SORAMI Privacy Policy

Last Updated: August 17, 2026

1. Introduction

SORAMI LLC is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use the SORAMI service (the "Service").

This Privacy Policy applies to the English-language, U.S.-facing version of the Service. It is intended for individuals who access or use the Service in the United States or otherwise receive the U.S. version of the Service. A separate Japanese-language privacy policy governs users of SORAMI's Japan-facing service. If there is a question as to which privacy policy applies, SORAMI may determine the applicable policy based on the version of the Service through which you registered or accessed the Service, your residence, billing information, and other reasonably relevant information.

By accessing or using the Service, you acknowledge that you have read this Privacy Policy. If you do not agree with this Privacy Policy, do not access or use the Service. This Privacy Policy does not apply to third-party websites, applications, products, or services that may link to, integrate with, or be used in connection with the Service.

2. Information We Collect

Information You Provide

Name, email address, and date of birth (at registration)
Payment information (processed through Stripe; not stored on our servers)
Performance recordings (processed for AI analysis only; subject to the retention practices described below), scores, and other uploaded content
Learning goals, target artists, and other preferences
Account credentials and authentication information.
Your communications with us, including support requests, feedback, and other correspondence.
Information you provide when you submit a privacy request, payment inquiry, dispute, or other request to SORAMI.

We do not require you to provide special-category or highly sensitive information to use the Service. Please do not submit private keys, account passwords, government-identification numbers, financial-account credentials, health information, or other highly sensitive information unless SORAMI specifically requests it for a stated purpose.

Information Collected Automatically

IP address, browser type, and device information
Usage data and interaction logs
Data collected via cookies and similar technologies.

This information may include device type, operating system, browser settings, approximate location derived from IP address, referral URLs, pages or features accessed, dates and times of access, session information, diagnostic information, and interactions with the Service. We use this information to operate, secure, maintain, troubleshoot, analyze, and improve the Service.

We may receive limited information from service providers and other third parties, including payment processors, cloud and authentication providers, security providers, and AI-model providers, where reasonably necessary to operate the Service, prevent fraud or abuse, process transactions, or comply with law.

3. How We Use Your Information

To provide, operate, and improve the Service
To generate AI-powered analysis and feedback
To process payments
To respond to support requests
To send important service notifications
To comply with legal obligations

We may also use personal information to:

create and administer accounts;
authenticate users and maintain account security;
personalize and improve the Service, including music-learning and performance-analysis features;
troubleshoot technical issues and protect against spam, fraud, abuse, unauthorized access, and other harmful or unlawful activity;
enforce our Terms of Service and other policies;
maintain internal records, conduct audits, establish or defend legal claims, and complete corporate transactions; and
comply with applicable legal, tax, accounting, recordkeeping, and regulatory obligations.

SORAMI does not use Performance Recordings, user prompts, or other User Content to train or improve SORAMI's generalized AI models. SORAMI also seeks to contractually restrict AI-model providers from using SORAMI User Content to train or improve their general-purpose models. This statement does not prevent SORAMI from processing User Content as necessary to generate the analysis or feedback requested by the user, maintain the Service, protect security, comply with law, or enforce its agreements.

4. Marketing Communications

If we send you promotional or marketing emails, each message will include instructions for opting out of future marketing communications. You may also opt out at any time by using the unsubscribe link included in such emails or by contacting us at contact@sorami-music.com. Opting out of marketing communications does not affect transactional or service-related messages, which you will continue to receive as necessary to operate your account.

We may send you service-related communications, including account-verification notices, subscription and billing notices, security alerts, policy updates, responses to support requests, and other non-promotional messages. You cannot opt out of these communications while maintaining an active account, except where applicable law permits otherwise.

