Legal

Privacy Policy

Last updated: September 15, 2026

Note: This policy is a starting-point draft written to match how CommaDash AI actually works today. It has not been reviewed by a lawyer. Before relying on it — especially given real payment processing and users outside the U.S. — have it reviewed by qualified counsel.

CommaDash AI ("CommaDash," "we," "us") is operated by Sound-On LLC, a Pennsylvania limited liability company, and provides an AI-assisted communications toolkit for press, social, creator, and commerce content. This policy explains what information we collect, how we use it, and the choices you have.

Information we collect

Account information. When you sign up, our authentication provider (Clerk) collects your name, email address, and sign-in credentials or OAuth identity (e.g. if you sign in with GitHub or Google).
Billing information. Subscription payments are processed by Stripe. CommaDash does not receive or store your full card number — Stripe handles that directly and shares with us only what's needed to manage your subscription (plan, status, billing email).
Saved brand profiles. If you save a brand (name, category, positioning, and which asset types you've selected), that profile is stored server-side in our database (via Supabase) so it persists across sessions and devices, tied to your account. Deleting a saved brand removes it from our database.
Generated assets. The press releases, social posts, and other content CommaDash generates for a launch are created and held only in your own browser session — we do not persist generated asset content on our servers. It lives in your browser until you export it or close/clear the session.
Your Anthropic API key. CommaDash is "bring your own key" — you connect your own Anthropic account. When you generate content, your key and prompt content are passed through a CommaDash server-side proxy on their way to Anthropic's API, so that your key isn't exposed in public browser network traffic. That proxy forwards the request and response without writing your key or your generated content to disk, a database, or a log.
Usage and device data. Standard web server logs (IP address, browser type, pages visited) may be collected by our hosting provider (Vercel) for security and reliability purposes.

How we use information

To create and manage your account and subscription
To process payments and send billing-related communications
To operate, maintain, and improve the CommaDash service
To respond to support requests
To detect, prevent, and address fraud, abuse, or security issues

We do not sell your personal information, and we do not currently use third-party advertising or analytics trackers on this site. If that changes, we'll update this policy.

Third-party service providers

CommaDash relies on the following providers to operate the service. Each processes certain data under their own privacy policies:

Clerk — authentication and account management
Stripe — payment processing and billing
Anthropic — AI generation, via your own connected API key and Anthropic account (your usage is billed directly by Anthropic, subject to Anthropic's own terms and privacy policy)
Vercel — application hosting and infrastructure
Supabase — database storage for saved brand profiles (see "Saved brand profiles" above)

Data retention

Account and billing records, and any brand profiles you've saved, are retained for as long as your account is active, and afterward as needed to comply with legal, tax, and accounting obligations. Generated asset content is not retained by CommaDash's servers — it exists only in your browser session unless you export it yourself.

Cookies

We use essential cookies set by our authentication provider (Clerk) to keep you signed in. We do not currently use cookies for advertising or third-party tracking.

Your rights

Depending on where you live, you may have rights to access, correct, or delete your personal information (for example, under the GDPR in the EU/UK or the CCPA in California). To exercise these rights, contact us at support@commadash.ai.

Children's privacy

CommaDash is not directed at children under 16 and we do not knowingly collect information from them.

International users

CommaDash is operated from the United States. If you access the service from outside the United States, your information may be transferred to and processed in the United States.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Contact us

Questions about this policy? Email support@commadash.ai.