Privacy Policy

1 What data we collect

We collect only what we need to provide you with a working, personalised Sivarr experience:

• Account data — your name, email address, and (if you set one) a hashed password. We never store plaintext passwords.
• Content you create — tasks, goals, habits, notes, journal entries, documents, and anything else you add to your workspace.
• Usage data — which features you use, how often, and session timestamps. This helps us improve the product.
• Device and technical info — browser type, operating system, and IP address. Used for security and debugging.
• Payment data — we do not store card numbers. Payments are handled by Paystack or Flutterwave, which have their own privacy policies.
• AI conversation history — messages you send to Sivarr AI, stored to provide context across sessions. You can clear your AI history at any time.

2 How we use it

The data we collect is used for the following purposes:

• To provide the service — personalising your dashboard, generating AI briefs, syncing your workspace across devices.
• To improve Sivarr — understanding how features are used so we can build better ones. We use aggregated, anonymised data for this.
• To send you notifications — reminders, streaks, and product updates. You can opt out in your settings.
• To process payments — verifying subscription status and managing billing via Paystack or Flutterwave.
• To keep you safe — detecting fraud, abuse, and security threats.
• To comply with the law — responding to valid legal requests when required.

We do not use your personal data to train third-party AI models, and we do not sell or share it with advertisers.

3 Data storage

Your data is stored in a PostgreSQL database hosted on Railway, with servers in the EU and US. Railway's infrastructure is SOC 2 compliant.

All data is transmitted over HTTPS (TLS 1.2+). Passwords are hashed using bcrypt before storage. We never store plaintext passwords or payment card numbers.

Payments are processed by Paystack and Flutterwave. We receive only a transaction reference and subscription status — not your card details.

4 Third-party services

Sivarr uses the following third-party services. Each has its own privacy policy:

5 Google OAuth & Google Calendar

Sign in with Google

If you choose to sign in with Google, we request the following scopes only:

• openid — to verify your identity
• email — to create or match your Sivarr account
• profile — to get your name for personalisation

These sign-in scopes do not store any Google OAuth tokens beyond your current session.

Google Calendar integration (optional)

Sivarr does not access your Google Calendar unless you explicitly connect it from the Calendar page. If you connect it, we request a single scope:

• https://www.googleapis.com/auth/calendar.events — to read your upcoming calendar events so we can display them inside Sivarr, and to add events you choose to push from Sivarr to your Google Calendar.

How we use this data. Calendar event data retrieved through this scope is used solely to show your schedule to you within the Sivarr app and to create events you explicitly create. We do not sell it, use it for advertising, or share it with third parties, and no humans read it except where required for security or to comply with the law.

What we store. To keep the connection active, we securely store a Google Calendar OAuth refresh/access token associated with your account. We do not copy your calendar contents into our database. You can disconnect at any time, which discards the stored token.

We do not request access to Google Drive, Gmail, Contacts, or any other Google service.

You can revoke Sivarr's access to your Google account at any time at myaccount.google.com/permissions.

Limited Use disclosure

Sivarr's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6 Data retention

We keep your data for as long as your account is active. If you delete your account:

• Your personal data (name, email, profile) is permanently deleted within 30 days.
• Your workspace content (tasks, notes, goals, journal entries) is deleted within 30 days.
• Payment records may be retained for up to 7 years as required by Nigerian financial regulations.
• Anonymised, aggregated usage data (no personal identifiers) may be retained indefinitely for product analytics.

You can export your data at any time before deleting your account by going to Settings → Data export.

7 Your rights

You have the following rights over your data:

• Access — request a copy of all data we hold about you.
• Correction — ask us to correct inaccurate information.
• Deletion — ask us to delete your account and all associated data.
• Portability — export your workspace data in a standard format.
• Objection — object to how we use your data for certain purposes.

To exercise any of these rights, email privacy@sivarr.com. We'll respond within 30 days. You can also delete your account directly from Settings at any time without contacting us.

8 Cookies

Sivarr uses session tokens stored in your browser's local storage (not cookies) to keep you signed in. We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

The only data stored in your browser is your session token (a random string used to authenticate your requests) and your UI preferences (like selected theme or sidebar state).

We do not use Google Analytics, Facebook Pixel, or any advertising network tracking on the platform.

9 Children

Sivarr is not intended for children under 13 years old. We do not knowingly collect personal data from anyone under 13.

If you're a parent or guardian and believe your child has created an account, please email privacy@sivarr.com and we will delete the account promptly.

10 Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in the platform or applicable law. When we make material changes, we'll:

• Send a notification to your registered email address
• Update the "Last updated" date at the top of this page
• Post an in-app notification for significant changes

Continued use of Sivarr after the effective date of a change means you accept the updated policy. If you don't agree, you can delete your account before the change takes effect.

11 Contact

For any privacy-related questions, requests, or concerns:

• Email: privacy@sivarr.com
• General support: support@sivarr.com

We aim to respond to all privacy requests within 30 days.