Privacy Policy

1. Introduction

Sado Labs, Inc. ("Sado Labs", "we", "our", "us") operates the sorraia.app website and the Sorraia embeddable form, booking, and e-commerce widget platform (the "Service"). Sado Labs, Inc. is the data controller for the personal data processed through the Service. This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

2. Information We Collect

Account Information

When you create an account, we collect your email address and name via our authentication provider (Clerk). If you sign in with Google or Microsoft, we receive your basic profile information from those providers.

Form & Booking Data

When end users submit forms or book appointments through widgets you create, we collect the data they provide (name, email, phone, and any custom fields you configure). This data is stored in our database and forwarded to your configured webhook URL.

Order & Payment Data

When end users purchase through your e-commerce widgets, we process order details (items, amounts, and the shipping/contact information they provide). Card details are handled directly by Stripe and never touch our servers.

Tracking Data

Our widgets may capture third-party tracking cookies present on the host website. This data is forwarded to your webhook alongside form submissions for lead attribution purposes.

Calendar Data

If you connect a Google Calendar or Microsoft Outlook account, we access your calendar's free/busy information to show available time slots. We create calendar events for confirmed bookings. Calendar access tokens are securely stored by our authentication provider (Clerk) and are never exposed to third parties.

3. How We Use Your Information

• To provide and maintain the Service
• To create and manage your account
• To process form submissions, booking requests, and orders
• To forward submission and order data to your configured webhooks
• To check calendar availability and create booking events
• To send booking confirmation, reminder, and order emails
• To communicate with you about the Service

4. Data Sharing

We do not sell your personal information. We share data only in these cases:

• Webhooks: Form submissions, booking, and order data are forwarded to webhook URLs you configure.
• Service providers (sub-processors): We use third-party providers — including Clerk (authentication), Render (hosting & database), Stripe (payments), and Resend (email delivery) — to operate the Service. The full, current list is on our Sub-processors page.
• Calendar providers: Booking events are created in your connected Google or Microsoft calendar.
• Legal requirements: We may disclose information if required by law.

5. Data Security

We implement industry-standard security measures including encrypted connections (HTTPS), secure authentication via Clerk, and database encryption at rest. OAuth tokens for calendar integrations are stored securely by Clerk and never stored in our own database.

6. Data Retention

We retain your account data, form submissions, and orders for as long as your account is active. You may delete your forms, submissions, and account at any time. Webhook-forwarded data is subject to the retention policies of the receiving service.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Disconnect calendar and social account integrations at any time
• Export your form submissions and orders

8. Cookies

The Sorraia dashboard uses session cookies managed by Clerk for authentication. Embedded widgets on third-party sites may read existing third-party tracking cookies on those sites but do not set any cookies of their own.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Service.

10. Contact Us

If you have questions about this Privacy Policy, or wish to exercise your data rights, please contact the data controller, Sado Labs, Inc., at [email protected].