SVRGN Inc.
Privacy policy
Last updated 2026-10-30
Who we are
SVRGN Inc. (“Sovereign”, “we”) builds and operates software that small businesses use to run their own operations. Sovereign exists to provide real time business intelligence. This policy explains what information we collect, why, who we share it with, and how to have it deleted.
For any question about this policy, or to exercise any right described in it, write to hello@svrgninc.com.
The two kinds of information we hold
It matters which of these applies to you, because the answers differ.
First, information about the people we do business with: a prospective or current customer’s name, email address, company, and the answers they give in their application and during onboarding, along with the agreements they sign. We collect it because we cannot open an account or send an invitation without it.
Second, information from the business systems a customer connects to us — their advertising accounts, their social media Pages, their commerce and email platforms. A customer grants us access to their own accounts so that our software can do the work they hired it to do. We act on that data on the customer’s instructions and for no other purpose.
Facebook and Instagram data
When a business chooses to work with us on Facebook or Instagram, it adds SVRGN Inc. as a partner to its own Meta Business Portfolio and shares specific assets with us — typically a Facebook Page, an Instagram business account, and an advertising account. We never ask for a customer’s Facebook or Instagram password, and we never log in as them. The business grants the access, and the business can withdraw it at any time from its own Meta Business settings, without involving us.
We request only the permissions listed below, and we use each one only for the purpose stated. We do not sell this data, we do not use it for advertising to anyone other than the business that owns it, we do not use it to build profiles of individuals, and we do not combine one business’s Meta data with another’s.
| Permission we request | What it gives us access to | How long we keep it |
|---|---|---|
| pages_show_list | The names and IDs of the Facebook Pages a business has shared with us. | Held while the business is a client; removed when they end the partnership. |
| pages_read_engagement | Posts, comments and engagement counts on those Pages. | Read on demand to prepare drafts and reports. Aggregate figures are kept; comment text is not stored. |
| pages_manage_posts | The content we publish on the business's behalf, after the business approves it. | The approved draft and the publication record are kept as the business's audit trail. |
| instagram_business_basic | The username and ID of the connected Instagram business account. | Held while the business is a client. |
| instagram_business_content_publish | The media and captions we publish on the business's behalf, after approval. | The approved draft and the publication record are kept as the business's audit trail. |
| business_management | The structure of the assets a business has shared with us — which Page, which ad account. | Held while the business is a client. |
| ads_read | Campaign structure and performance figures for the ad accounts shared with us. | Performance figures are kept to report on results over time. |
| ads_management | Campaigns, budgets and adjustments we make from plans the business approved. | The approved plan and the change record are kept as the business's audit trail. |
| read_insights | Aggregate Page and Instagram insights — reach, impressions, follower counts. | Aggregate figures are kept to report on results over time. |
Deleting Facebook and Instagram data
There are two routes, and they do different things.
If you are a business working with us, removing SVRGN Inc. as a partner in your Meta Business settings ends our access immediately. To have the data we already hold deleted as well, write to hello@svrgninc.com and we will delete it and confirm in writing.
If you are an individual Facebook or Instagram user, you can send us a deletion request through Meta by removing the Sovereign app from your Facebook settings, which sends the request to us automatically. You can also request deletion directly at https://os.svrgninc.com/api/meta/data-deletion. Either way we act on the request, then give you a confirmation code and a status page that explains, in plain language, what we searched and what we found.
We should be straightforward about the likely answer: Sovereign works with businesses rather than with individual account holders, so in almost every case we hold no personal data about an individual Facebook or Instagram user, and the status page will say exactly that. The request is still recorded and answered.
Who else processes this data
We use service providers to run Sovereign. Each one processes data only to provide its service to us, and we remain responsible for what they do with it.
These process data for every customer:
- Railway — hosting for the Sovereign application and for each customer’s own deployed system, including the database holding account records, onboarding records and our audit log, and the encrypted storage of the credentials a customer has connected. This is the most sensitive provider on this list.
- Anthropic — the AI models that draft content and answer questions inside the product. Prompts may contain business data a customer has connected. This data is not used to train the models.
- GitHub — source-code hosting for each customer’s deployed system.
- Hostinger — outbound email and our public website.
- DocuSign — signing of customer agreements.
- Stripe — payment processing for our fees. Stripe receives the billing contact and plan details; card numbers go to Stripe directly and we never hold them.
