Privacy Policy

Savitr LLC (“Savitr,” “we,” or “us”), a Delaware limited liability company, provides a multi-tenant operations platform: the operating software a business runs on, the data layer that reads it back, and the savitrAI assistant. This Privacy Policy describes how we handle information in connection with the Services described in our Terms & Conditions.

This policy covers our websites (including savitr.ai, savitr.dev and trysavitr.com), the Savitr accounts portal, the Savitr web application, the savitrONE desktop and mobile apps, and related services.

Savitr is a business-to-business product. It is not directed to consumers, and we do not knowingly use the Services to collect information directly from the general public.

We handle personal information in two different roles, and your rights depend on which applies. Data-protection laws use different names for these roles: under South Africa's Protection of Personal Information Act (POPIA), a controller is called a responsible party and a processor is called an operator.

• As a controller (responsible party): for account and identity information (such as the email and name used to sign in), billing information, support requests, information about visitors to our websites, and information about how the Services are accessed and secured. We decide how this information is used to run and protect our business.
• As a processor (operator): for the business records a Customer puts into its tenant (“Customer Data”), including information about the Customer's own customers, suppliers, and staff. We process this data on the Customer's behalf, under its instructions and our Terms.

We also keep audit and security records of activity in the Services, some of which contain Customer Data, for our own security, governance, and compliance purposes. For those records, including the Customer Data they contain, we act as a controller (responsible party); their retention is described in Section 10.

Account & identity information

When an account is created or used, we process your email address, first and last name, and, if you sign in with Google or upload one, a profile picture. We also process your organization memberships and role, and sign-in information such as the sign-in method used, session times, and the IP address and browser or device of each active session. Authentication is handled by our identity provider; Savitr never stores your password. We keep a copy of your name and email address in our own database so the Services can show who did what.

Profile pictures and organization logos are stored by Vercel, our web hosting provider, in its Cape Town (South Africa) region and delivered through its global network. They can be viewed by anyone who has the image's web address, so do not upload an image you want to keep private.

Customer Data you submit

The Services store the business records you enter (products, inventory, locations, transfers, orders, documents, and invoices), as well as contact details you choose to add about your customers and suppliers (such as name, email address, phone number, postal address, and free-text notes) and location coordinates for your sites. Customers decide what Customer Data to enter and control it.

The Services are not designed to hold special personal information (such as health, religious, biometric, or criminal-record information), government identification numbers, bank account details, or payment card numbers. Customers should not enter this kind of information, including in free-text fields.

Point-of-sale information

Where a Customer uses Savitr's point-of-sale features, we also process cashier names and PINs (stored only as one-way hashes, never in readable form), sales and returns, the payment method and a payment reference (such as an authorization code, not a full card number), and, if a shopper asks for an emailed receipt, the email address it is sent to.

Usage, device & log information

To operate and secure the Services, we and our providers process technical details of each request, such as IP address, browser and device information, the page or address requested, request headers, and timestamps. We also maintain an append-only audit logof significant actions within a tenant. Each entry records the acting user (name and email address), their IP address and browser details, and what changed, including the values of a record before and after the change. Because customer and supplier records are audited, audit entries can contain those contacts' details.

Support information

If you contact support or report a problem, we process your name and email address, your message, any screenshots or files you attach, and technical diagnostics captured with the report (such as the page you were on, browser details, and recent application messages) so that we can respond and resolve the issue.

savitrAI interactions

If you use savitrAI, we process your prompts and the records used to answer them, as described in Section 5.

Website visitors

Our marketing websites do not set cookies or use advertising or analytics trackers. Our hosting provider processes standard request information (such as IP address and browser details) to deliver and protect the sites, and your browser may store your preferences (such as light or dark theme, or a choice to go straight to sign-in) locally on your device.

Billing information

For paid plans, we process billing and transaction details. When electronic payment becomes available, card details will be handled by a third-party payment processor and will not be stored by Savitr. We will add that processor to the provider list in Section 8 before electronic payments begin.

We use information to:

• provide, maintain, and secure the Services and authenticate users;
• operate features you use, including savitrAI, analytics, and documents;
• show the approximate location of sign-in sessions and audited actions so that unfamiliar sign-ins and activity can be recognized (you see this for your own sessions; administrators and other users with the relevant permission see it for members' sessions and for audit entries);
• respond to support requests and communicate about the Services;
• detect, prevent, and investigate fraud, abuse, security incidents, and violations of our Terms;
• keep audit and security records;
• process payments and manage billing;
• comply with legal obligations and enforce our agreements; and
• understand and improve the Services, including through aggregated or de-identified analysis that does not identify you.

