Privacy

1. Information processed by Sovya

When you sign in with Google or Apple we receive your email address, display name and, for Google, a profile picture. That is the whole account record. We do not ask for a phone number, date of birth, Aadhaar, PAN or payment details, and the assistant is instructed to refuse them if you send them by accident.

When you use Sovya we also process the prompts, messages and feedback you submit, together with timestamps and technical logs needed to operate, secure and improve the service. We process that information to generate replies, keep your conversation history, operate the beta, detect abuse and security threats, diagnose faults, and comply with applicable law.

2. AI service providers

Messages you send are transmitted to Amazon Bedrock, running NVIDIA Nemotron, in us-west-2 to generate a reply. Nemotron 3 Super is not currently offered in the Mumbai (ap-south-1) Bedrock region, so inference happens there rather than in India. We state this plainly rather than implying local processing.

If a turn needs a live lookup, the relevant part of your prompt may be sent to our web-search or browser provider solely to fulfil that request. Those parties have their own terms.

Account records and transcripts are held in Amazon DynamoDB, encrypted with a customer-managed AWS KMS key we control. Sovya itself stores no personal data outside AWS.

2a. Sovya Beauty photos

Sovya Beauty is optional and asks for your agreement before the first photo. When you use makeup try-on or a skin check, the selfie you choose is sent to Perfect Corp. (YouCam API) to render the makeup or read skin and lip colour. Perfect Corp processes it outside India, including in the United States, and returns the result to Sovya.

Before a photo leaves Sovya we remove its location and device data, and we check that it shows one adult face; a photo of a child is refused. Face checks use Amazon Rekognition and keep no face template.

Your selfies and try-on pictures are deleted automatically after 30 days. A look you save keeps its picture until you delete it. Skin check results are cosmetic observations, not a diagnosis. Answers you give about allergies, sensitive skin or pregnancy are optional, are used only to filter suggestions, and are never written to logs.

You can delete every Beauty photo, saved look, skin check and answer at once from Settings → Sovya Beauty → Delete my Beauty data.

3. Training and product improvement

Your prompts and the replies are not used to train or fine-tune any model, by us or by Amazon Bedrock / NVIDIA.

4. What we do not log

Message content is never written to our server logs. Operational logs record that a request happened and whether it failed, not what it contained, and are retained for 14 days.

5. Encryption

Content is encrypted in transit with HTTPS/TLS and at rest with the customer-managed AWS KMS key described above.

Conversations are not end-to-end encrypted. Sovya's systems and Amazon Bedrock must process the text in readable form to generate a reply and operate the service. Do not submit passwords, authentication codes, payment-card details, banking credentials, Aadhaar, PAN, or other information that is unnecessary for your request.

6. Administrative access

A small set of authorised operators may open stored conversations through Sovya's dashboard. They may do so only when reasonably necessary to respond to a support request, investigate abuse, fraud or a security incident, diagnose a technical fault, review content you voluntarily sent as feedback, enforce the Terms of use, or comply with applicable law or a valid legal request.

Administrative access must not be used for personal purposes, general surveillance, advertising, or unrelated review. Operators are subject to confidentiality and security obligations.

7. Storage and deletion

Transcripts are stored so you can return to them. You can delete any conversation from the sidebar, which removes it from storage. To delete your account and every associated record, email [email protected]. We will action a valid request within a reasonable period unless retention is required for security, fraud prevention, dispute resolution or compliance with law.

Residual copies may remain temporarily in DynamoDB point-in-time recovery until those backups age out.

8. Sharing of information

We share the minimum information necessary with Amazon Web Services, Amazon Bedrock, the web-search or browser provider when a turn uses those tools, and Perfect Corp. when you use Sovya Beauty photos.

We do not sell or rent conversations or personal data. We do not use conversation content to target third-party advertisements.

9. Your rights

Subject to the Digital Personal Data Protection Act, 2023, you may request information about the personal data we process, access to it, correction of inaccurate information, deletion, withdrawal of consent for consent-based processing, or review of a privacy-related complaint. Send requests to [email protected]. We may verify your identity before completing a request.

10. Children

Sovya is intended only for people who are at least 18 years old and who use the service from India. Anyone under 18 must not create an account or submit personal data.

11. AI limitations

Replies may be inaccurate, incomplete or outdated. Sovya does not provide medical, legal, financial or other professional advice. The Terms of use govern use of the beta.

12. Security

We use reasonable technical and organisational safeguards, including the KMS key and log policy above. No online service can guarantee absolute security.

13. Changes and contact

We may update this notice when the service, providers or legal obligations change. If a change materially affects how personal data is used, we will provide appropriate notice.

Requests and complaints: [email protected]. Questions: [email protected].