Privacy Policy

1. Important Legal Disclaimer

2. Information We Collect

Account Information

• Name, email address, and contact details
• Company information (for business accounts)
• Authentication credentials and preferences

Advisory Information

• Investment capacity and timeline preferences
• Geographic and program preferences
• Family situation and business interests
• Conversation history with AI agents

Technical Information

• IP address and browser information
• Usage patterns and performance metrics
• Device and connection information

3. How We Use Your Information

4. AI and Data Processing

Multi-Agent AI System

Our AI agents process your conversations to provide specialized advisory services. This includes:

• Intent classification and agent routing
• Personalized recommendations based on your profile
• Context preservation across conversations
• Quality assurance and response optimization

Knowledge Intelligence

We use vector databases and semantic search to enhance AI responses with relevant, up-to-date information about investment migration programs and regulations.

5. Data Sharing and Disclosure

Limited Sharing Includes:

• Service Providers: Trusted partners who help operate our platform (hosting, email, analytics)
• Professional Network: Qualified advisors when you request consultation (with your consent)
• Legal Requirements: When required by law or to protect our rights

AI Model Providers

We use OpenAI and other AI providers to power our intelligent agents. These providers process conversation data according to their enterprise privacy policies and do not use your data for model training.

6. Data Security

Enterprise-Grade Protection

• Encryption: AES-256 encryption at rest, TLS 1.3 in transit
• Access Control: Multi-factor authentication and role-based permissions
• Infrastructure: Secure, monitored cloud infrastructure
• Compliance: SOC 2 Type II and GDPR compliance

Multi-Tenant Isolation

Enterprise accounts benefit from complete data isolation using Row Level Security (RLS) policies, ensuring your data remains separate from other organizations.

7. Your Privacy Rights

Data Subject Rights (GDPR/CCPA)

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal data
• Portability: Export your data in a standard format
• Objection: Object to certain types of processing

How to Exercise Rights

Contact us at privacy@sovara.ai with your request. We'll respond within 30 days.

8. Data Retention

Retention Periods

• Account Data: Retained while your account is active
• Conversation History: 3 years for service improvement
• Analytics Data: 2 years in aggregated, anonymized form
• Legal Obligations: As required by applicable law

9. Cookies and Tracking

Essential Cookies

We use necessary cookies for authentication, security, and basic platform functionality.

Analytics Cookies

We use analytics cookies to understand platform usage and improve performance. You can opt out through your browser settings.

No Advertising Tracking

We do not use advertising cookies or share data with advertising networks.

10. International Data Transfers and Compliance

As a global technology platform, your data may be processed in various countries where our service providers operate. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) for international transfers
• Adequacy decisions and appropriate security measures
• Compliance with applicable data protection laws in user jurisdictions
• Additional encryption and security measures for sensitive data

Regional Compliance

We comply with applicable data protection regulations including GDPR (EU), FADP (Switzerland), CCPA (California), and other regional privacy laws as applicable to our users and operations.

11. Children's Privacy

Sovara.ai is not intended for individuals under 18. We do not knowingly collect personal information from children.

12. Privacy Policy Changes

We may update this privacy policy to reflect changes in our practices or legal requirements. Material changes will be communicated via email at least 30 days in advance.