Privacy Policy

1. About This Policy

BLUR TEC LLC (“we,” “us,” or “our”) operates Sokr, an AI-powered messaging assistant accessible via SMS and WhatsApp, and at the website sokr.ai (collectively, the “Service”). This Privacy Policy explains what personal information we collect, how we use and protect it, and your rights with respect to it. By using Sokr, you agree to the practices described here. If you do not agree, do not use the Service.

2. Information We Collect

We collect the following categories of personal information:

• Phone number. Your mobile phone number in E.164 format is collected when you sign up for an account or when you first message Sokr. This is the primary identifier for your account.
• Name. An optional display name you may provide during account setup.
• Message content. The text content of messages you send to Sokr, including questions and commands, is processed to generate AI responses. A limited history of recent messages (up to the last 10) is stored per conversation thread to provide context-aware responses.
• Usage data.We record how many times Sokr is mentioned in your account's group chats each month for billing and plan enforcement purposes.
• Billing information. If you subscribe to a paid plan, Stripe processes payment card details on our behalf. We store only the Stripe Customer ID and Subscription ID — not your raw card number.
• Platform identifiers. WhatsApp group IDs and SMS thread identifiers, used to associate messages with the correct conversation.
• Opt-out status. Whether you have replied STOP to opt out of messages from Sokr.

3. How We Use Your Information

We use the information we collect to:

• Generate and deliver AI-powered responses when you or members of your group @mention Sokr.
• Send one-time passcodes (OTPs) to verify your phone number during account creation and login.
• Send account notifications, including billing alerts and service updates.
• Enforce subscription plan limits and process payments through Stripe.
• Maintain conversation history so Sokr can provide contextually relevant responses.
• Honor opt-out requests and comply with TCPA and carrier messaging requirements.
• Detect and prevent abuse, fraud, and violations of our Terms of Service.
• Improve the reliability and quality of the Service.

4. Mobile Messaging (SMS & WhatsApp)

Sokr uses your mobile phone number to send text messages. By completing account registration and verifying your phone number, you consent to receive the following categories of messages from Sokr:

• One-time passcodes for account verification and login.
• AI-generated responses to @mentions in group chats or direct messages.
• Account and billing notifications (e.g., payment failure alerts, plan limit notices).

5. Data Sharing and Third Parties

We do not sell, rent, or share your mobile phone number or any messaging opt-in data with third parties for marketing or advertising purposes. Ever.

All categories of data described in this policy exclude text messaging originator opt-in data and consent. This information will not be shared with any third parties or affiliates for marketing or promotional purposes.

We share your information only with the following service providers, strictly to operate the Service:

• Messaging provider. — A third-party communications provider processes and delivers SMS and WhatsApp messages on our behalf. Your phone number is transmitted to this provider for message delivery only.
• Anthropic, PBC.— The text content of your messages is sent to Anthropic's Claude API to generate AI responses. Anthropic processes message content in accordance with their Privacy Policy.
• Stripe, Inc. — Processes payment information for paid subscriptions. We share only what Stripe requires to create and manage your subscription.
• Neon Inc. / Upstash. — Infrastructure providers that host our database and caching services in the United States.

We may also disclose your information if required by law, court order, or government authority, or to protect the rights, property, or safety of BLUR TEC LLC, our users, or the public.

6. Data Retention

• OTP codes: Deleted immediately upon successful use. Automatically expire after 10 minutes regardless.
• Session tokens: Expire after 30 days of inactivity.
• Message content: Retained for up to 90 days, then permanently deleted. You may request earlier deletion at any time.
• Account data (phone number, name, plan, usage counts): Retained until you request account deletion.
• Usage counters: Retained indefinitely. These contain no personally identifiable information — only aggregate counts.

7. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS/HTTPS), server-side session management using cryptographically secure tokens, HttpOnly and Secure cookies, and access controls limiting data access to authorized systems. No transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your information using commercially reasonable means.

8. TCPA Compliance

Sokr complies with the Telephone Consumer Protection Act (TCPA) and applicable carrier messaging guidelines. We send messages only to users who have expressly consented to receive them by completing account registration. We honor all STOP requests immediately and permanently — once you reply STOP, we will not send you any further messages unless you re-opt-in by replying START or UNSTOP. We do not send unsolicited marketing text messages. Carrier-level opt-out enforcement is handled automatically at our messaging platform level.

9. Your Rights (Including EU / GDPR)

Depending on your location, you may have the following rights regarding your personal data. EU residents have these rights under the General Data Protection Regulation (GDPR). US residents may have similar rights under applicable state law.

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may request correction of inaccurate personal data.
• Deletion: You may request deletion of your account and all associated personal data. We will process requests within 30 days. Certain data may be retained for legal compliance.
• Portability: You may request your personal data in a portable format.
• Objection / Restriction: You may object to or request restriction of certain processing activities.
• Withdrawal of consent: You may withdraw consent at any time by replying STOP to opt out of messages, or by contacting us to delete your account.

To exercise any of these rights, contact us at [email protected]. EU residents who believe their rights have not been respected may lodge a complaint with their local data protection authority.

Our lawful basis for processing personal data under GDPR is: (a) performance of a contract — to provide the Sokr service you signed up for; (b) legitimate interests — for fraud prevention and service improvement; and (c) legal obligation — where required by applicable law.

10. Children's Privacy

Sokr is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will delete it promptly. If you believe we have collected information from a child, contact us at [email protected].

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the Effective Date at the top of this page and, where appropriate, sending a notification via SMS or email. Your continued use of Sokr after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions, data requests, or to report a concern, contact:

See also our Terms of Service.