Privacy Policy

Soira Labs Ltd. ('we', 'our', 'us') is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your information when you use Sovereign OS.

We collect information you provide directly:

• • Contact information (name, email, phone number)
• • Organisation details
• • Calendar and email data (with your explicit permission)
• • Voice recordings (for voice cloning, with explicit consent)
• • Communication history via WhatsApp
• • Documents and files you share with the system

We use your information solely to:

• • Provide and improve Sovereign OS services
• • Execute tasks on your behalf (calls, emails, scheduling)
• • Personalize the system to your preferences
• • Communicate with you about your service
• • Comply with legal obligations

Your data is stored on private, isolated infrastructure. We employ:

• • End-to-end encryption for all communications
• • Isolated database instances (your data is never co-mingled)
• • Regular security audits
• • Access controls limited to essential personnel only

Unlike typical SaaS products, Sovereign OS operates on private infrastructure. Your data never transits through shared public clusters. We do not use your data to train AI models.

We integrate with services you authorize:

• • Google Calendar & Gmail (with OAuth consent)
• • WhatsApp Business API
• • Voice synthesis providers (for voice cloning)

Each integration only accesses data necessary for its function.

We retain your data for the duration of your subscription plus 30 days. Upon termination, you may request:

• • Full data export
• • Complete data deletion

Requests are fulfilled within 14 business days.

Under UK GDPR, you have the right to:

• • Access your personal data
• • Correct inaccurate data
• • Request deletion of your data
• • Object to processing
• • Data portability
• • Withdraw consent at any time

Our website uses minimal, essential cookies for functionality. We do not use tracking or advertising cookies.

Sovereign OS is not intended for individuals under 18. We do not knowingly collect data from minors.

We may update this policy periodically. Material changes will be communicated via email at least 30 days before taking effect.