Privacy Policy

Effective Date: March 24, 2026

This Privacy Policy explains how sovkit.com ("we," "us," or "our") collects, uses, and protects your information when you use our website, browser extensions, and web applications (collectively, the "Services"). By using our Services, you agree to the practices described in this policy. This Privacy Policy is incorporated into and forms part of our Terms of Service.

1. The "No-Account" & BYOS Principle

Our Services are designed with a privacy-first, "Bring Your Own Service" (BYOS) architecture.

No User Accounts: We do not require you to create a traditional user account or password.

Local Credentials & Data: Any cloud storage credentials you provide (e.g., OAuth tokens or access keys for Google Drive, Amazon S3, Dropbox, or OneDrive) and the files or documents you process through them are handled locally on your device or transmitted directly to your chosen storage provider. We do not collect, intercept, or store your cloud storage credentials or the content of your files.

2. Information We Collect

Because we do not use accounts, the data we collect is strictly limited to what is necessary for licensing and basic operations:

Purchase Information: When you buy a license, we collect the email address you provide during checkout. We use this to send your License Key and for customer support. We do not collect or store your payment card details; all financial data is handled by our Merchant of Record, Creem.io.

License Validation Data: When you activate or use your License Key, our servers or edge network may receive basic technical data — such as your IP address, browser type, or a hashed device identifier — strictly to prevent license abuse and unauthorized sharing.

Customer Support Data: If you contact us for support or a refund, we will collect your email address and any information you voluntarily provide in your message.

3. How We Use Your Information

We use the minimal data we collect solely to:

• Issue, validate, and manage your License Key.
• Process your 14-day refund requests.
• Respond to your customer service inquiries.
• Prevent fraud, unauthorized sharing of licenses, and abuse of our Services.

4. Data Retention

We retain your data only for as long as necessary:

• Purchase email and License record: Retained for the duration of your active License and for up to 3 years after your last interaction (e.g., last support request or refund request), to comply with applicable commercial record-keeping requirements.
• Support correspondence: Retained for up to 2 years after the conversation is closed.
• License validation logs (IP address, hashed identifiers): Retained for up to 12 months and then automatically purged.

5. Third-Party Services

We rely on trusted global service providers to operate our business. These providers act as data processors and are bound by their own privacy policies and data processing agreements:

Payment Processing (Merchant of Record): All payments are handled entirely by Creem.io, our authorized Merchant of Record. They process your financial data securely under their own privacy policy. We only receive confirmation of your purchase and your email address.

Infrastructure & Hosting: Our web assets and license validation APIs are routed through global edge networks (such as Cloudflare) to ensure fast, secure, and reliable access worldwide. Cloudflare acts as a data processor under a Data Processing Addendum compliant with applicable data protection law, including GDPR Standard Contractual Clauses (SCCs).

Your Selected Cloud Storage Providers: When you use the BYOS features, your files and credentials are transmitted directly from your device to your chosen provider (e.g., Google Drive, Amazon S3, Dropbox, OneDrive). You are subject to their respective privacy policies. We do not have access to this data.

6. Cookies and Tracking Technologies

We use a minimal number of cookies strictly for essential functions:

Essential Cookies: Necessary for the website to function, secure the checkout process, and maintain your session state.

Analytics: We may use privacy-friendly, cookie-free analytics tools (such as Cloudflare Web Analytics or Plausible) to understand general website traffic patterns. These tools do not use tracking pixels, do not fingerprint individual users, and do not share your data with advertisers.

You can disable non-essential cookies through your browser settings, though doing so may affect the checkout experience.

7. International Data Transfers

Our Services are available globally. The limited personal data we collect (your purchase email and license status) may be stored or processed on servers located outside your home country via our infrastructure providers (primarily Cloudflare and Creem.io). Where required by applicable law (including GDPR), such transfers are carried out under appropriate safeguards, including the European Commission's Standard Contractual Clauses (SCCs) or equivalent mechanisms as implemented by our data processors.

8. Your Data Rights

Depending on your location (e.g., under the GDPR or CCPA), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Request deletion of your personal data.
• Object to or restrict certain processing activities.
• Data portability where technically applicable.

Important note regarding deletion requests: Your purchase email is necessary to maintain your License record and fulfil our contractual obligations to you. Under GDPR Article 17(3)(b), we are entitled to retain this data for as long as your License remains active and for the period required by applicable record-keeping law. If you request deletion of your data while your License is active, we will delete all non-essential data and anonymize your License record; however, the License Key itself will be permanently deactivated as a result. No refund will be issued where the standard 14-day refund window has already expired.

To exercise any of your rights, please contact us at the address below.

9. Children's Privacy

Our Services are intended for users who are at least 18 years of age. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will delete it promptly.

10. Data Security

We implement industry-standard security measures — including HTTPS encryption for all network traffic — to protect your email address and license data. However, no internet transmission is entirely secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" at the top of this page and post a notice on our website. Your continued use of the Services after such notice constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at: support@sovkit.com

This Privacy Policy was last updated on March 24, 2026.