5. Data Storage and Retention

Your account and usage data are stored on Amazon Web Services (AWS) infrastructure, including Amazon Cognito (authentication) and Amazon DynamoDB (database). Performance Recordings are processed to provide the AI analysis requested by the user. SORAMI's intended product design is to delete Performance Recordings from SORAMI's active systems promptly after the requested analysis is complete. Temporary processing copies, transmission buffers, security logs, disaster-recovery backups, and records retained for legal compliance, fraud prevention, security, dispute resolution, or enforcement may persist for a limited period. We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law (for example, for tax, accounting, or legal compliance purposes). Account information is deleted within 30 days of account deletion, except that we may retain limited information as required to comply with legal obligations, resolve disputes, and enforce our agreements. We may also retain information as reasonably necessary to: maintain security; prevent fraud, abuse, and repeat violations; comply with tax, accounting, audit, recordkeeping, and legal obligations; establish, exercise, or defend legal claims; investigate incidents; and enforce our Terms of Service and other policies. When personal information is no longer reasonably necessary for these purposes, we will delete, de-identify, anonymize, or securely isolate it, subject to technical, backup, legal, and operational limitations. Residual copies may remain in backup archives, logs, disaster-recovery systems, and similar records for a limited period until routine deletion or overwriting occurs. Deletion of an account does not necessarily delete information that is retained in de-identified or aggregated form, or information SORAMI must retain for the purposes stated above.

6. Sharing of Information

We may share your information only in the following circumstances:

With your consent
With service providers necessary to operate the Service, including Stripe, Inc. (payment processing), Amazon Web Services, Inc. (cloud infrastructure, authentication, and database services), and our AI model providers, including Anthropic and Google (for generating AI-powered analysis and feedback)
When required by law or legal process
To protect the rights, property, or safety of SORAMI LLC, our users, or others

Data we send to our AI model providers is, under our agreements with those providers, not used to train or improve their underlying AI models.

We may also disclose personal information:

to our affiliates, professional advisers, insurers, auditors, and service providers as reasonably necessary for internal administration, business operations, security, legal compliance, and the purposes described in this Privacy Policy;
in connection with an actual or proposed merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or other corporate transaction, subject to applicable law;
to investigate, prevent, or address suspected fraud, abuse, security incidents, violations of our Terms of Service, or other unlawful or harmful activity;
to establish, exercise, or defend legal claims; and
at your direction or where you otherwise authorize us to do so.

We do not sell your personal information. SORAMI does not sell personal information for monetary consideration. SORAMI also does not use personal information for cross-context behavioral advertising or targeted advertising as currently offered through the Service. If SORAMI's practices change in a manner that constitutes a "sale," "sharing," or targeted advertising under applicable law, SORAMI will provide any required notice and opt-out mechanism before engaging in that activity.

Service providers may process personal information only as necessary to perform services for SORAMI, subject to contractual, technical, or other safeguards that SORAMI considers appropriate under the circumstances. However, SORAMI cannot control independent third parties once information is lawfully disclosed to them as required or permitted by law.

SORAMI may transfer information to, store information in, or permit processing of information in the United States and other countries where SORAMI or its service providers operate, as further described below under "International Data Transfers."

Data that SORAMI sends to AI-model providers is intended to be used solely to generate the requested AI-powered analysis and feedback and not to train or improve those providers' underlying general-purpose models, subject to the applicable agreements and provider practices.

7. Your Rights

You have the right to access, correct, or delete your personal information, and to delete your account at any time. To exercise these rights, please contact contact@sorami-music.com. We will respond to verifiable requests to access, correct, or delete your personal information within the timeframe required by applicable law. To protect your information, we may need to verify your identity before processing your request, which may involve confirming information associated with your account. You may designate an authorized agent to make a request on your behalf, subject to our ability to verify the agent's authority to act on your behalf.

We will respond to verifiable consumer requests as required by applicable law. For California residents, we generally respond within forty-five (45) days after receiving a verifiable consumer request. Where reasonably necessary and permitted by law, we may extend that period once by an additional forty-five (45) days, provided that we notify you of the extension within the initial forty-five-day period.

