Savoira Download

Privacy Policy

Last updated: 2026-06-13

This Policy explains how Tavira (Tavira), of TODO_REGISTERED_ADDRESS_PENDING, United States (“we”, “us”) handles personal data for Savoira. We follow Vietnam’s Personal Data Protection Law and applicable consumer-protection law. We are the data controller; contact us at support@savoira.ai.

1. What we collect

  • Account data: your email and authentication identifiers.
  • Billing data: handled by our Merchant of Record (Polar, whose payment processor is Stripe); we receive subscription status and limited transaction metadata, not your full card details. See Polar’s privacy policy.
  • Usage & metering data: counts of AI operations and tokens used, to enforce quotas and operate the Service.
  • Document content: when you use an AI feature, the relevant document text is sent for processing. Your documents may themselves contain personal data — see §3.

2. Why we use it (purposes & consent)

We process the above to: provide the AI features you request; authenticate you; meter usage and enforce quotas; process your subscription; and meet legal obligations. Where we rely on consent, it is requested per purpose, is affirmative (no pre-ticked boxes), is logged, and can be withdrawn at any time.

3. Document content & AI processing (transparency)

AI features work by sending the relevant document text to our AI processing providers and our hosting providers for processing, which returns a result to your app. Account data is hosted in Vietnam where applicable; document text is processed transiently and is not stored on our servers. Embeddings used for search run on your device. Because your documents may contain personal data about you or third parties, you are responsible for having a lawful basis to process the documents you upload.

4. Who we share with & cross-border transfer

We share data only with the processors needed to run the Service, and where required by law. The recipients, and the data they receive, are:

  • Polar (our Merchant of Record / seller of record) and its payment processor Stripe — your billing and transaction data. See Polar’s privacy policy; Polar’s own policy further names processors including Google (analytics).
  • AI processing providers — the document text you submit for an AI feature (transiently; not stored — see §3).
  • Hosting providers — the infrastructure that stores your account data.

Several of these providers operate outside Vietnam (including in the United States), so providing the Service involves a cross-border transfer of the data described above. We use providers that offer appropriate protection and contractual safeguards (e.g. Standard Contractual Clauses). We do not sell your personal data.

5. Retention

We keep account, billing, and metering data for as long as your account is active and as required for legal and accounting purposes, then delete or anonymize it. Document text is processed transiently to return a result and is not retained on our servers.

6. Your rights

You may access, correct, delete, or export your personal data, withdraw consent, or object to certain processing. To exercise any right, email support@savoira.ai; we respond within the periods required by law. You may also lodge a complaint with the competent Vietnamese authority.

7. Security & breach notification

We use reasonable technical and organizational measures to protect personal data. If a personal-data breach occurs, we will notify the competent authority and affected users as required by law.

8. Children

Savoira is not directed to children, and we do not knowingly collect data from children without the consent required by law.

9. Changes & contact

We will post updates here and, for material changes, give reasonable notice. Questions or requests: support@savoira.ai.