Privacy Policy

Sannvit, Inc. · Effective August 12, 2026 · Version 1.1

Sannvit, Inc. ("Sannvit," "we," "us") builds evidence infrastructure for AI systems. This policy describes what we collect through our website (sannvit.com) and our communications with you, what we do with it, and what we deliberately do not do. It is short because we collect little.

1. The most important fact: our product runs in your infrastructure, not ours

Sannvit's product is self-hosted. Customers deploy it inside their own environments; the records it seals, the AI activity it observes, and the content it stores never pass through Sannvit's systems and are not accessible to us, unless a customer expressly grants access for support — and any such access is governed by that customer's written agreement with us, not by this policy. This policy covers our website and communications only.

2. What we collect

Information you give us. Name, email, company, and message contents when you contact us, request a demo, or sign up for updates.
Technical basics. Standard server logs: IP address, browser type, pages visited, timestamps. We use these to operate and secure the site.
Cookies. Only as described in our Cookie Policy — essential cookies, and, with your consent, privacy-respecting analytics; nothing that follows you across the web.

We do not collect payment information through the website. We do not buy data about you from anyone.

3. What we do with it

We use the information above to respond to you, provide what you asked for, operate and secure the website, and meet legal obligations. That is the whole list.

4. What we do not do

We do not sell or rent personal information, and we have not done so.
We do not run third-party advertising trackers on our site.
We do not use your information to train AI models, and we do not permit our AI tools to do so: under our AI Usage Policy, personal information is handled only through channels contractually barred from training on it.

We share personal information only with service providers who help us run the website and our communications (hosting, email delivery) under contracts limiting their use of it; when the law compels us; to protect our rights or others' safety; or as part of a corporate transaction (in which case this policy's promises follow the data).

6. Retention and security

We keep personal information only as long as needed for the purposes above or as law requires, then delete it. We protect it with measures appropriate to its sensitivity; no method is perfect, and we will tell you promptly if a breach affects you.

7. Your choices and rights

Email us at brad@sannvit.com to access, correct, or delete your personal information, or to unsubscribe from communications (every marketing email also has an unsubscribe link). We honor these requests for everyone, regardless of where you live — we do not make you cite a statute. If a state privacy law (such as the Utah Consumer Privacy Act) grants you specific rights, those rights are yours and this policy is not a waiver of them; we note that Sannvit is currently below the thresholds at which most such statutes apply.

8. Children

Our website and services are for businesses and are not directed to children under 13. We do not knowingly collect children's information; if you believe we have, contact us and we will delete it.

9. Where processing happens

We are a United States company; information is processed in the United States. If you are outside the United States, using our website or contacting us means your information travels to the United States — the sections below explain the safeguards that apply and the additional rights you have where you live.

10. Additional information for visitors in the EEA and UK

If you are in the European Economic Area or the United Kingdom, this section supplements the rest of this policy. Nothing here narrows anything promised above.

Controller. Sannvit, Inc., 176 N 170 E, Orem, UT 84057, United States, is the controller of personal data collected through this website. Contact: brad@sannvit.com.

Legal bases. We told you in Section 3 what we do with your information; here is the legal basis for each:

Responding to your contact or demo request, and providing what you asked for — steps taken at your request prior to entering a contract (Art. 6(1)(b) GDPR) and our legitimate interest in responding to people who write to us (Art. 6(1)(f)).
Operating and securing the website (server logs) — our legitimate interest in keeping the site running and safe (Art. 6(1)(f)).
Sending you updates you signed up for — your consent (Art. 6(1)(a)), withdrawable at any time.
Meeting legal obligations — Art. 6(1)(c).

That is the whole list, because Section 3 is the whole list.

Your rights. You have the right to access your personal data, correct it, have it erased, restrict its processing, receive it in a portable format, object to processing based on our legitimate interests, and withdraw consent at any time without affecting what was done before you withdrew. Email us and we will act on it — as Section 7 says, we honor these requests for everyone, so exercising them requires no citation and no form.

Transfers to the United States. Your data is processed in the United States. We rely on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Agreement as the safeguard for these transfers.

Complaints. You can complain to your local data protection supervisory authority (in the UK, the Information Commissioner's Office). We would appreciate the chance to resolve it directly first, but that is your right, not a precondition.

11. Additional information for Qatar

If you are in Qatar, this section supplements the rest of this policy. Our approach there is the same as everywhere: we collect little, and we ask before we market.

We send marketing communications only with your prior explicit consent, every message identifies us as the sender, and every message carries a working opt-out. Withdrawing consent is as easy as giving it.
You have the rights described in Sections 7 and 10 — access, correction, and erasure among them — and we honor them without requiring you to cite Qatari law.
We do not process the categories Qatari law treats as data of special nature (such as health data or data about children) through this website.
Your data is processed in the United States, as Section 9 explains, protected by the measures described in this policy.

12. Changes

We will post changes here with a new effective date, and for material changes we will say plainly what changed. We will not quietly weaken this policy.

13. Contact

Sannvit, Inc., 176 N 170 E, Orem, UT 84057 · brad@sannvit.com