Privacy Policy

1. Introduction

Sanva (“we,” “us,” or “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect information when you use our platform, website, and related services. We comply fully with the General Data Protection Regulation (GDPR) and applicable EU data protection laws.

2. Data We Collect

• Account data: Name, email address, password
• Billing data: Payment information processed via Stripe — we do not store card details
• Usage data: Programs accessed, sessions completed, community activity, platform interactions
• Communication data: Messages, support requests, newsletter subscriptions
• Technical data: IP address, browser type, device information, cookies

3. How We Use Your Data

• Provide and improve the Sanva platform
• Process payments and manage subscriptions
• Send service communications (account updates, booking confirmations)
• Send marketing communications (with your opt-in consent only)
• Personalise your experience and recommend relevant content
• Comply with legal obligations

Our legal bases for processing are: performance of a contract, legitimate interests, and consent where applicable.

4. Data Sharing

We never sell your data. We share data only with trusted third parties necessary to operate the platform: Stripe (payments), cloud hosting providers (EU-based), analytics tools, and email service providers. All are bound by data processing agreements and GDPR compliance requirements.

5. Data Retention

We retain your data for as long as your account is active. If you request account deletion, we will delete or anonymise your personal data within 30 days, except where retention is required for legal or financial compliance.

6. Your Rights

Under GDPR, you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion (“right to be forgotten”)
• Portability — receive your data in a portable format
• Objection — object to processing based on legitimate interests
• Restriction — request limited processing
• Withdraw consent — where processing is consent-based

Contact us at contact@sanva.app to exercise any of these rights. We will respond within 30 days.

7. Security

All data is encrypted in transit (TLS) and at rest. Access to personal data is restricted to authorised personnel only. We conduct regular security reviews and will notify affected users and relevant authorities within 72 hours of any confirmed data breach.

8. Cookies

We use cookies to improve your experience. For full details, see our Cookie Policy.

9. Children

Sanva is not intended for users under 18 years of age. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you via email or through the platform.

11. Contact

For any privacy-related questions or to exercise your rights, contact us at contact@sanva.app. You also have the right to lodge a complaint with your local data protection authority.