FeaturesSovariq AIDocsPricingContact
Console

Privacy Policy

Last updated 10 October 2026

This policy explains what personal data Sovaria collects when you use our website, console, APIs, SDKs and CLI, why we collect it, and the choices you have. It is written to meet the Digital Personal Data Protection Act, 2023 (India) and, for people in the European Economic Area and the United Kingdom, the GDPR.

1. Who we are

Sovaria ("we", "us") provides a backend platform: identity, policy, databases, realtime, storage, functions and related services reached through one gateway. For data about you as a Sovaria account holder, we are the data fiduciary (controller).

For data your applications store in Sovaria about your own end users, you are the data fiduciary and Sovaria acts as your data processor. We process that data only to run the service for you, under your instructions and these terms.

2. Data we collect

We collect only what we need to run and secure the service:

  • Account data: your name, email address and a one-way hash of your password. We never store your password in readable form.
  • Sign-in data: if you sign in with GitHub or Google, we receive your basic profile and email from that provider.
  • Organization and project data: names, members, roles, plans and settings you create in the console.
  • Usage and security data: IP address, user agent, request metadata, authentication events and an audit trail of actions taken in your projects.
  • Billing data: plan, invoices and payment status. Card and bank details are collected and stored by our payment processors, not by Sovaria.
  • Support data: what you send us through the contact form or email.

3. How we use it

We use personal data to:

  • create and secure your account, sign you in and keep your session active;
  • run the platform, including enforcing access policies, quotas and rate limits;
  • meter usage and bill your plan;
  • detect, investigate and prevent abuse, fraud and security incidents;
  • send service messages such as verification, security alerts, invoices and important changes;
  • answer support requests and improve the service.

5. Cookies and local storage

The console uses strictly necessary cookies to keep you signed in: sovaria_access_token and sovaria_refresh_token are HttpOnly, secure session cookies that scripts cannot read, and short context cookies such as sovaria_ctx_org and sovaria_ctx_project remember the organization and project you last opened.

We also store interface preferences in your browser, such as theme, sidebar state and dismissed hints. We do not use advertising cookies.

6. Who we share it with

We do not sell personal data. We share it only with service providers that help us run Sovaria, under contracts that limit their use of it:

  • Cloud infrastructure: Amazon Web Services, in the region you choose for your project.
  • Payments: Razorpay and Stripe process payments and hold payment details.
  • Email delivery: Amazon SES or an SMTP provider sends account and billing email.
  • Sign-in providers: GitHub and Google, when you choose to sign in with them.

7. Where data is stored

Your account data is stored in India (Asia Pacific, Mumbai). Project data is stored in the region selected for that project: Mumbai, Singapore, Ireland or N. Virginia. When data moves across borders, we rely on safeguards permitted by applicable law.

8. How long we keep it

We keep account data while your account is active. Audit logs are kept for 7 days on Free, 30 days on Pro and 180 days on Team plans, then deleted. Backups roll off on a fixed schedule. Billing records are kept as long as tax law requires. When you delete an account or project, we delete or anonymize the related data unless the law requires us to keep it.

9. Security

Every request is authenticated and checked against policy before it reaches your data. Data is encrypted in transit, session cookies are HttpOnly, the audit trail is append-only and hash-chained, and access to production systems is limited and logged. No system is perfectly secure; if a breach affects your personal data, we will notify you and the authorities as the law requires.

10. Your rights

Depending on where you live, you can ask us to:

  • access the personal data we hold about you, and get a copy;
  • correct inaccurate or incomplete data;
  • delete your data or your account;
  • restrict or object to certain processing, and withdraw consent;
  • nominate someone to exercise your rights if you are unable to (India).

11. Children

Sovaria is a service for developers and businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18.

12. Changes to this policy

We will post any changes here and update the date above. If a change is significant, we will tell you by email or in the console before it takes effect.

13. Contact and grievances

To exercise your rights or raise a concern, email support@sovaria.in with the subject "Privacy". We aim to respond within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India or, in the EEA or UK, your local data protection authority.