SonusLab Storage
Dashboard →

Privacy Policy

Last updated October 8, 2026

1. Introduction

This Privacy Policy explains what information SonusLab ("we", "us", "our") collects when you use SonusLab Storage: the website at storage.sonuslab.dev, the dashboard, the storage API, and the sonuslab-storage SDK. It covers how we use that information and the rights you have over it. By using SonusLab Storage, you agree to the practices described here.

2. Information we collect

We collect only what we need to run the service.

  • Account data: your name, email address, and sign-in identifiers, including from Google if you sign in with Google.
  • Files: the files you and your users upload, with their names, content types, sizes, and any metadata you attach. Files encrypted with the SDK's client-side encryption reach us as ciphertext with a random name, and we never receive the key.
  • App settings: app names, visibility, size limits, allowed origins, custom domains, and webhook endpoints with the secrets used to sign deliveries.
  • API keys: stored hashed. The full key is shown once when you create it and is never stored in plain text.
  • Migration tokens: UploadThing tokens you paste to import files. They're encrypted at rest and deleted when the migration finishes, fails, or is cancelled.
  • Usage data: per-key request counts and bytes uploaded and downloaded per day, used to operate the service and show you your usage.

3. How we use your information

We use your information to sign you in, store and serve your files, deliver webhooks, run migrations you start, track usage per key, keep the service secure, and improve it. We do not sell your personal data, and we don't look at the contents of your files except where needed to operate the service or comply with the law.

4. Data security

We apply reasonable technical and organizational measures to protect your data.

  • In transit: all traffic to our website, API, and CDN uses HTTPS.
  • Credentials: API keys are hashed, and migration tokens are encrypted at rest.
  • Access: access to stored data is limited to what's needed to run the service.
  • Your option: client-side encryption lets you store files we can't read at all.

5. Third-party services

We use third-party providers to run SonusLab Storage: Google for sign-in, Cloudflare for object storage, the file CDN, and custom domains, and hosting and database providers for the dashboard and API. They process data on our behalf only as needed to provide those services.

6. Your rights

Depending on where you live, you may have the right to:

  • Access: request a copy of the data we hold about you.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: request deletion of your account and associated data.
  • Portability: request your data in a portable format.

7. Data retention

We keep your data while your account is active or as needed to provide the service. Files you delete are removed from storage after a one-hour grace period. When your account is deleted, we remove your personal data and files, except where the law requires us to keep them.

8. Changes to this policy

We may update this Privacy Policy from time to time. Material changes are reflected in the "Last updated" date above.

9. Contact

Questions about this policy or your data? Email machynka.j@gmail.com.