Privacy Policy

1. Introduction

Savena ("we", "us", or "our") operates savena.ai and the Savena customer support platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using Savena, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

2.1 Account and Profile Information

When you register for Savena, we collect:

• Name and email address
• Organization name and details
• Profile photo (if provided via OAuth)
• Phone number (optional)
• Billing information (processed by our payment provider, Stripe)

2.2 Customer Data

As part of providing the Service, we process data on your behalf about your end-customers ("Customer Data"), including conversation messages, contact details, and interaction history. You remain the data controller of Customer Data; we act as a data processor.

2.3 Usage Data

We automatically collect information about how you interact with the Service, including:

• IP address and browser type
• Pages visited and features used
• Date and time of access
• Referring URLs

2.4 Cookies and Tracking

We use cookies and similar tracking technologies to maintain your session, remember preferences, and analyze usage. You can control cookie settings through your browser. Note that disabling certain cookies may affect Service functionality.

3. How We Use Your Information

We use collected information to:

• Provide, operate, and improve the Service
• Authenticate users and manage accounts
• Process payments and manage subscriptions
• Send transactional emails (account confirmation, invitations, billing receipts)
• Send product updates and announcements (you may opt out at any time)
• Provide customer support and respond to inquiries
• Monitor and analyze usage to improve performance and features
• Detect, prevent, and address fraud, abuse, or security incidents
• Comply with legal obligations

We do not sell your personal data or Customer Data to third parties.

4. AI Features and Data Processing

Savena uses large language models (LLMs) to power AI-assisted responses and automation. When you use AI features:

• Conversation content may be sent to third-party AI providers (such as Anthropic, OpenAI, or Google) to generate responses
• We select providers that offer data processing agreements with privacy protections
• AI providers are contractually prohibited from using your data to train their models unless you explicitly opt in
• Training data you upload for custom AI agents is stored securely and used solely for your workspace

5. How We Share Your Information

We may share information with:

5.1 Service Providers

Trusted third parties that help us operate the Service, including cloud hosting (Supabase/AWS), payment processing (Stripe), email delivery (SendGrid), and analytics (PostHog). These providers access information only as necessary to perform their services and are bound by confidentiality obligations.

5.2 Legal Requirements

We may disclose information when required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information becomes subject to a different privacy policy.

6. Data Retention

We retain your account data for as long as your account is active or as needed to provide the Service. Customer Data (conversations, contacts) is retained for the duration of your subscription and deleted within 90 days of account termination, unless a longer retention period is required by law or requested by you.

You may request earlier deletion at any time by contacting us (see Section 10).

7. Data Security

We implement industry-standard security measures, including:

• Encryption of data in transit (TLS) and at rest
• Row-level security on all database tables
• Access controls limiting data access to authorized personnel
• Regular security reviews and dependency updates

No method of transmission or storage is 100% secure. If you believe your account has been compromised, please contact us immediately at privacy@savena.ai.

8. International Data Transfers

Savena is operated from the European Union. If you access the Service from outside the EU, your information may be transferred to and processed in countries with different data protection laws. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses where required.

9. Your Rights (GDPR & CCPA)

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Restriction: Request that we limit processing of your data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests or for direct marketing
• Withdraw consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at privacy@savena.ai. We will respond within 30 days.

If you are in the EU/EEA and believe we have not adequately addressed your concern, you have the right to lodge a complaint with your local supervisory authority.

10. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us and we will take steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will also notify you by email. Your continued use of the Service after changes become effective constitutes your acceptance of the revised policy.

12. Contact Us

For privacy-related questions, requests, or concerns, please contact: