← Sorca

Sorca Privacy Policy


Effective date: November 6, 2026


This Privacy Policy explains how Adamant Media LLC, doing business as Sorca (“Sorca,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you visit sorca.ai, use the Sorca platform and dashboard, or work with us on AI search visibility (AEO), SEO, and reputation management services (together, the “Services”).


By using the Services, you agree to the practices described here. If you do not agree, please do not use the Services.


1. Information we collect


Information you give us. Your name, work email, company name, role, website URL, and anything you send us through forms, call bookings, email, or support messages. Payments are handled by our payment processor; we do not store full card numbers.


Account and workspace data. Login details (managed by our authentication provider), workspace settings, team members you invite, and the brands, websites, competitors, prompts, and keywords you add or track.


Data from services you connect. If you choose to connect a third-party account, such as Google Analytics or Google Search Console, we receive the data described in Section 3. Connecting is optional, and you can disconnect at any time.


Brand visibility data. To measure how AI assistants and search engines describe and recommend your brand, we send prompts relevant to your brand to services such as ChatGPT, Perplexity, Claude, Gemini, and Google AI Overviews, and we record the publicly generated answers, citations, mentions, and sentiment. We also crawl the public pages of the websites you add.


Usage and device data. IP address, browser and device type, pages viewed, referring URLs, and timestamps, collected through cookies and similar technologies (see Section 6).


2. How we use information


  • Provide, operate, and maintain the Services, including dashboards, audits, reports, and content recommendations

  • Measure and report on your brand’s visibility in AI and traditional search

  • Communicate with you about your account, service delivery, billing, and support

  • Process payments

  • Secure the Services, prevent fraud and abuse, and fix problems

  • Improve the Services using aggregated or de-identified usage data (this never includes Google user data; see Section 3)

  • Send product updates and marketing emails, which you can unsubscribe from at any time

  • Comply with legal obligations


3. Google user data


Sorca lets you connect your Google account so you can see your website’s analytics and search performance inside Sorca. This section explains exactly what we access from Google and how we handle it.


What we access


With your permission, Sorca requests read-only access through these Google OAuth scopes:


  • Google service: Google Analytics; Scope: https://www.googleapis.com/auth/analytics.readonly; What we read: The Google Analytics accounts and GA4 properties you can access, and report data for the property you select, such as sessions, users, traffic sources (including visits referred by AI assistants), landing pages, and conversions

  • Google service: Google Search Console; Scope: https://www.googleapis.com/auth/webmasters.readonly; What we read: The sites you have verified in Search Console, and search performance data for the site you select, such as queries, pages, clicks, impressions, click-through rate, average position, and indexing status

  • Google service: Google sign-in; Scope: openid, email, profile; What we read: Your Google account name and email address, so we can show which Google account is connected


Sorca cannot create, change, or delete anything in your Google Analytics or Search Console accounts.


How we use it


We use Google user data only to provide and improve user-facing features in Sorca, specifically to:


  • Display your website traffic and search performance in your Sorca dashboard

  • Measure traffic referred by AI assistants and connect it to your AI visibility

  • Identify pages and search queries to prioritize for optimization

  • Include these metrics in reports for your workspace


How we store and protect it


OAuth access and refresh tokens are encrypted at rest and stored only on our servers. They are never exposed in your browser. Google data we retrieve is encrypted in transit (TLS) and at rest, and access is restricted to the systems that need it to provide the Services.


How we share it


We do not sell Google user data. We share it only:


  • With members of your Sorca workspace whom you have authorized to view it

  • With the service providers that host and process data on our behalf (listed in Section 5), only as needed to provide the Services and under confidentiality and data protection obligations

  • When required by law, or to protect the security of the Services

  • As part of a merger, acquisition, or sale of assets, with notice to you


AI processing


If Sorca’s AI features analyze your Google data to generate insights for you, that processing is done only to deliver those insights to you. We do not use Google user data to develop, improve, or train generalized artificial intelligence or machine learning models, and we only use AI providers under terms that prohibit them from training their models on it.


Limited Use disclosure


Sorca’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:


  • We use Google user data only to provide or improve user-facing features that are prominent in Sorca’s interface.

  • We do not transfer Google user data to others except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users.

  • We do not use or transfer Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.

  • We do not allow humans to read Google user data unless we have your affirmative agreement to view specific data, it is necessary for security purposes (such as investigating abuse), it is necessary to comply with applicable law, or the data has been aggregated and anonymized for internal operations.


Disconnecting and deletion


You can disconnect Google at any time from your Sorca settings. When you do, we revoke our access with Google, delete your stored tokens immediately, and delete the Google data we retrieved within 30 days, except where we must keep it to comply with law. You can also remove Sorca’s access at any time from your Google Account at myaccount.google.com/permissions. Deleting your Sorca account deletes your Google data as well.


4. How we share information


We do not sell your personal information or share it for cross-context behavioral advertising. We share information only:


  • With service providers that help us run the Services (Section 5)

  • Within your workspace. People you invite can see the workspace’s data. If an agency manages your brand in Sorca, that agency’s authorized users can see your brand’s data.

  • For legal reasons, such as complying with a subpoena or protecting the rights, safety, and security of Sorca, our users, or others

  • In a business transfer, such as a merger or acquisition, with notice to you

  • With your consent


5. Service providers


We use trusted providers to operate the Services, including:


  • Provider: Supabase; Purpose: Database, authentication, and file storage

  • Provider: Vercel; Purpose: Website and application hosting

  • Provider: Stripe; Purpose: Payments and billing

  • Provider: Anthropic; Purpose: Powering Sorca’s AI features and analysis

  • Provider: Treg; Purpose: Search, SEO, and AI visibility data used to measure and report on your brand


These providers may process information only on our instructions and as needed to provide their services to us.


6. Cookies


We use cookies and similar technologies to keep you signed in, remember your preferences, secure the Services, and understand how sorca.ai is used. You can control cookies through your browser settings. Blocking some cookies may stop parts of the Services from working.


7. Data retention


We keep personal information for as long as your account is active or as needed to provide the Services. If you close your account or ask us to delete your data, we delete it within 30 days of your request, unless we must keep certain information longer for legal, tax, or security reasons.


8. Security


We use administrative, technical, and physical safeguards to protect information, including encryption in transit and at rest, access controls, and least-privilege access for our team. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a breach that affects your information, we will notify you as required by law.


9. Your rights and choices


Depending on where you live, you may have the right to:


  • Access the personal information we hold about you

  • Correct inaccurate information

  • Delete your information

  • Receive a copy of your information in a portable format

  • Object to or restrict certain processing

  • Opt out of marketing emails


To make a request, email admin@sorca.ai. We will respond, and complete any deletion request, within 30 days. We will not discriminate against you for exercising your rights.


California residents. We do not sell or share personal information as those terms are defined under the California Consumer Privacy Act, and we do not use sensitive personal information for purposes that require an opt-out.


EEA and UK residents. We process personal information to perform our contract with you, based on our legitimate interests in running and improving the Services, with your consent (such as when you connect Google), or to comply with law. You may also lodge a complaint with your local data protection authority.


10. International transfers


Sorca is based in the United States, and our service providers may process information in the United States and other countries. Where required, we use appropriate safeguards, such as Standard Contractual Clauses, for transfers.


11. Children


The Services are for businesses and are not directed to anyone under 16. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.


12. Changes to this policy


We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or in the Services before they take effect. The effective date at the top shows when it was last updated.


13. Contact us


Adamant Media LLC, doing business as Sorca


Email: admin@sorca.ai


Website: sorca.ai