Privacy Policy

Sovrn, Inc. ("Sovrn," "we") operates Sovrn AI at sovrn.ai. This policy describes the information we collect from people who visit the site or use the service, and what we do with it.

Sovrn, Inc., 1600 Pearl Street, Second Floor, Boulder, CO 80302, United States. privacy@sovrn.com

The Sovrn AI Terms apply when you use the service.

1. Information we collect

Account. Name, email address, organization, workspace, and role. If you set a password, we store a hash of it. You can sign in with the methods the service offers, including a password, a one-time email link, or a third-party account. When you accept the Sovrn AI Terms, we store the version, the time, your IP address, and your browser user agent.

Your company. Details you give us about your company, such as its name, website, and what it sells.

Your content. Prompts, documents, data, and other content you submit. The Sovrn AI Terms call this Customer Content, and you retain ownership of it.

Usage. Use of the service generates prompts, requests, responses, feedback, ratings, telemetry, interaction history, behavioral signals, performance metrics, usage statistics, metadata, and similar information. The Sovrn AI Terms call this Usage Data.

Payment. If you subscribe, our payment processor collects your card. We keep a customer identifier, subscription status, and invoices.

Connections you turn on. We store API secrets in protected form and show the secret once, when you create it. If you connect an agent, we store the tokens that client needs. If you turn on a third-party connector, we store the account identifiers that service makes available, and the information you ask us to retrieve. Connector credentials are stored in protected form. When a connector can change the connected account, that change is sent after you confirm it.

2. How we use it

We use this information to run the service, including sign-in, workspaces, answers, billing, and support. We keep each customer's work inside that customer's workspace. We send email the service needs, such as sign-in links, invites, and invoices. We use it to meet legal and accounting duties.

The Sovrn AI Terms give Sovrn a perpetual right to use Usage Data for any lawful business purpose, including to:

• operate and support the service;
• detect fraud, abuse, and security threats;
• improve model quality and performance;
• evaluate and benchmark models;
• train, fine-tune, and validate machine learning models;
• develop new models, products, and services;
• create aggregated or anonymized datasets;
• develop analytics, behavioral insights, recommendations, and future AI technologies.

Usage Data may be combined with information from other users, anonymized, aggregated, transformed, or incorporated into future versions of the service.

If you send comments, ideas, suggestions, or bug reports, the Sovrn AI Terms give Sovrn a perpetual license to use that feedback in any product or service, without restriction or compensation.

We do not sell the information described in this policy.

3. Who receives it

These providers process it for us:

• Our hosting provider, for hosting and storage in the United States
• Our email provider, to send email
• A model provider, to generate responses and embeddings. The text required for that response is sent to that provider
• Our payment processor, to collect payment
• A third-party sign-in provider, if you choose one
• The provider behind a third-party connector you turn on, to read the connected account and to make changes you confirm

We also share information when the law requires it, and with advisers who are bound to keep it confidential.

4. Cookies

A session cookie keeps you signed in. It is required for the service to work.

Turning on a third-party connector sets a short-lived cookie for that connection step. That cookie is required only while you make the connection.

5. How long we keep it

• Account details are kept while your account is open, then for 90 days.
• Invoices and payment records are kept for 7 years.
• Security logs are kept for 12 months.
• Connector credentials are deleted when you turn the connector off, or when the account closes.
• Usage Data has no end date. It is kept as the Sovrn AI Terms describe, including after the account closes.

6. Security

We limit access to customer information. Passwords are stored as hashes. API secrets and connector credentials are stored in protected form.

7. Requests

Email privacy@sovrn.com to access, correct, or delete your account information, or to export what you submitted. We may ask you to confirm that you control the email on the account. Records we must keep for a legal duty can outlast the periods above. Closing an account does not end Sovrn's right to retain and use Usage Data as the Sovrn AI Terms allow.

If a privacy law where you live gives you additional rights, write to the same address and we will apply them.

8. Children

Sovrn AI is a business service. We do not open accounts for anyone under 18. Email privacy@sovrn.com if you believe we have.

9. Where we process it

We process this information in the United States.

10. Changes

When this policy changes, we update the date at the top. If a change is material, we notify account holders.

11. Contact

privacy@sovrn.com