- Cloudflare — secure network transit, where used.
- Sentry — error and performance monitoring. Configured to exclude personal identifiers by default.
Providers used only for particular features
These process data only where a customer uses the feature that needs them. If a customer does not use the feature, the provider receives nothing.
- Deepgram — speech-to-text, for voice interviews and voice front-desk.
- Twilio, including SendGrid — transactional email, and phone, SMS and call handling.
- EasyPost — shipping labels, rates and tracking, for fulfilment workflows.
- Zapier — relaying event notifications to external channels a customer has configured.
One provider that is not ours
Plaid appears in some customers’ bank and supplier-payment workflows. In those cases the customer connects Plaid under their own agreement with Plaid; Plaid is the customer’s provider, not ours, and Plaid’s own privacy notice governs it.
Phone calls and text messages
Some customers use Sovereign to answer their business phone line. If you call or text one of those numbers, you are contacting that business — not us. The business decides what its line does; we run it on their instructions. This section is what happens to that call.
Every call opens by telling you which business you have reached, that you are speaking with an automated assistant, and that the call may be recorded. That announcement is fixed in our software. A business cannot shorten it, switch it off, or ask us to.
Call recording is off unless the business has switched it on, and while it is off no audio of the call is kept. Whether or not it is on, what you say is turned into text as you speak so that the assistant can understand you and reply, and that written transcript is the record of the call the business receives. Where a business has switched recording on, the announcement above has already played before any recording begins; a call on which it did not play is not recorded.
What you say on the call, and the text of the messages you send, is processed by an AI model so that it can understand you and compose a reply, and by a speech-to-text provider where speech is involved. Anthropic and Deepgram are those providers, and they are listed above. That content is not used to train anyone’s models, is not used to advertise to you, and is never combined with another business’s data.
We record that you contacted the business, when, and by which route — a call or a text — because that is the basis on which the business is allowed to reply to you. We do not record it as permission to market to you, and the system cannot send you marketing. If you reply STOP to a text, we record that too, and the business stops texting you.
Sovereign runs a phone number of its own, +1 (512) 882-0126. A call to that number is answered by Sovereign’s automated assistant, which says so when the call opens. No audio of the call is kept; the written transcript and your number are sent to our team by email. A text to that number reaches our team. We text you from it only to reply to a text you send us first, or, if you are a Sovereign client who has agreed to receive them, to update you about a support case you opened with us.
Mobile numbers are never sold, and are never shared with anyone for their own marketing or added to a lead list. SVRGN Inc. does not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Where a number reaches a provider — Twilio to carry the message, and the providers named above to process what the message says — it is to do that work for us, and for no purpose of their own.
How often you hear from us by text depends on what you do. A business replies when you contact it; Sovereign’s own line replies when you write to it, and updates a client about a support case the client opened, when the client has asked for those updates; and where a business has switched forwarding on, the person who runs it is told when someone has texted the line. There is no recurring message series and no scheduled campaign, so message frequency varies.
Message and data rates may apply. Reply STOP to any text to stop it, and HELP for help.
Amazon accounts you connect
A business that uses our Operations · Amazon service can connect its Amazon Seller Central account (Selling Partner API) and its Amazon Ads account. Amazon is the source of that data; the business grants the access and can withdraw it at any time from its own Amazon account, without involving us.
From Seller Central we read orders, listings, inventory, pricing and reports, within the roles the business granted. From Amazon Ads we read campaign structure and performance reports. We do not ask for buyer names, addresses or contact details beyond what those roles return, and we do not store them. Any change to ad spend, bids, budgets, prices or keywords is a proposal the business approves first; nothing here is changed automatically.
Each business's access tokens are held encrypted in that business's own system. SVRGN Inc.'s application secret stays with our sign-in service and is never placed in a business's system. The data is used only to do the work that business asked for, is never sold, never used for advertising, never combined with another business's data, and never used to train any model.
The data-handling pack that maps these practices to Amazon's Data Protection Policy and the Amazon Ads data-handling terms is docs/legal/amazon-data-handling.md in our repository; write to hello@svrgninc.com and we will send it to you.
Calendars you connect
Businesses that use Sovereign to take bookings can connect the calendars they already use, so that a time they are busy is never offered to a customer and a confirmed booking appears in their own calendar. A business can connect a Google calendar, a Microsoft 365 or Outlook calendar, an Apple iCloud calendar or another calendar that supports the CalDAV standard, or any calendar by its iCal link. A business can also use Sovereign's own calendar and connect nothing.
