Privacy & data handling

• Data Processing Agreement. We offer a standard DPA with EU Standard Contractual Clauses and the UK IDTA. Request it at security@besavvier.com.
• No training on customer data. We do not use customer content to train AI models, and our AI sub-processors are contractually bound to no-training terms.
• Data location. Customer data is processed primarily in the United States. See our sub-processor list for details.
• Data-subject requests. We support access, export, and erasure requests. Erasure is executed at the backend with a soft-delete followed by an audited hard-delete.
• Retention. Data is retained for the life of the account and deleted per our retention schedule after termination.

For the full policy, see our Privacy Policy.