We do not sell personal information, and we do not use the Services to serve advertising or for cross-context behavioral advertising.

Legal bases

Where the law requires a legal basis for processing (for example, section 11 of POPIA or the GDPR), we rely on: performance of a contract, to provide the Services to Customers and their users; our legitimate interests and those of our Customers, such as securing the Services, preventing abuse, keeping audit records, supporting users, and improving the Services, balanced against your rights; compliance with legal obligations; and consent where we ask for it. You may withdraw consent at any time; this does not affect processing that took place before you withdrew it.

savitrAI and related AI features are powered by Anthropic (the maker of Claude), which acts as a sub-processor. When you use these features, your prompt and the Customer Data needed to answer it (for example the product, inventory, order, customer, or supplier records you are authorized to see, which can include contact details such as names, email addresses, and phone numbers) are sent through our web application host, Vercel, to Anthropic to generate a response. The product-name normalization feature similarly sends the name being entered along with a sample of your existing catalog names.

These features operate within your existing permissions: savitrAI can only read or act on data the signed-in user can already access, and any action that writes or changes data requires your explicit confirmation. Anthropic processes this data under its commercial terms to return results to you.

Savitr does not keep a copy of savitrAI conversations in its database. Your conversation history is saved in your browser's local storage on the device you use, so it stays available on that device; clearing your browser's site data removes it. On a shared computer, clear the site data when you finish. To apply usage limits and AI credits, we record which organization and user made a request and how much AI capacity it used, not the content of the conversation.

We keep cookies to a minimum and do not use advertising or cross-site tracking cookies. The Services use:

• An essential session cookie that keeps you signed in securely across Savitr subdomains. It is encrypted and set as httpOnly, so scripts on the page cannot read it. A short-lived cookie may also be used during Google sign-in to complete the login flow.
• Preference cookies that remember display choices you make, such as light or dark theme, whether the sidebar is collapsed, and where the savitrAI panel is placed. They contain only those settings.
• A security cookie that our network provider, Cloudflare, may set on some Savitr hostnames to help tell genuine visitors apart from automated traffic.
• Local storage in your browser, which keeps a copy of your basic account details so pages load quickly and stores your savitrAI conversation history (see Section 5).

Any product analytics we use are configured to be cookieless and to avoid collecting personal information. Essential cookies are required for the Services to function and cannot be switched off. You can clear preference cookies and local storage through your browser settings.

We share information only as needed to run the Services:

• Sub-processors: the service providers that host, secure, and support the Services, listed in Section 8, acting on our instructions;
• Within your organization: Customer Data is accessible to authorized users of your tenant according to the roles and permissions your administrators configure. Users with the relevant permission can view audit records, which identify the user who performed each action and include their IP address. Administrators with the relevant permission can also see each member's active sessions, including the device and browser, IP address, approximate location, sign-in method, and sign-in and last-active times;
• Professional advisers: our lawyers, accountants, auditors, and insurers, where needed and under duties of confidentiality;
• Legal & safety: where required by law, regulation, or valid legal process (including lawful requests from courts, regulators, and law-enforcement authorities), or to protect the rights, property, and safety of Savitr, our users, or the public; and
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

We do not sell or rent personal information to third parties.

We use the following service providers (sub-processors) to operate the Services. We share with each provider the information it needs for the purpose shown, and it processes that information under our agreement with it or its published terms. The location column shows where each provider mainly processes information; providers may also process it in other countries where they or their own service providers operate.

We may update this list as our providers change; we will keep it current here and provide notice of material changes as described in Section 16.

Savitr LLC is based in the United States. Except as described below, we store the Savitr application database, the files and images uploaded to the Services (other than profile pictures and organization logos), database backups, our API's application and security logs, and caches in Amazon Web Services' Cape Town region in South Africa, and we send transactional email from that region. Profile pictures and organization logos are stored by Vercel, also in Cape Town.

Some personal information is processed outside South Africa, mainly in the United States:

• Vercel hosts our web application, accounts portal, and websites. Requests between your browser and the Savitr API, including your session cookie and the Customer Data in each request and response, pass through Vercel's servers in transit. Vercel also keeps logs of the requests it handles and of activity in our web application and accounts portal, which can include IP addresses, user and organization identifiers and, occasionally, an email address. Profile pictures and organization logos are delivered through Vercel's global network, so copies may be held temporarily on servers in other countries.
• WorkOS holds sign-in and identity information, and Google does so if you use “Continue with Google.”
• savitrAI prompts and the records used to answer them are processed by Anthropic.
• Our company email, support notifications, rate-limiting and sign-in services, network services, and the location lookups for session lists and audit entries process limited information, as described in Section 8.
• Images are delivered through Amazon's global content-delivery network, and the security logs for that delivery, which include IP addresses, are stored in the United States.

