Privacy Policy

1. Who we are

Soravo ("Soravo," "we," "us," or "our") operates the marketplace at soravo.ai. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our platform.

For privacy-related questions, contact us at hello@soravo.ai.

2. What data we collect

Data you provide directly:

Account data: email address, username, password (hashed — we never see your plaintext password), and account role (Creator or Brand).
Profile data: display name, bio, AI tools used, specialties, and other optional profile fields you choose to complete.
Content data: video files, thumbnails, titles, descriptions, and tags you upload to the Platform.
Communications: inquiry messages you send or receive through the Platform.

Data we collect automatically:

Usage data: pages visited, ads viewed, search queries, and other interactions with the Platform.
Device data: browser type, operating system, referring URL, and IP address.
Cookies: session cookies required for authentication. We do not use third-party advertising cookies.

3. How we use your data

To operate and improve the Soravo Platform
To authenticate your account and maintain security
To facilitate licensing transactions between Creators and Brands
To send transactional emails (inquiry notifications, moderation decisions, account updates) — not marketing emails without your consent
To monitor for violations of our Terms of Service and Content Policy
To comply with legal obligations

We do not sell your personal data to third parties. We do not use your data for advertising profiling.

4. Data storage and security

Your data is stored on Supabase infrastructure (PostgreSQL database and object storage) hosted on AWS servers. We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and role-based access controls.

Video content you upload is stored in private storage buckets. Preview access is controlled via time-limited signed URLs. Original files are never publicly accessible.

No security system is perfect. If you believe your account has been compromised, contact us immediately at hello@soravo.ai.

5. Data sharing

We share your data only in the following circumstances:

With other users: Your Creator profile (username, bio, uploaded ads) is visible to Brands and visitors. Inquiry messages are shared between the Creator and Brand involved.
With service providers: We use Supabase for database and storage, and Vercel for hosting. These providers process data on our behalf under confidentiality agreements.
For legal compliance: We may disclose data if required by law, court order, or to protect the rights and safety of Soravo, its users, or the public.
Child safety: We will report any content involving child exploitation to the National Center for Missing and Exploited Children (NCMEC) and relevant law enforcement without notice.

6. Your rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate data.
Deletion: Request deletion of your account and associated personal data. Note: content that has been licensed to a Brand prior to deletion may remain in use under the terms of that license.
Data portability: Request a machine-readable export of your data.
Objection: Object to certain processing of your data.

To exercise any of these rights, contact us at hello@soravo.ai. We will respond within 30 days.

7. Cookies

Soravo uses cookies solely for authentication and session management. We do not use third-party tracking cookies or advertising cookies. Your session cookie is deleted when you log out.

You can disable cookies in your browser settings, but doing so will prevent you from logging in to the Platform.

8. Data retention

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required for legal compliance or to resolve outstanding disputes.

Uploaded content that has been licensed to a Brand will not be deleted from our records for the duration of the license, to maintain the integrity of the license agreement.

9. International users

Soravo is operated from the United States. If you access the Platform from outside the United States, your data will be transferred to and processed in the United States. By using the Platform, you consent to this transfer. We process data in accordance with applicable data protection laws including GDPR where applicable.

10. Children

Soravo is not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If we become aware that a user is under 18, we will immediately terminate their account and delete their data.

11. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users or by a prominent notice on the Platform. The effective date at the top of this page will always reflect the most recent version.

12. Contact

Privacy questions or requests: hello@soravo.ai