To submit a privacy request, email contact@sorami-music.com with the subject line "Privacy Request" and identify the right you seek to exercise. We may request information reasonably necessary to verify your identity and, for a request submitted by an authorized agent, the agent's authority to act for you. We will not require you to create an account solely to submit or track a privacy request.

If we deny your request and applicable law provides a right to appeal, you may appeal by replying to our decision or emailing contact@sorami-music.com with the subject line "Privacy Appeal" within sixty (60) days after our decision. Your appeal should identify the original request and explain the basis for your appeal. We will respond to an appeal within the timeframe required by applicable law and, where required, provide information about any further right to contact the applicable regulator.

8. Additional Rights for Certain U.S. State Residents

Depending on your state of residence, you may have some or all of the following additional rights with respect to your personal information:

Right to Know / Access — the categories and specific pieces of personal information we have collected about you, and the categories of sources, purposes, and third parties involved.
Right to Delete — request deletion of personal information we have collected from you, subject to certain exceptions.
Right to Correct — request correction of inaccurate personal information.
Right to Data Portability — receive a copy of your personal information in a portable format.
Right to Opt Out of certain processing, such as targeted advertising, the sale of personal information, or profiling in furtherance of decisions producing legal or similarly significant effects. SORAMI LLC does not sell personal information and does not use your data for targeted advertising.
Right to Non-Discrimination — we will not discriminate against you for exercising any of these rights.

To exercise any of these rights, contact us at contact@sorami-music.com. We will not require you to create an account to submit or track a request.

California Residents. Subject to applicable exceptions, California residents may have the right to: (a) know the categories and specific pieces of personal information we collect; (b) know the categories of sources from which personal information is collected; (c) know the business or commercial purposes for collecting, using, or disclosing personal information; (d) know the categories of third parties to whom personal information is disclosed; (e) access, correct, or delete personal information; (f) obtain a portable copy of personal information; (g) opt out of the sale or sharing of personal information, if applicable; (h) limit certain uses and disclosures of sensitive personal information, if applicable; and (i) not receive discriminatory treatment for exercising applicable rights.

SORAMI does not sell personal information for monetary consideration, does not share personal information for cross-context behavioral advertising, and does not use personal information for targeted advertising as currently offered through the Service. Accordingly, SORAMI does not currently provide a "Do Not Sell or Share My Personal Information" link. If our practices change, we will provide any notice and opt-out rights required by applicable law before engaging in that activity.

Residents of Colorado, Connecticut, Virginia, and other states with applicable comprehensive privacy laws may have rights to access, correct, delete, obtain a portable copy of, and opt out of certain processing of personal information, subject to applicable thresholds, exceptions, and limitations. This includes, where applicable, opt-out rights regarding targeted advertising, sales of personal data, and profiling in furtherance of decisions producing legal or similarly significant effects.

This includes residents of other states that have enacted comprehensive privacy laws, to the extent those laws apply to SORAMI and the individual request. SORAMI will evaluate the applicability of those laws based on its processing activities, statutory thresholds, exemptions, and the consumer's state of residence.

This section is intended to describe rights that may apply depending on your residence and SORAMI's legal obligations. It does not represent that every state privacy law applies to SORAMI or that every listed right is available to every user.

California residents may request information regarding our disclosure of personal information to third parties for direct-marketing purposes under California Civil Code § 1798.83. Because SORAMI does not disclose personal information to third parties for their own direct-marketing purposes, SORAMI does not currently provide a separate "Shine the Light" disclosure process.

9. Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

The Service may be used by individuals who are at least thirteen (13) years old, subject to the Terms of Service. Individuals between thirteen (13) and seventeen (17) may use the Service only with the consent and supervision of a parent or legal guardian as described in the Terms of Service.

SORAMI may use age-screening, account-verification, parental-consent, or other reasonable measures to determine eligibility and confirm that a parent or legal guardian has consented where required by the Terms of Service or applicable law.