These countries may have data-protection laws that differ from those where you live.

Transfers from South Africa

Where POPIA applies, section 72 of POPIA governs transfers of personal information outside South Africa. The grounds we rely on are that the transfer is necessary to provide the Services under a contract with you, or under a contract concluded in your interest between us and a third party (such as a Customer's agreement with us to provide the Services you use); that the recipient is bound by a law, binding corporate rules, or a binding agreement that provides an adequate level of protection; or that you have consented.

Transfers from Europe and the UK

If we process personal information that is subject to European Economic Area, United Kingdom, or Swiss data-protection law, we transfer it only using a transfer mechanism recognized by that law where one is required, such as standard contractual clauses included in our agreements with providers.

We keep personal information only as long as we need it for the purposes described in this policy, including to provide and secure the Services, to meet our legal and compliance obligations, and to resolve disputes. Specifically:

• Active Customer Datais retained while the Customer's account is active and the Customer keeps it in the Services.
• Deleted records. When users delete certain records in the Services (such as products, locations, customers, and suppliers), the records are first moved to an archive where they can be restored for about 30 days, and are then permanently removed from our live database at about 45 days. Copies may remain in backups until those backups expire or are deleted, and in audit records as described below.
• Audit records. An audit log records who changed what in the Services, including the values of changed records before and after each change. These values can include contact details, including for records that are later deleted. Audit records are kept in our live database for 90 days and then moved to a write-once (WORM), access-restricted archive, where they are kept for up to seven (7) years for security, governance, and compliance purposes (for example, the record-keeping expected under security frameworks such as SOC 2) and to meet lawful requests. The archive is not used for any other purpose and is accessed only when required by law or to investigate a security incident. Because we reasonably require these records, complete and unaltered, for those lawful purposes, deletion requests cannot remove entries from the archive during the retention period, as data-protection laws permit (for example, section 14(1)(b) of POPIA).
• Account information is kept while your account is active. If you are removed from an organization, your access to it ends immediately, but we keep your name and email address linked to the records and audit entries that refer to you so that the history stays accurate. We delete or de-identify that information on a verified request where the law does not require or permit us to keep it.
• Customer Data after an account ends is handled as described in our Terms: the Customer may request an export for a limited period, after which the data is deleted or de-identified in the ordinary course, subject to the backup and audit-record retention described here and any legal obligation to keep it.
• Support requests are kept for as long as needed to resolve them and to maintain a record of our support history.
• Data exports generated from the Services expire and are deleted automatically after seven (7) days.
• Application, network, and security (firewall) logs are retained for about 90 days.
• Database backups. Automated database backups are kept for seven (7) days and allow point-in-time recovery. We also take encrypted snapshots of the database before software deployments and certain maintenance work, which we keep for recovery purposes. Backups are encrypted, access-restricted, and used only to restore the Services; deleted data held in a backup is removed when that backup expires or is deleted.
• Short-lived technical data. One-time desktop sign-in codes are deleted when used or after about a minute, rate-limit counters expire at the end of their short time window, and savitrAI usage counters expire after about two months.

When we no longer need personal information, we delete or de-identify it as soon as reasonably practicable. We may keep information for longer where the law requires it or where it is reasonably needed to establish, exercise, or defend legal claims.

We use administrative, technical, and organizational safeguards designed to protect personal information, appropriate to the nature of the information and the risks involved. They include:

• encryption in transit (TLS) for connections to the Services and between our application and its database;
• encryption at rest for our database, file storage, and database backups;
• logical separation of each Customer's data (tenant isolation) and role- and location-based access controls within the Services;
• an append-only audit log of significant actions;
• limiting access to production systems to authorized personnel;
• monitoring of incoming traffic, including a web application firewall that inspects requests for known attack patterns, and rate limits on sensitive operations; and
• relying on our identity provider for passwords, which Savitr never stores, and storing point-of-sale PINs only as one-way hashes.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for keeping your credentials safe and configuring access appropriately, and Customers are responsible for the roles and permissions they grant within their tenant.

If we have reasonable grounds to believe that personal information we hold has been accessed or acquired by an unauthorized person, we will:

• where we act for a Customer (as processor or operator), notify the affected Customer without undue delay, and in any event as required by applicable law, and give it the information reasonably available to us so that it can meet its own obligations; and
• where we are the controller(responsible party), notify the relevant regulators, including South Africa's Information Regulator, and affected individuals, as required by applicable law, as soon as reasonably possible after discovery and within any timeframe the law sets.

