SAVOK

Privacy Policy

Last updated: April 11, 2026

SAVOK ("we", "us", or "our") operates the savok.ai website and the SAVOK mobile and web applications (collectively, the "Service"). This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect several different types of information for various purposes to provide and improve our Service to you.

Account Information:

Email address (for hotel owners and managers)
Username and password hash (for hotel workers, created by their manager)
Display name and optional profile photo
Hotel name and organization role
Preferred language

Operational Data:

Room statuses, cleaning history, and inspection records for your hotel's rooms
Messages and chat history between team members within your organization
Task assignments, completion times, and notes
Photos uploaded by team members (e.g. room condition photos)
Voice notes and transcripts from the AI assistant
Shift schedules and team membership

Marketing and Waitlist Information:

Email address submitted via the waitlist form on savok.ai
Hotel name and approximate room count
Browser user agent and referrer (for anti-spam and analytics)

Automatically Collected Data:

Device information (browser type, operating system)
Log data (IP address, access times, pages viewed)
Error reports (via Sentry) to help us fix bugs

2. How We Use Your Information

SAVOK uses the collected data for the following purposes:

To provide and maintain the Service
To enable multi-tenant data isolation (your hotel's data is never visible to another hotel)
To notify you about changes to the Service
To allow you to participate in interactive features of the Service when you choose to do so
To provide customer support
To gather analysis or valuable information so that we can improve the Service
To monitor the usage of the Service
To detect, prevent, and address technical issues
To train and improve AI features (only using your hotel's own data, never shared across tenants)

3. Where Your Data Is Stored

We use industry-standard infrastructure providers to host and process your data. Your information may be stored or processed by the following third parties:

Supabase (hosted on AWS us-east-1) — primary database, authentication, file storage. See the Supabase Privacy Policy.
Cloudflare — DNS, CDN, and web application firewall for savok.ai. See the Cloudflare Privacy Policy.
Vercel — web application hosting for legacy Kirkwood deployment. See the Vercel Privacy Policy.
Sentry — error tracking and crash reporting. See the Sentry Privacy Policy.
NVIDIA NIM and Groq — AI inference providers for the assistant features. Voice transcription and chat completions may be processed on their infrastructure.

We do not sell your data to advertisers or data brokers. We do not share your hotel's operational data (rooms, tasks, chat) with any third party other than the infrastructure providers above, who are bound by their own data processing agreements.

4. Tenant Isolation

SAVOK is a multi-tenant service. Each hotel is an isolated "organization" within the system. Workers, managers, and owners from one hotel cannot see data from another hotel. This isolation is enforced at the database level through Postgres Row Level Security policies, with additional application-level checks on every data access path. An internal service administrator has the technical ability to access data for support purposes, but does so only with an explicit written request from an organization owner, or as required by law.

5. Cookies and Tracking

We use cookies and similar tracking technologies to maintain authentication sessions. We do not use cookies for advertising, retargeting, or cross-site tracking. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to log in to SAVOK.

6. Your Rights

You have the following rights regarding your personal data:

Access: You may request a copy of the personal data we hold about you.
Correction: You may request that we correct any inaccurate personal data.
Deletion: You may request that we delete your personal data. For account data, you can delete your account through the in-app settings. For data about your hotel, your organization owner has the authority to request deletion.
Export: You may request a machine-readable export of your data.
Objection: You may object to our processing of your personal data.

To exercise any of these rights, please contact us at [email protected].

7. Data Retention

We retain your personal data only for as long as necessary for the purposes set out in this Privacy Policy. When your organization cancels its subscription, we retain your data for 30 days in case of re-activation, after which we permanently delete it from our primary systems within 60 days (some encrypted backups may persist for up to 90 days before being rotated out).

8. Security

The security of your data is important to us. We use industry-standard security measures including TLS encryption for data in transit, encrypted storage at rest, role-based access controls, and automatic security patch deployment. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

Our Service is intended for business use by adult hotel employees. We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us and we will delete it.

10. International Data Transfers

Your information may be transferred to — and maintained on — computers located outside of your country, state, or other governmental jurisdiction where data protection laws may differ. Our primary data storage is in the United States (Supabase us-east-1). By using the Service you consent to this transfer.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top. For material changes that affect your rights, we will notify you by email or through an in-app notice at least 30 days before the changes take effect.

12. Contact Us

If you have any questions about this Privacy Policy, you can contact us at:

Email: [email protected]
Website: https://savok.ai

⚠️ Pre-launch draft This privacy policy is an early-stage draft intended to satisfy App Store and Google Play submission requirements. Before SAVOK accepts paying customers or handles personal data at scale, this policy will be reviewed and updated by qualified legal counsel. If you have any questions or concerns about your data, please reach out directly.