Privacy Policy

§ 1 Introduction

Welcome to Savoiré AI (savoireai.vercel.app), a product of Sooban Talha Technologies. We build a premium AI study workspace — Notes, Flashcards, Quiz, Summary and Mind Map — powered by Mesh API's multi-model orchestration layer.

This Privacy Policy explains what data we collect, how we use it, where it lives, and the rights you have over it. By using Savoiré AI, you agree to this policy. If you do not agree, please do not use the service.

§ 2 What we collect

A · Account information (via Firebase Authentication)

• Email address, display name and profile photo (when you sign in with Google or with email + password)
• Firebase UID — an anonymous identifier we use to associate your data with your account
• Sign-in timestamps and authentication method

B · Study data (via Firebase Firestore)

• Topics you submit and the study material generated from them (notes, flashcards, quiz, summary, mind map) — stored under users/{uid}/history and users/{uid}/saved
• Credit balance, plan tier, generation count, usage timestamps, streak, sessions and total words generated
• Aggregated, anonymised usage logs (topic length, tool, duration, model used) for reliability and quality work

C · Payment data (via Razorpay)

• We never store your card number, UPI PIN, CVV or bank password. Razorpay is PCI DSS Level 1 certified and RBI-authorised; it handles every payment instrument on our behalf.
• We do store: razorpay_payment_id, razorpay_order_id, plan name, credits issued, settlement status, and timestamp — kept for accounting, refunds and fraud prevention.
• Razorpay may collect your phone number for UPI verification; that data is processed by Razorpay under its own privacy terms.

D · Technical data

• Device type, browser family, IP address — used for rate limiting, abuse prevention and aggregate analytics
• Serverless function logs (anonymised request ID, latency, status) for debugging on Vercel

§ 3 How we use your data

• To generate your study material via Mesh API (multi-model orchestration, including Amazon Nova Micro and others)
• To show your credit balance, history and saved notes across your devices
• To process payments and issue credits via Razorpay
• To send a one-time welcome email from noreply@savoireai.vercel.app (only on first sign-in, only if email delivery is configured)
• To improve reliability, prompts and quality through anonymised, aggregated metrics
• To prevent abuse — rate limits, token-exhaustion checks, fraud signals

§ 4 Where we store data

• Firebase Authentication & Firestore — Google Cloud, asia-south1 (Mumbai), encrypted in transit (TLS 1.3) and at rest (AES-256). Per-user security rules: allow read, write if request.auth.uid == userId.
• Vercel — serverless function hosting, with environment variables encrypted and runtime logs auto-purged per their retention policy.
• Razorpay — payment data, PCI DSS Level 1, RBI-authorised Payment Aggregator, with settlement to our bank via NEFT / IMPS.
• Mesh API — receives the topic and selected tool to generate content. Mesh routes to one of 14+ underlying models and returns the response; prompts are not retained for training by the underlying providers we use.

§ 5 Third-party services

Savoiré AI uses a small set of carefully chosen sub-processors. Each is bound by its own privacy and security commitments.

§ 6 What we never do

• We do not sell your data to advertisers, data brokers or any third party
• We do not store your UPI PIN, card CVV, or bank password — ever
• We do not read your private study content for advertising, profiling or training
• We do not share your email with third parties except where strictly required to provide the service (Firebase for sign-in, Razorpay for payment)
• We do not run third-party tracking cookies, pixels or fingerprinting scripts

§ 7 Your rights

• Access — view all your data in Dashboard → Settings → Backup & Restore → Export JSON
• Delete — Dashboard → Settings → Delete Account (3-step confirmation). Removes your Firestore data, your Firebase Auth account, and every trace of your history and saved notes. Takes 1–2 minutes by design to prevent exploit.
• Sign out — Avatar → Log Out clears localStorage and signs you out; your cloud data remains untouched
• Correction — change your display name and avatar at any time in Settings
• Portability — Export your entire workspace as a JSON backup whenever you want

For any data request that can't be self-served inside the dashboard, write to us at [email protected] and we'll respond within 7 working days.

§ 8 AI engine & Mesh API

Savoiré AI runs its generations through Mesh API (app.meshapi.ai), a multi-model orchestration service. When you submit a topic, we send the topic and selected tool to Mesh, which races up to 14 underlying models in parallel using a first-success policy and returns the first valid response. The underlying models include Amazon Nova Micro and others made available through Mesh's catalogue.

Specifically:

• Only the topic text, the selected tool and the language preference are sent to Mesh API per request. We do not send your name, email, photo, payment information or any other account data.
• Mesh API does not use your prompts to train any underlying model, per Mesh's published terms.
• Mesh's response is stored in your Firestore history and surfaced to you inside the dashboard.
• Mesh's privacy and terms apply to the data they process on our behalf: app.meshapi.ai.

§ 9 Google sign-in & email notifications

When you sign in with Google, Google itself sends you a one-time security email titled something like "You granted access to Savoiré AI to see your name and photo". This email is sent by Google, not by us, as part of Google's account security policy. It cannot be disabled from our side, and it shows our product name and logo so you can verify the request was real.

Separately, if email delivery is configured on our end, you'll also receive a single welcome email from noreply@savoireai.vercel.app with your plan and credit details. You can opt out of future emails at any time by replying unsubscribe.

§ 10 Cookies & storage

• localStorage — Firebase ID token (sv_firebase_token), user name, avatar, streak, sessions, theme preferences — used so the app works offline and feels instant
• sessionStorage — used during the Firebase Auth redirect flow (for mobile sign-in fallback when popups are blocked)
• Firestore — cloud sync of your history, saved notes, credits and streak across devices
• No third-party tracking cookies, no advertising cookies, no analytics pixels

§ 11 Children's privacy

Savoiré AI is intended for users aged 13 and above, or younger with the consent of a parent or legal guardian. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe a child under 13 has signed up, contact us and we will delete the account within 7 days.

§ 12 Changes & contact

We may update this policy from time to time. Material changes will be announced on the dashboard and reflected by the "Last updated" date at the top. Continued use of the service after an update constitutes acceptance of the revised policy.

Company: Sooban Talha Technologies
Product: Savoiré AI
Founder: Sooban Talha
Website: savoireai.vercel.app · soobantalhatech.xyz
Email: [email protected]
Instagram: @developer_sooban
Registered address: Moradabad, Uttar Pradesh, India