Privacy Policy

Saava is a product of Skytek Solutions, LLC, a Florida limited-liability company with its principal office at 5850 Coral Ridge Dr., Suite 207, Coral Springs, Florida 33076. In this policy, “Saava”, “we”,“us”, and “our” refer to Skytek Solutions, LLC.

For privacy questions, contact us at [email protected] or by post at the address above.

The information we collect falls into four groups.

2.1 Information you give us directly

• Your name, business name, work email, and phone number when you request a demo or book a build slot.
• The URL of the website you ask us to demonstrate on, and any content or materials you send us.
• Payment details when you book a build slot — processed by our payment processor, Stripe. We never see or store your full card number.
• Anything you type or say to our website assistant “Ava” during a demo or on a live deployment.
• Correspondence you send to any Saava mailbox (hello@, sales@, privacy@, support@).

2.2 Information we collect automatically

• Usage information such as pages viewed, buttons clicked, referring URL, session timestamps.
• Device information such as browser type, operating system, IP address (truncated for analytics), device model.
• Voice audio streamed to our voice agent during a conversation. Audio is transient and not stored beyond the length of the session unless the customer explicitly enables recording.

2.3 Information from your website (customer sites only)

When you engage Saava as a paying customer, we crawl your website’s publicly accessible pagesso Ava can answer visitor questions grounded in your content. We do not crawl authenticated areas, customer portals, or pages excluded by your robots.txt. We store extracted text and generated embeddings; we do not republish your content elsewhere.

2.4 Information from third parties

Payment status (paid/refunded) and receipt metadata from Stripe. Deliverability status from Microsoft (our email provider). We do not buy data from data brokers.

We use the information we collect to:

• Deliver, operate, and improve Saava — including provisioning your demo, running Ava on your site, and answering your visitors’ questions grounded in your content.
• Send transactional messages: demo confirmations, booking receipts, kickoff scheduling, service updates, security alerts.
• Provide customer support and respond to your requests.
• Diagnose technical problems, prevent fraud, and enforce our Terms of Service.
• Meet legal, tax, accounting, and audit obligations.
• With your explicit opt-in only, send you occasional product updates or marketing communications you can unsubscribe from at any time.

What we do NOT do: we do not sell your personal information. We do not use your conversation content or your website content to train third-party AI models. We do not build advertising profiles about you.

To deliver Saava we rely on a small set of trusted service providers. Each is bound by data-protection commitments and is authorized to process your information only for the purpose we specify.

• Microsoft Azure — hosting, storage, telemetry (United States regions).
• Stripe, Inc. — payment processing. Stripe’s privacy policy governs card data handling.
• ElevenLabs, Inc. — conversational voice-agent runtime. Audio streams are processed in real time.
• HeyGen, Inc. — photorealistic avatar streaming (video).
• OpenAI, LLC and Anthropic, PBC — large-language-model providers used to reason over your site content and shape Ava’s responses. Data submitted for these calls is processed under each provider’s enterprise / API terms and is not used to train their public models.
• Microsoft Graph — transactional email delivery.
• Wistia, Inc. — hosted marketing video on the Saava homepage.
• Application Insights — error monitoring and performance telemetry.

• Demo sessions (industry-showcase demos and per-URL demos): automatically expire and are torn down within 90 minutes of creation.
• Lead capture records: retained for up to 24 months so we and our partners can respond to your inquiry, then deleted or anonymized.
• Booking / payment records: retained for 7 years to meet tax and accounting requirements.
• Live-deployment content (paying customers): retained for the term of your engagement plus 30 days for backup rotation, then deleted on written request.
• Marketing consent records: retained until you withdraw consent, plus a short audit tail.
• Voice audio: streamed and discarded — not recorded unless you explicitly enable recording.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Delete your personal information, subject to legal retention obligations.
• Object to or restrict certain processing.
• Withdraw marketing consent at any time via the unsubscribe link on any marketing email.
• Data portability — receive your data in a machine-readable format.
• Lodge a complaint with your local data-protection authority.

To exercise any right, email [email protected] with the phrase “Privacy request” in the subject line. We will respond within 30 days. We may ask you to verify your identity before acting.

California residents: the CCPA and CPRA give you specific rights regarding your personal information, including the right to know, delete, correct, and opt out of “sale” or “share.” We do not sell or share personal information as those terms are defined by California law.

EEA / UK residents: we process your data under the GDPR/UK-GDPR lawful bases of consent, contract, legitimate interests, and compliance with legal obligations.

We use a small number of first-party cookies and local-storage keys strictly necessary to keep you signed in during a demo, remember your preferences, and prevent abuse. We do not use advertising or cross-site tracking cookies.

Wistia sets its own cookies for video-analytics purposes on the marketing homepage. You can decline these via your browser controls without affecting Saava’s function.

We implement appropriate technical and organizational safeguards designed to protect your data from unauthorized access, alteration, or disclosure. Measures include TLS for data in transit, encryption at rest for stored data, principle-of-least-privilege access controls, per-tenant database row-level security, secret rotation, and continuous logging & alerting through Microsoft Application Insights.

No system is perfectly secure. If we become aware of a security incident affecting your personal information we will notify you and the relevant authorities as required by applicable law.

Our services are hosted in the United States. If you access Saava from outside the United States, you consent to your information being transferred to and processed in the United States, which may have data-protection laws that differ from those in your jurisdiction.

Saava is not directed to individuals under the age of 16 and we do not knowingly collect personal information from children. If you believe we may have collected information from a child, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will update the Effective date at the top of this page. If the change is material, we will notify you by email or through the Saava service before the change takes effect.

Questions, requests, or complaints about this policy or our privacy practices: