Security
Last updated October 20, 2026
Sonny works with some of the most sensitive parts of your business: your clients, your messages and your deals. Here's how we protect them, in plain terms. This page describes our practices; it isn't a contract. Our Privacy Policy (https://meetsonny.com/privacy) has the full details.
Your data stays on your Mac
Sonny runs on your own Mac, and that's where your data lives:
- your CRM working copies
- notes, reminders, deals and showing details
Your sign-ins for Follow Up Boss, your MLS and ShowingTime are stored on your Mac and are never stored on our servers. If you use Connect Gmail, your Google authorization is the exception: it's stored encrypted on Sonny's secure cloud service, so Sonny can reach Gmail for you, and it's deleted when you disconnect.
Access protection
To reach Sonny from your phone, you sign in with a one-time code sent to your email, on a device you've paired with your Sonny. Connections between your phone and your Mac are encrypted.
You approve what goes out
Messages to your clients and contacts are sent only after you approve them. For email, you approve the exact message: recipients, subject, text and attachments. If anything changes after you approve, Sonny asks again. Some routine tasks you've asked Sonny to handle can run without a separate approval each time, such as requesting a showing appointment for a showing on your calendar, or sending reports to your own inbox. We keep a record of approvals that never includes the message itself.
AI processing
Sonny uses Anthropic's Claude models through Anthropic's commercial API:
- Under Anthropic's commercial terms, our requests aren't used to train its models.
- They're deleted within 30 days by default, with limited exceptions.
- Our AI routing doesn't log or cache the content of your requests.
- We don't train AI models on your data.
Backups and recovery
Sonny backs up your data every night. Backups are encrypted on your Mac before they leave it and are kept in private storage for about six months. During the beta, the Sonny team holds the keys to your backups so we can restore your data for you if your Mac is lost or replaced.
Diagnostics you control
Diagnostics help us catch errors and keep Sonny working:
- They're linked to your installation.
- Before anything is sent, client names, email addresses, phone numbers and street addresses are filtered out automatically. The filtering is thorough but automated, so it may not catch everything.
- They're deleted after 30 days.
- You can turn them off at any time in Setup, or in Settings on your phone or Mac.
We keep data only as long as needed
Logs and message excerpts on your Mac are cleared after 30 days, and Sonny's conversation memory after 90 days. Approval history is kept for 1 year. The full schedule is in our Privacy Policy.
Your controls
You can:
- approve or cancel anything Sonny wants to send
- turn diagnostics off
- disconnect Gmail or other connected services
- ask us for a copy of your data, or to delete it, at privacy@meetsonny.com
What we never do
We don't sell your data or your clients' data, and we don't use it for targeted advertising.
Reporting a security concern
If you think you've found a security issue, email support@meetsonny.com. Please don't test Sonny's security without our written permission.