SoRexWho we are
SoRex is operated by the SoRex team, Bellandur, Bengaluru, India (“SoRex”, “we”, “us”). This policy explains what personal data we handle when you visit our website, buy a subscription, or use SoRex, and the choices you have.
SoRex is used by businesses (our “customers”) to talk to their own customers (“end users”). For data about end users that a business puts into SoRex, that business decides how it is used and SoRex processes it on their behalf.
What we collect
- Account details: names, work emails, phone numbers and roles of the people who use the console.
- Billing details: the plan you choose and payment status. Card and UPI details are collected by Razorpay, not by us.
- Conversation content: messages, emails, call audio and transcripts exchanged with end users on channels a business connects.
- Business knowledge and data: articles, read-only database views and tool settings a business configures.
- Channel credentials: access tokens for connected platforms, stored encrypted.
- Usage and device data: log data such as IP address, browser type and the pages you visit, used for security and to keep the service running.
How we use it
- To provide SoRex: receive messages, generate replies, route conversations and send messages on a business's behalf.
- To bill subscriptions and prevent fraud.
- To secure the service, including rate limiting, audit logs and detecting misuse.
- To support you and tell you about changes to the service.
We do not sell personal data, and we do not use a business's conversations to train models for other businesses.
AI processing
Replies and voice calls are generated by AI models from third-party providers (OpenAI, Anthropic and Google, depending on the model a business chooses). The content needed to answer a message is sent to the provider to generate the reply. The agent is designed to answer from a business's own knowledge and tools, and every reply records the sources it used.
How long we keep it
Account and billing records are kept while your subscription is active and for 12 months afterwards, or longer where the law requires. Call recordings are deleted automatically on the schedule the business sets. A business can ask us to delete its conversation data at any time.
How we protect it
Channel credentials are encrypted at rest and decrypted only in memory when a message is sent. Access in the console is limited by role, and reading a transcript is recorded in an audit log. Database connections a business adds are read-only, and every query is limited to the end user being served.
Your rights
Depending on where you live, including under India's Digital Personal Data Protection Act, 2023, you may have the right to access, correct or delete your personal data, to withdraw consent, and to raise a grievance. To use these rights, email support@sorex.in. If you are an end user of a business that uses SoRex, please contact that business first, and we will help them respond.
Children
SoRex is a business service and is not directed at children. Businesses must not use it to collect children's data without the consent the law requires.
Changes to this policy
We will post any changes on this page and update the date above. If a change is significant, we will tell account owners by email.
Contact and grievance officer
You can reach our grievance officer at support@sorex.in, or by post at Bellandur, Bengaluru, India.