Savvi Web Logo SAVVI WEB
Contact
Privacy Policy

Privacy Policy.

Last Updated: 21 August 2026. How Savvi Web collects, uses, and protects personal data across our marketing site, self-hosted software licensing, and hosted Savvi Bot service.

1. Overview

This Privacy Policy explains how Savvi Web ("Savvi Web", "we", "us", "our") collects, uses, stores, shares, and protects personal data when you visit savviweb.com, purchase or licence our self-hosted software (Aura HQ, Aura Nord, MyBooking, My Booking Nord), or use our hosted Savvi Bot service.

It should be read with our Terms and Conditions. Capitalised terms not defined here have the meaning in the Terms.

Controller contact for Savvi Web account and marketing data: info@savviweb.com.

2. Roles: Controller and Processor

  • Marketing site and sales enquiries: Savvi Web is the Controller.
  • Customer accounts, billing, and platform administration for Savvi Bot: Savvi Web is the Controller.
  • End User chat, visitor messages, and Customer Content processed through a customer's Savvi Bot deployment: the Customer is the Controller; Savvi Web is the Processor acting on the Customer's instructions.
  • Self-hosted Aura / MyBooking installations: the Customer is Controller (and typically Processor) for End User data stored in the Customer's own hosting environment. Savvi Web does not host that installation data unless a separate managed-hosting agreement says otherwise.

3. Information We Collect

Depending on the product, we may collect:

  • Account and contact data: name, email, phone, organisation, workspace name, login identifiers.
  • Billing data: billing address, tax details, subscription status, and payment metadata processed by Stripe (we do not store full card numbers).
  • Savvi Bot configuration: bot settings, prompts, allowed domains, knowledge source URLs/files you connect, and feature preferences.
  • Chat Data: messages and related metadata between End Users and your bot, conversation status, and operational logs needed to deliver replies.
  • Technical and usage data: IP address, device/browser information, approximate location derived from IP, cookies or similar technologies, diagnostic logs, and product analytics.
  • Support data: tickets, emails, and troubleshooting information you send us.
  • Marketing data: newsletter preferences and form submissions on savviweb.com.

4. How We Use Information

  • Provide, operate, secure, maintain, and improve the Services.
  • Create and manage accounts, workspaces, licences, and subscriptions.
  • Process payments and prevent fraud or abuse.
  • Deliver AI chat responses and knowledge features you configure.
  • Send transactional messages (security alerts, billing, product notices).
  • Provide support and investigate incidents or Terms violations.
  • Comply with law and enforce our agreements.
  • With consent or soft opt-in where allowed, send marketing communications (you can opt out).

5. Lawful Bases (UK GDPR)

  • Contract: to provide Services you request or purchase.
  • Legitimate interests: securing the platform, improving reliability, preventing abuse, and limited B2B marketing where appropriate, balanced against your rights.
  • Legal obligation: tax, accounting, and regulatory requirements.
  • Consent: where required (for example certain cookies or marketing). You may withdraw consent without affecting prior lawful processing.

Where we act as Processor for Chat Data, the Customer is responsible for establishing a lawful basis for End Users.

6. Self-Hosted Software (Aura / MyBooking)

Aura and MyBooking are designed for installation on infrastructure you control. For those products, Savvi Web generally does not collect, host, or have access to your End Users' booking records, customer databases, or payment card data stored in your installation. You are responsible for your own privacy notices, security, backups, and compliance for that environment.

We may still process your purchaser account, licence, support, and billing data as Controller when you buy or renew Self-Hosted Software from us.

7. Savvi Bot Hosted Processing

Savvi Bot is hosted. To operate your workspace we process account data and, as Processor, End User Chat Data and Customer Content you submit (including knowledge sources). You must not use Savvi Bot to collect special category data or children's data unless you have a lawful basis and appropriate safeguards, and you instruct us accordingly in a manner we can accept.

AI systems are probabilistic and may process prompts and retrieved knowledge to generate replies. Outputs can be inaccurate, incomplete, or fabricated. See the Terms for AI disclaimers and Customer responsibilities.

8. Sharing, Disclosure, and Subprocessors

We do not sell personal data. We share data only as needed with:

  • Infrastructure and hosting providers that run application and database workloads.
  • Payment processors such as Stripe.
  • Email and transactional messaging providers.
  • Large language model / inference providers used to generate Savvi Bot responses (and customer-supplied providers when you bring your own API keys).
  • Professional advisers and authorities when legally required.
  • Successors in a merger, acquisition, or asset sale, subject to appropriate protections.

Subprocessor categories may change as we evolve the Service. For a current list of key subprocessors, contact info@savviweb.com. When you supply your own AI provider keys, that provider's processing is under your relationship with that provider.

9. Security and Personal Data Breaches

We implement commercially reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, or alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If Savvi Web becomes aware of a personal data breach affecting data we process, we will investigate and, where we are Controller, notify the ICO and affected individuals when UK GDPR requires. Where we are Processor, we will notify the Customer without undue delay so the Customer can meet its Controller obligations. Notification is not an admission of liability.

10. Cookies and Tracking

We use cookies and similar technologies for essential site operation, preferences, security, and (where allowed) analytics or marketing. You can manage non-essential cookies through browser settings or any cookie controls we provide. Disabling certain cookies may affect functionality.

11. Retention

  • Account and billing records: for the life of the account and thereafter as required for tax, accounting, and dispute periods.
  • Chat Data and knowledge content: while the workspace is active and for a reasonable period after cancellation to allow export or recovery, then deletion or irreversible anonymisation, unless longer retention is required by law or legitimate security/audit needs.
  • Support and security logs: for a limited operational period, longer if needed for investigations.
  • Marketing data: until you unsubscribe or we determine the data is no longer needed.

12. Your Rights

Under UK GDPR / Data Protection Act 2018, individuals may have rights to access, rectification, erasure, restriction, objection, and data portability, and rights related to automated decision-making where applicable. To exercise rights regarding data Savvi Web controls, contact info@savviweb.com. We may need to verify identity.

If your data was collected through a customer's Savvi Bot on their website, contact that customer (the Controller) first. We will assist Customers with Processor requests as required.

You may complain to the UK Information Commissioner's Office (ICO): https://ico.org.uk/.

13. International Transfers

We operate from the United Kingdom. Personal data may be transferred to or accessed from other countries by subprocessors (for example hosting or AI providers). Where required, we use appropriate safeguards such as the UK International Data Transfer Agreement / Addendum or other lawful transfer mechanisms.

14. Children

Our Services are directed to businesses and adults. They are not intended for children under 16. Customers must not configure Savvi Bot to target children or knowingly collect children's personal data without a lawful basis and compliant design. If you believe we have collected children's data in error, contact us and we will take appropriate steps.

15. Changes to This Policy

We may update this Privacy Policy by posting a revised version at https://savviweb.com/privacy-policy/ with a new "Last Updated" date. Material changes will be highlighted by updating that date. Continued use of the Services after changes take effect constitutes acceptance where permitted by law.

Privacy concerns?
Contact Privacy Team arrow_forward