Privacy Policy.

Swade Soul Enterprise LLC operates Sovereign Business Suite and is the controller of the personal information described here. Contact us at Info@sovereignboard.app for any privacy request. This policy works alongside our Terms of Service.

• Account information — name, email address, company name, plan and billing status. If you sign in with Google, we receive your name, email and profile image from Google.
• Company knowledge you enter — company profile, facts, products, pricing, governance settings and board member details, including the names, roles, relationships and email addresses of people you add.
• Board activity — issues, agendas, meeting minutes, session transcripts, contributions, votes, decisions and generated documents.
• Voice data — where you enable it: microphone audio captured during a session, text transcribed from that audio, and any synthetic or cloned voice model you create. Treated as sensitive information.
• Uploads — documents, minutes and files you upload for analysis.
• Usage and technical data — pages viewed, features used, approximate device type, timestamps, and error diagnostics.
• Assessment answers — the responses you give in the readiness assessment.

We never see your password in readable form, never store full card numbers (payments are handled by our payment processor), and never read your private notes for any purpose other than delivering the feature you asked for.

To create and secure your account, run the boardroom and generate documents, personalise recommendations, provide support, detect abuse and protect the platform, meet legal obligations, and improve the product in aggregate. Where the law requires a lawful basis, ours is performance of our contract with you, our legitimate interest in operating and securing the service, your consent for voice recording and cloning, and legal obligation where applicable.

The microphone is only active when you turn it on in a boardroom session, and your browser will ask permission first. Audio is used to transcribe what you said so the board can respond. You can disable voice entirely and use text input instead, with no loss of function.

Creating a cloned voice is optional and requires an explicit consent step recorded against that board member. A voice model is a distinctive personal identifier, so we treat it as sensitive: it is used only to speak that member's contributions inside your account, is never shared with other customers, is never used to train general-purpose models, and is deleted immediately when you delete the member or ask us to remove it. You must hold the speaker's consent before cloning their voice.

Board contributions, summaries and documents are generated by AI models. To produce them, the relevant company knowledge and session context is sent to the model provider for that request. Your company data is not used to train public models. Outputs may be inaccurate and should be reviewed before you rely on them.

We use a small number of vetted providers, each bound to process data only on our instructions:

• Supabase — database, authentication and file storage
• Cloudflare — application hosting and content delivery
• Google — optional sign-in
• ElevenLabs — synthetic and cloned voice generation, when you enable it
• OpenAI and Google AI — text generation, transcription and speech, when you use those features
• RealtimeKit — live meeting sessions, when used
• Stripe — payment processing, when billing is active
• Lovable — email delivery for account, invitation and reminder messages

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

We use a small number of strictly necessary cookies and local storage entries to keep you signed in and remember interface preferences. Product analytics are first-party and recorded against your account or an anonymous session identifier to understand which features are used. We do not run third-party advertising or tracking networks.

When you invite a board member, we store their name and email address so the briefing link can be sent and their position recorded. Briefing links expire and can be revoked. We contact those people only about the meeting you invited them to.

The Windows and macOS applications keep a local copy on your own computer of records you have already opened, so you can read them without a connection. That copy is stored in the application's data folder on your device and is not visible to us. Deleting the app data or the application removes it. Securing the device is your responsibility.

• Active accounts — for as long as the account exists.
• Unconverted free trials — all content is permanently deleted on day 14. Only your name and email address are kept, so you can return and purchase; nothing else survives.
• Closed accounts — account records for up to 12 months, then deletion.
• Analytics and audit logs — up to 24 months.
• Voice models — until you delete the member or ask for removal.

You, and anyone you invite. Database rules restrict every record to its owner. A small number of authorised staff can access accounts for support, security or legal reasons; that access is role-limited and logged, including any support session carried out on your behalf.

Wherever you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to certain processing, or withdraw consent for voice features. Email Info@sovereignboard.app and we will respond within 30 days.

If you are in the UK or the European Economic Area, you also have the right to complain to your data protection authority. If you are a California resident, you have the rights to know, delete, correct, and to limit use of sensitive personal information; we do not sell or share personal information, and we will never discriminate against you for exercising a right.

Data is encrypted in transit and at rest. Row-level database rules enforce ownership on every table. Admin capability is role-based and audited. API keys are stored hashed. No system is perfect; if a breach affects your personal information we will notify you and any required regulator without undue delay.

We and our providers operate in the United States and other countries. Where data moves out of the UK or EEA, it is protected by standard contractual clauses or an equivalent approved safeguard.

The suite is a business tool for adults. It is not directed at anyone under 18 and we do not knowingly collect their information. If we learn we have, we delete it.

We may update this policy; the date above will change and material changes will be announced in the product. Questions, requests or complaints: Info@sovereignboard.app.