Privacy Policy.

• Account information. Email address and password (hashed) when you create an account.
• Saved content. URLs you share to the app, along with metadata (titles, thumbnails, creator names) fetched from those URLs.
• AI-generated tags. Tags generated by AI based on your content metadata. We send metadata — not your personal data — to OpenAI for tag generation.
• AI content analysis (Analyze, optional). If you use the Analyze feature on a saved item, we fetch the underlying video/media (via SocialKit and/or Supadata) and send it, or its transcript, to Google's Gemini for analysis. This applies only to items you specifically choose to analyze — not to every saved item.
• Browser extension. If you use the Savio browser extension, we receive the address and title of a page or link only when you choose to save it (the toolbar button, keyboard shortcut, or right-click menu). The extension does not read or transmit your browsing history, page contents, or any tab you do not save. It stores your Savio sign-in session in your browser's extension storage. Data from the extension is used only to provide the save feature, is not sold, is not used for advertising, and is not shared with third parties other than the service providers listed below.
• App preferences. Notification settings, display preferences.
• Device tokens. Push notification tokens for delivering notifications.
• Usage analytics. When you use our app or website we collect basic, mostly aggregated analytics — pages and screens viewed, interactions, approximate location (derived from IP), and device/browser type — to understand usage and improve Savio. On our website this is collected using first-party cookies (see "Cookies & analytics" below).

• We never see your social media passwords. We access a social account only if you choose to connect it, and only for the purpose described in the Instagram section below.
• We do not scrape or download content — we only store URLs and publicly available metadata and, if you connect Instagram, the link and caption of posts you send us.
• We do not sell your data to third parties.
• We do not track you across other websites or build advertising profiles, and we never share your data with ad networks.

We use your data only to run the features you asked for and to improve the product:

• To save and organize your bookmarked content.
• To generate AI tags for content organization.
• To send notifications you have opted into (daily digest, smart nudge).
• To enable collection sharing via share links.
• To measure and improve performance through aggregate usage analytics.

Our website uses PostHog, a product-analytics service, to understand how visitors use the site. PostHog sets first-party cookies to recognize sessions and records events such as page views and clicks. We use this only to improve Savio — never for advertising. Nothing loads until you choose Accept on the cookie banner shown on your first visit; choosing Decline (or later revoking consent by clearing your browser's site data for getsavio.app) disables it entirely, with no effect on the rest of the site. We separately honor the "Do Not Track" browser signal even after consent.

• Supabase. Cloud database and authentication. Data stored in Supabase's secure infrastructure with row-level security.
• OpenAI. AI tag generation. We send content metadata (titles, captions) — not your personal information — to generate tags.
• Google (Gemini). AI content analysis, only for an item you choose to run Analyze on — see "Data we collect" above.
• SocialKit / Supadata. Fetch the underlying video, transcript, or page content for an item you choose to run Analyze on.
• PostHog. Product analytics for our app and website. Collects usage events and sets first-party cookies; configured to honor Do Not Track.
• Meta / Instagram. Optional account connection and message delivery, only if you choose to connect Instagram.

You can optionally connect Instagram so that posts and reels you send to Savio by direct message are saved to your library automatically. This works with any Instagram account — personal, Business, or Creator. This is off until you connect it, and you can turn it off at any time.

• How connecting works. Savio's app generates a short one-time code, which you send as a direct message to Savio's own Instagram account from whichever Instagram account you use. There is no Instagram sign-in screen and no permission-approval step on your end — Savio's own Instagram account holds the permissions needed to receive direct messages (instagram_business_basic, instagram_business_manage_messages), and uses them only to match an incoming message to your Savio account and to identify posts/reels you share. We never see your Instagram password, and Savio never receives or stores a login credential or access token for your Instagram account.
• What we store. Your Instagram-scoped account ID, linked to your Savio account, so we know which library a message belongs to.
• What we read from your messages. The one-time connection code (matched, then discarded once used or expired — never retained), and the shared post or reel you send us: its link, its caption or title, and its media ID. We do not store the text of your messages, and we ignore messages that contain neither a valid code nor a shared post or reel.
• Messages from other accounts. Messages from anyone who is not a linked Savio user are discarded and never saved.
• Posts we cannot read. Instagram does not always let us read a shared post. When that happens we do not save anything, and we send you a notification saying so.
• De-duplication. We keep a record of message and media IDs we have already processed, so the same post is not saved twice.
• Disconnecting and deletion. Disconnect in Settings → Instagram and we delete the link to your Instagram account right away. Deleting your Savio account removes the connection and everything saved through it.
• Not used for advertising. Instagram data is used only to save what you send. We do not sell it, share it with ad networks, or use it to build advertising profiles.

Instagram is operated by Meta Platforms, Inc., and its handling of your data is governed by Meta's own privacy policy.

Savio is operated from India. Our service providers — Supabase, OpenAI, Google, SocialKit, Supadata, and PostHog — may process and store data on servers in the United States and other countries. By using Savio, you understand that your data may be transferred to and processed outside your country of residence, under appropriate safeguards.

Your data is stored in Supabase (PostgreSQL) with row-level security enabled. Each user can only access their own data. Passwords are hashed. All connections use HTTPS/TLS encryption.

When you share a collection, its name, description, and item metadata (titles, thumbnails, URLs) become viewable by anyone with the share link. You can deactivate share links at any time.

You can at any time:

• Access the data we hold about you.
• Correct inaccurate account information.
• Export your saved content.
• Object to or restrict certain processing, including analytics.
• Delete individual items or your entire account — deleting your account removes all associated data from our servers.

To exercise any of these rights, email us at support@rovae.in and we will respond within a reasonable period.

We keep your data for as long as your account is active. When you delete your account, we remove your associated data from our servers; backups are purged on a rolling basis. Aggregated, anonymized analytics may be retained.

Savio is not intended for children under 13, and we do not knowingly collect their data. Where local law sets a higher age of digital consent — for example, 18 under India's DPDP Act — users below that age should use Savio only with verifiable parental consent.

We may update this policy from time to time. We will notify you of significant changes via the app or email.

Email us at support@rovae.in with any privacy question and our team will respond. You can request full deletion of your data at any time, and we never sell your data to third parties.