What We Collect

• Account information: Name, email, and authentication credentials
• Firm information: Company name and professional context
• Usage data: How you interact with Sovara to improve the service
• Conversation data: Your interactions with our AI system

How We Use Your Data

• To provide and improve our planning intelligence services
• To personalise your experience and remember context across sessions
• To communicate with you about your account and our services
• To ensure security and prevent fraud

Data Retention

We retain your data for as long as your account is active. Conversation history is retained to provide continuity across sessions. You can request deletion of your data at any time.

Third-Party Services

We use trusted third-party services to operate Sovara:

• Supabase: Database and authentication (SOC 2 compliant)
• OpenAI: AI model provider (API with training opt-out)
• Pinecone: Vector database for knowledge retrieval
• AWS: Email delivery and infrastructure

These providers process data according to their privacy policies and enterprise agreements. They do not use your data for their own model training.

Contact information (email addresses and phone numbers) is automatically redacted before being processed by AI systems.

Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data
• Export your data in a portable format
• Object to certain types of processing

Data Security

Your data is protected with encryption at rest and in transit, row-level security for tenant isolation, and strict access controls. See our Security page for details.

Cookies

We use essential cookies for authentication and security. We do not use advertising cookies or share data with advertising networks.

Changes to This Policy

We may update this policy to reflect changes in our practices. Material changes will be communicated via email.