We may delay a notification only as the law permits, for example where a law-enforcement authority determines that notification would impede a criminal investigation, or for the time reasonably needed to determine the scope of the compromise and restore the integrity of our systems. Notifications will be in writing (for example, by email or through the Services) and will include the information the law requires, such as the possible consequences, the measures we are taking, and steps you can take to protect yourself.

If you believe your account or data has been compromised, contact us immediately at legal@savitr.dev.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, to withdraw consent, and to complain to a data-protection authority. We do not discriminate against you for exercising these rights. If you are in South Africa, see also Section 14.

To exercise a right relating to your Savitr account, contact us at legal@savitr.dev. Much of your account information can also be viewed and updated directly within the Services. We will verify your request and respond within the timeframe required by applicable law.

We may limit or decline a request where the law allows: for example, where we must keep the information to meet a legal obligation, where we reasonably require it for a lawful purpose such as security and accountability or to establish, exercise, or defend legal claims, or where responding would reveal personal information about someone else. Deletion does not remove information from backups before they expire or are deleted, or from the audit archive during its retention period (see Section 10).

We process personal information using servers located in South Africa. Where the Protection of Personal Information Act 4 of 2013 (POPIA) applies, this section supplements the rest of this policy. Nothing in this policy or our Terms limits any right you have under POPIA.

Our role & Information Officer

Savitr LLC is the responsible party for the personal information for which we act as a controller (Section 2), including the audit and security records described in Sections 2 and 10 and the Customer Data they contain. For other Customer Data, we are an operator, processing it for the Customer as the responsible party. As an operator, we process Customer Data only with the Customer's knowledge or authorization, treat it as confidential, and notify the Customer if we have reasonable grounds to believe that its personal information has been accessed or acquired by an unauthorized person.

You can contact our Information Officer at legal@savitr.dev.

Purpose & whether information is required

Sections 3 and 4 describe the information we collect, why we collect it, and the legal bases we rely on. Providing account information is necessary to use the Services; without it, we cannot create or secure an account. Other information, such as a profile picture, is voluntary. We do not intentionally process special personal information or personal information about children.

Your rights under POPIA

Subject to the conditions and exceptions in POPIA, you have the right:

• to be told when personal information about you is collected, and if it has been accessed or acquired by an unauthorized person;
• to ask whether we hold personal information about you, and to request access to it;
• to request the correction, destruction, or deletion of personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or obtained unlawfully, or that we are no longer authorized to keep, subject to the retention described in Section 10;
• to object, on reasonable grounds relating to your particular situation, to processing based on legitimate interests, and to object at any time to processing for direct marketing;
• not to receive unsolicited electronic direct marketing except as section 69 of POPIA allows;
• not to be subject to a decision with legal consequences, or that otherwise affects you substantially, based solely on automated processing that profiles you. We do not make decisions of this kind; and
• to lodge a complaint with the Information Regulator and to institute civil proceedings.

To exercise a right, contact our Information Officer at legal@savitr.dev. We will verify your identity before responding. As section 25 of POPIA provides, access requests follow the procedures in the Promotion of Access to Information Act 2 of 2000 (PAIA), which may include a prescribed fee. If your request concerns Customer Data held in a Customer's tenant, we will refer it to that Customer, as described in Section 13, and respond ourselves for the audit records we keep for our own purposes.

Transfers outside South Africa

Section 9 describes the personal information we transfer outside South Africa, the countries involved, and the basis for those transfers under section 72 of POPIA.

Complaints

You can lodge a complaint with South Africa's Information Regulator at inforegulator.org.za. We would welcome the chance to address your concern first, so please consider contacting us at legal@savitr.dev before you do.

The Services are intended for business use by adults. They are not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact us at legal@savitr.dev and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated policy with a new effective date and version number and, where appropriate, provide additional notice through the Services. Where the law requires your consent to a change, we will ask for it. Otherwise, your continued use of the Services after an update takes effect constitutes acceptance of the revised policy.

Version history

• 1.1 · October 3, 2026: added where data is stored and transferred (Section 9), security-incident notification (Section 12), and a South Africa (POPIA) section (Section 14); added processing locations and additional providers to the sub-processor list; described the retention of backups and audit records, and our role for audit records, in more detail; clarified cookies, local storage, savitrAI conversation history, location lookups, administrator visibility of member sessions, and our security measures.
• 1.0 · July 6, 2026: first published version.

For privacy questions or requests, or to contact our Information Officer, email us at legal@savitr.dev.

Savitr LLC · a Delaware limited liability company.