Privacy policy

This policy explains which personal data we process when you visit this website or use Soda Performance, why we do so and what rights you have. We process personal data in line with the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).

1. Who is responsible

Soda Studios AG
Hohlstrasse 402, 8048 Zürich, Switzerland
hello@soda.today

Write to this address for every question about data protection and to exercise your rights.

2. Data we process

• When you visit the website: our server records technical data such as the IP address, the browser, the page requested and the time. We need this to deliver the pages and to keep the service secure.
• When you start an analysis without an account: the website address you enter and the results of its analysis. The analysis can be opened by anyone who has its link. It is deleted after 7 days unless you create an account and keep it.
• When you create an account: your name, your email address and your password, which we store only as a hash. If you sign in with Google, we receive your name and email address from Google.
• When you use the application: the name of your company or workspace, the brands and websites you add, your keywords, AI prompts and competitors, the settings you choose and the results of the analyses.
• When we write to you: your email address, to send alerts, the weekly digest and messages about your account.

3. Data from public sources

To analyse a brand we collect information that is publicly available: the content and technical properties of the website, its search rankings and backlinks, public Google Business Profile information such as name, address, rating and number of reviews, and the answers AI assistants give about the brand. This is business information. Where it contains personal data, for example the name of a sole proprietor, we process it only to provide the analysis to our users.

Our crawler identifies itself as SodaPerformance. If your website or business was analysed and you want the data removed, write to us.

4. Why we process the data

• To provide the service you ask for and to fulfil our contract with you.
• To keep the service secure, prevent abuse and fix errors, which is our legitimate interest.
• To inform you about your analyses and your account.
• To comply with legal obligations.

5. Cookies

We only set cookies that the application needs to work: one that keeps your session, one that protects forms against forged requests and, if you choose to stay signed in, one that remembers your sign-in. We use no analytics, advertising or tracking cookies, and fonts are served from our own server.

6. Service providers who receive data

We use service providers to run the analyses and the application. They receive only what they need:

• DataForSEO: website addresses, brand names, keywords and AI prompts, to retrieve search rankings, backlinks, Google Business Profile information and the answers of ChatGPT, Gemini and Claude.
• Google PageSpeed Insights: the addresses of the pages whose speed is measured.
• Google Sign-In: only if you choose to sign in with Google.
• Hosting and email delivery: providers that operate our servers and deliver our emails.

Your account data, such as your name, email address and password, is not passed to the analysis providers. We do not sell personal data.

7. Data abroad

Some of these providers process data outside Switzerland and the European Economic Area, in particular in the United States. Where a country does not offer adequate data protection, we secure the transfer with the safeguards the law provides, such as standard contractual clauses.

8. How long we keep data

• Analyses started without an account: 7 days.
• Account and analysis data: for as long as your account exists.
• After you ask us to delete your account, we delete your data unless the law requires us to keep it.

9. Your rights

You can ask us for access to your personal data, for its correction or deletion, for a copy in a common format, and you can object to or ask us to restrict its processing. To delete your account, write to hello@soda.today from the email address of the account.

You can also complain to a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the authority of your country.

10. Security

We protect data with appropriate technical and organisational measures. Connections to the application are encrypted and passwords are stored as hashes.

11. Changes

We may adapt this policy when the service or the law changes. The version published here applies.