Legal
Last updated: 25 June 2026
SoulHoster ("we", "us", "our") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and the choices you have.
Account information — When you register, we collect your name and email address.
Usage data — We log API requests (timestamps, endpoints, response codes) and token usage per tenant and agent to support billing, rate limiting, and debugging.
Agent content — System prompts ("soul" files) you supply are stored in our infrastructure to operate the Service. We do not read or use this content for any purpose other than serving your requests.
API keys — Tenant API keys are stored as secure hashes. If you supply a third-party AI API key (BYOK), it is stored encrypted at rest and used solely to forward requests to that provider on your behalf.
We do not sell your personal information. We do not use it for advertising.
We share your information only in the following circumstances:
Service providers — We use Cloudflare for infrastructure (compute, storage, database). Cloudflare processes data on our behalf under data processing agreements.
AI providers — If you use BYOK, your requests are forwarded to the AI provider you designated. We do not share your key or data with any other AI provider.
Legal requirements — We may disclose information if required by law, court order, or to protect the rights and safety of SoulHoster or others.
We retain account data for as long as your account is active. Usage logs are retained for 90 days by default. Agent content (soul files) is deleted within 30 days of agent deletion. You may request earlier deletion at any time.
We implement industry-standard security measures including encryption at rest and in transit, hashed credential storage, and network-level isolation between tenants. No system is perfectly secure; we encourage you to use strong, unique API keys and rotate them regularly.
Depending on your location, you may have the right to access, correct, or delete the personal information we hold about you, or to restrict or object to its processing. To exercise these rights, contact us at privacy@soulhoster.com.
We do not use tracking cookies or third-party analytics. The only browser storage we use is a single localStorage key (sh-theme) to remember your dark/light mode preference.
We may update this policy from time to time. We will notify you of material changes by updating the date above. Continued use of the Service after the effective date of changes constitutes acceptance of the updated policy.
Privacy questions or requests: privacy@soulhoster.com