Privacy Policy

Last Updated: 25th August 2026

Effective Date: 25th August 2026

Introduction

In this Privacy Policy, "SAVA," "we," "our," and "us" refer to SAVA Global Inc and its affiliates. Section 2 states which entity is responsible for your data.

SAVA is committed to protecting your privacy and handling your personal data responsibly.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you:

Visit our website (sava.global)
Use our platforms, including Xpress, OJA, Appstar, and SAVAI
Interact with us through email, forms, or other communications

This policy tells you what we do with personal data. Where we rely on your consent, we ask for it separately and you can withdraw it at any time.

In this Privacy Policy, "SAVA," "we," "our," and "us" refer to SAVA Global Inc and its affiliates. Section 2 states which entity is responsible for your data.

SAVA is committed to protecting your privacy and handling your personal data responsibly.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you:

Visit our website (sava.global)
Use our platforms, including Xpress, OJA, Appstar, and SAVAI
Interact with us through email, forms, or other communications

This policy tells you what we do with personal data. Where we rely on your consent, we ask for it separately and you can withdraw it at any time.

Who Is Responsible For Your Data

Data Controller:

SAVA Global Inc, a company incorporated in Delaware, United States, is the data controller for this website and for personal data collected through it.

Where personal data is held under a signed Platform Activation Agreement or Service Agreement, the SAVA entity named in that agreement is the controller or processor for it, and Section 8 applies.

Email: legal@sava.global

SAVA Global Inc, a company incorporated in Delaware, United States, is the data controller for this website and for personal data collected through it.

Where personal data is held under a signed Platform Activation Agreement or Service Agreement, the SAVA entity named in that agreement is the controller or processor for it, and Section 8 applies.

Email: legal@sava.global

What Personal Data We Collect

We collect different types of personal data depending on how you interact with us:

3.1 Website Visitors

When you visit our website, we may collect:

Technical data: IP address, browser type, device information, operating system
Usage data: Pages visited, time spent on pages, navigation patterns, referral sources
Cookie & Pixel data: See Section 10 for details

When you visit our website, we may collect:

Technical data: IP address, browser type, device information, operating system
Usage data: Pages visited, time spent on pages, navigation patterns, referral sources
Cookie & Pixel data: See Section 10 for details

3.2 Contact Form & Inquiry Submissions

When you contact us or submit forms, we collect:

Contact information: Name, email address, phone number, company name
Business information: Industry, company size, business stage, specific needs
Message content: Any information you provide in your inquiry

When you contact us or submit forms, we collect:

Contact information: Name, email address, phone number, company name
Business information: Industry, company size, business stage, specific needs
Message content: Any information you provide in your inquiry

3.3 SAVA Lab Clients & Prospects

When you engage with SAVA Lab products (Xpress, OJA, Appstar, or SAVAI), we may collect:

Business information: Company details, revenue data, operational metrics, business objectives
Contact details: Names and contact information of key stakeholders
Performance data: Campaign metrics, conversion tracking data, and analytics (if you grant access)
Contract information: Agreement terms, billing details, and the scope of the engagement
Platform access credentials: Ad platform accounts, app store developer accounts, or other third-party platform credentials provided for product delivery
App listing data: App metadata, keyword rankings, and store performance data (Appstar clients)

When you engage with SAVA Lab products (Xpress, OJA, Appstar, or SAVAI), we may collect:

Business information: Company details, revenue data, operational metrics, business objectives
Contact details: Names and contact information of key stakeholders
Performance data: Campaign metrics, conversion tracking data, and analytics (if you grant access)
Contract information: Agreement terms, billing details, and the scope of the engagement
Platform access credentials: Ad platform accounts, app store developer accounts, or other third-party platform credentials provided for product delivery
App listing data: App metadata, keyword rankings, and store performance data (Appstar clients)

3.4 SAVAI

When SAVA Lab audits your business through SAVAI, we may collect:

Business data: Information you share about your business, including operational details, growth challenges, and objectives
Contact information: Name, email address, and company name
Audit data: Findings, analysis, and recommendations generated during the audit

SAVAI audit data is reviewed by SAVA to deliver relevant findings. We ask for your consent before collecting it, and you can withdraw that consent at any time.

When SAVA Lab audits your business through SAVAI, we may collect:

Business data: Information you share about your business, including operational details, growth challenges, and objectives
Contact information: Name, email address, and company name
Audit data: Findings, analysis, and recommendations generated during the audit

SAVAI audit data is reviewed by SAVA to deliver relevant findings. We ask for your consent before collecting it, and you can withdraw that consent at any time.

3.5 Businesses We Contact Directly

Where we identify a business as a fit for our platforms, we may collect:

Business information: Company name, industry, size, and publicly available information about what the business does
Contact Details: Name, role, and business contact information of a decision maker

This information is collected from public sources rather than from you. Section 4 states which sources. You can ask us to stop contacting you and to delete this information at any time.

Where we identify a business as a fit for our platforms, we may collect:

Business information: Company name, industry, size, and publicly available information about what the business does
Contact Details: Name, role, and business contact information of a decision maker

This information is collected from public sources rather than from you. Section 4 states which sources. You can ask us to stop contacting you and to delete this information at any time.

