept 30 days, set on 2026-09-27. PlanetScale's default is 2 days. Socienne has not re-read the live setting for this page. Source: [PlanetScale backups](https://planetscale.com/docs/postgres/backups), checked 2026-10-15. - Some data expires on its own: staging uploads after one day, export archives after 7 days, export links after 168 hours, upload links after 15 minutes, a LinkedIn connection after 60 days. All other records are kept. ## Changes This page was last updated on 2026-10-30. Socienne is in private beta, and the page changes when the service does.