SORAMI does not knowingly collect personal information from a child under thirteen (13) years old. If SORAMI obtains actual knowledge that it has collected personal information from a child under 13 without verifiable parental consent, SORAMI will take reasonable steps to delete that information as required by applicable law. If you are a parent or guardian and believe that a child under 13 has provided personal information to SORAMI, please contact us at contact@sorami-music.com.

SORAMI does not condition a child's participation in an activity on the disclosure of more personal information than is reasonably necessary to participate in that activity.

If SORAMI knowingly collects personal information from a child under 13 with verifiable parental consent, SORAMI will provide the parent or guardian with applicable notice and the opportunity to review, request deletion of, and refuse further collection, use, or retention of the child's personal information, subject to applicable law.

10. Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, loss, destruction, or alteration.

These measures may include, as appropriate, encryption in transit, access controls, authentication safeguards, least-privilege access practices, logging, monitoring, secure-hosting practices, vendor-management measures, and other administrative, technical, and organizational safeguards.

No method of transmission over the Internet, electronic storage, or security control is completely secure. Accordingly, although we take reasonable measures designed to protect personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for using reasonable security precautions when accessing the Service.

11. Data Breach Notification

If we determine that a security incident requires notification under applicable law, we will provide notice to affected individuals and relevant regulators as required by applicable law and, where applicable, without unreasonable delay.

We may delay notice to the extent permitted by applicable law, including to accommodate the needs of law-enforcement investigations, determine the scope of an incident, restore the reasonable integrity of our systems, or comply with a legal requirement. Any notice may be provided by email, through the Service, by conspicuous posting, substitute notice, or another method permitted by applicable law.

This section does not create a contractual obligation to provide notice in circumstances where applicable law does not require notice.

12. International Data Transfers

Your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate, which may have data protection laws that differ from those in your jurisdiction. Where required by applicable law, we take steps to ensure that such transfers are subject to appropriate safeguards.

These cross-border processing disclosures concern SORAMI's use of service providers and infrastructure providers, including cloud, database, payment, and AI-service providers. They do not alter the separate U.S.-service/Japan-service document structure described at the beginning of this Privacy Policy.

Where required by applicable law, SORAMI will use appropriate transfer mechanisms or safeguards for cross-border transfers of personal information. However, the laws of the jurisdictions in which information is processed may differ from the laws of your jurisdiction.

13. Cookies

We may use cookies, local storage, pixels, software-development kits, log files, and similar technologies to maintain account sessions, authenticate users, remember preferences, protect security, prevent fraud and abuse, support payment processing, diagnose technical problems, and understand how users interact with the Service.

SORAMI does not currently use cookies or similar technologies for cross-context behavioral advertising or targeted advertising. If that practice changes, we will update this Privacy Policy and provide any notices or choices required by applicable law.

You may manage cookies through your browser settings or, where available, through controls provided in the Service. Disabling cookies or similar technologies may impair the availability or functionality of certain Service features.

SORAMI currently does not respond to browser "Do Not Track" signals because no uniform industry standard exists. We will respond to legally recognized opt-out preference signals where and to the extent required by applicable law.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or notice within the Service.

We may update this Privacy Policy to reflect changes in our data practices, the Service, technology, legal requirements, or other operational needs. The "Last Updated" date at the top of this Privacy Policy identifies when it was last revised. Unless otherwise stated, changes become effective when posted.

If we make a material change, we will provide notice by email, through the Service, or by another legally permitted method before the material change takes effect, where required by applicable law. Your continued use of the Service after the effective date of the updated Privacy Policy is subject to the updated policy to the extent permitted by applicable law.

15. Contact

SORAMI LLC
Email: contact@sorami-music.com
Location: Durham, North Carolina, United States

If you have questions, concerns, or requests concerning this Privacy Policy or SORAMI's privacy practices, contact us at contact@sorami-music.com. Privacy requests should use the process described in the "Your Rights" section above.