From a connected calendar we use two things only: when the calendar's owner is busy, and the events our software creates for bookings made through Sovereign. With Google we ask for permission to see availability (calendar.freebusy) and to create, change and delete events on calendars the owner owns (calendar.events.owned). With Microsoft we ask for permission to read and write the owner's calendar (Calendars.ReadWrite), to keep that access while the connection stands (offline_access), and to read the basic profile that identifies the account (User.Read). We do not read the details of other events beyond whether they make the owner busy, and we do not store them.
Sovereign’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Information from Google, Microsoft or any connected calendar is used only to show availability and to manage bookings for the business that connected it. It is never sold, never used for advertising, never combined with another business’s data, and never used to develop, improve or train any AI or machine-learning model, ours or anyone else’s.
The access keys for a connected calendar are held encrypted in the business’s own Sovereign system, not in a shared store. A business can disconnect a calendar at any time from its Calendars screen, which deletes the keys; the calendar’s owner can also withdraw access from their Google account permissions or their Microsoft account’s app permissions, without involving us. Events Sovereign created stay in the owner’s calendar after disconnection, because they are the owner’s.
How this website is measured
This website, svrgninc.com, is measured by us, in our own system, without cookies and without any identifier that follows you. Each page view records the page, the day, the site that referred you and any campaign tags in the link you arrived by. Nothing in that record identifies you, and it is never joined to anything else.
The pages we advertise to — the ones under svrgninc.com/start — also carry the advertising tags of the networks we buy ads from, today Meta and Google. On those pages the tag sends the network your visit, your browser's signals and, if you arrived from one of their ads, the click identifier, so the network can measure which ads lead to applications. We place those tags on no other page of this site, including this one.
When you apply for a call and tick the consent box, we also tell the network that sent you that an application happened, by sending it a one-way digest of your email address together with the click identifier, and nothing else. We send it for no one who did not apply and consent.
You can opt out. If your browser sends the Global Privacy Control signal we honour it on every page and the advertising tags do not load. You can also write to hello@svrgninc.com to have an application record deleted. Residents of Texas and of any state with a similar right may opt out of targeted advertising by either route.
None of this touches a customer's business data. Nothing and no one trains on that, the customer sections of this policy govern it, and the measurement described here is about this website only.
How long we keep things
Business system data — including anything read from Facebook or Instagram — is kept for as long as the business is our customer, and deleted on request when the relationship ends.
Records of customer agreements, and records of deletion requests we have answered, are kept indefinitely. Both are evidence that we did what we said we would do, and deleting them would destroy the only proof a customer or a regulator could ask us for. A deletion-request record contains a one-way cryptographic digest of the identifier that accompanied the request, never the identifier itself.
Our audit log records that an action happened — which action, when, and under whose authority. It does not record the contents of a customer’s business data.
For customers whose phone line we answer: call recordings, where that business has switched recording on, are kept for 30 days. Transcripts of calls and messages, and the record of who contacted the business and when, are kept for 13 months.
Records of consent — that a person contacted a business, and that they asked it to stop — are kept for five years, and are kept even after that business stops being our customer. They outlive the conversation on purpose: they are the evidence that a message was sent on a lawful basis, and the period in which anyone can raise that question is longer than the conversation itself.
Website measurement counts are kept for 13 months. An application for a call is kept until the applicant asks us to delete it, or for 13 months after our last contact, whichever comes first.
Your rights
You can ask us what we hold about you, ask us to correct it, and ask us to delete it. Write to hello@svrgninc.com. We will respond within 30 days, and we will not charge you for it.
If we ever cannot delete something you have asked us to delete, we will tell you which item and why, rather than declining in general terms.
Security
Access to customer systems is held per customer and stored encrypted. Our own operator access requires a second factor. We keep a tamper-evident record of every consequential action taken inside the product, so that a customer can see what was done on their behalf and when.
We do not claim a security certification we have not obtained. If you need our current security posture in writing for a procurement review, write to hello@svrgninc.com and we will send you what we have.
Children
Sovereign is a product for businesses. It is not directed at children, and we do not knowingly collect information from anyone under 18.
Changes to this policy
When we change this policy we update the date at the top of the page. If a change materially affects what we do with a customer’s data, we tell that customer directly rather than relying on them to notice.