How We Collect Your Data

We collect data through:

Direct interactions: Forms you submit, emails you send, platforms you request
Automated technologies: Cookies and pixels (see Section 10)
Third parties: Payment processors, advertising platforms, and other service providers we work with
Public sources: Company websites, public business registries, public professional profiles, industry directories, and published company information

We collect data through:

Direct interactions: Forms you submit, emails you send, platforms you request
Automated technologies: Cookies and pixels (see Section 10)
Third parties: Payment processors, advertising platforms, and other service providers we work with
Public sources: Company websites, public business registries, public professional profiles, industry directories, and published company information

Legal Basis for Processing (GDPR & NDPA)

We process your personal data based on the following legal grounds:

5.1 Consent

Newsletter subscriptions
SAVAI audit data collection
Advertising and analytics cookies and pixels

5.2. Contractual Necessity

Delivering SAVA Lab platforms you have contracted for
Providing customer support

Delivering SAVA Lab platforms you have contracted for
Providing customer support

5.3 Legitimate Interests

Business development and marketing communications to prospects
Fraud prevention and security
Internal business operations
Producing anonymised examples for our own content.

5.4 Legal Obligation

Tax and accounting requirements
Compliance with applicable laws and regulations
Responding to lawful requests from authorities

How We Use Your Data

We use your personal data for the following purposes:

6.1 Website and Analytics

Understand how visitors use our website, where you consent to analytics cookies
Improve website performance
Monitor website security

6.2 Platform Delivery

Deliver SAVA Lab platforms including Xpress, OJA, Appstar, and SAVAI
Deliver active, transacting customers to client businesses (Xpress and OJA)
Work on app store listings and rankings for client businesses (Appstar)
Audit businesses and deliver findings and recommendations (SAVAI)
Communicate about platforms you have requested
Provide customer support

6.3 Business Operations

Process payments and manage billing
Maintain accurate business records
Comply with legal and regulatory obligations

6.4 Marketing and Communications

Respond to inquiries and provide information about our platforms and products
Send the newsletter to people who have subscribed to it
Contact businesses we identify as a fit for our platforms, on the basis of legitimate interest
Use anonymised examples of the questions and problems businesses bring to us, in our own content, where nothing identifies the business

Who We Share Your Data With

We do not sell your personal data. We may share your data with:

7.1 Service Providers

We work with trusted third-party service providers who help us operate our website, deliver our platforms, process payments, and manage business communications. These providers only receive the data necessary to perform their specific function on our behalf and are contractually bound by confidentiality and data protection obligations. We do not share more data than is required for each provider to perform their role.

7.2 Advertising and Analytics Platforms

We work inside third-party advertising and analytics platforms, including Meta, Google, Snapchat, and app store and mobile measurement providers. Campaign data, conversion data, and audience data are processed on those platforms.

Where we advertise SAVA's own platforms, we decide how that data is used and this Privacy Policy governs it. Where we run advertising for a client business, that data is processed under the client business's instructions and Section 8 applies.

In both cases the platform's own terms and privacy policy also apply to the data held on it. We do not sell personal data to any of these platforms.

7.3 Legal & Compliance

We may disclose data when required by law or to:

Comply with legal obligations, court orders, or government requests
Enforce our terms and agreements
Protect our rights, property, or safety, or that of others
Prevent fraud or security threats

We may disclose data when required by law or to:

Comply with legal obligations, court orders, or government requests
Enforce our terms and agreements
Protect our rights, property, or safety, or that of others
Prevent fraud or security threats

7.4 Business Transfers

If SAVA is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

Data We Process On Behalf Of Client Businesses

Delivering SAVA Lab platforms can involve personal data belonging to a client business's own customers, including advertising audience data, conversion data, and app store performance data.

Where we process that data, we act as a data processor and the client business is the data controller. The client business decides why and how that data is processed, and the client business's own privacy policy governs it.

Our obligations in that role are set out in the Platform Activation Agreement or Service Agreement covering the engagement.

If you are a customer of a business we work with and you want to exercise your data protection rights, contact that business directly. Where you contact us instead, we will refer your request to the client business.

Delivering SAVA Lab platforms can involve personal data belonging to a client business's own customers, including advertising audience data, conversion data, and app store performance data.

Our obligations in that role are set out in the Platform Activation Agreement or Service Agreement covering the engagement.

International Data Transfers

Your personal data may be transferred to and processed in countries outside your country of residence. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

Standard Contractual Clauses (SCCs) approved by relevant authorities
Adequacy decisions where applicable
Other legally recognised transfer mechanisms

Your personal data may be transferred to and processed in countries outside your country of residence. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

Standard Contractual Clauses (SCCs) approved by relevant authorities
Adequacy decisions where applicable
Other legally recognised transfer mechanisms

Cookies & Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website.

10.2 Cookies And Pixels We Use

Essential Cookies: Required for the site to work and to keep it secure. These cover session management and your preferences, and they are always active.

Advertising and analytics cookies and pixels: We use tracking pixels from the advertising platforms named in Section 7.2. These record which pages you visit and which actions you take on this website, and they let those platforms measure our advertising and show you our advertising elsewhere. They are set only where you consent to them.

Data collected by a pixel is held by the platform that sets it and is also governed by that platform's own privacy policy.

You can withdraw consent at any time through the cookie settings on this website, and you can manage or block cookies through your browser settings. Blocking essential cookies may stop parts of the site working.

Essential Cookies: Required for the site to work and to keep it secure. These cover session management and your preferences, and they are always active.

Data collected by a pixel is held by the platform that sets it and is also governed by that platform's own privacy policy.

10..3 Do Not Track

Our website does not respond to Do Not Track signals.

How Long We Retain Your Data

We retain personal data only as long as necessary for the purposes outlined in this policy. The periods below apply to data we hold as the data controller:

Website analytics data: Up to 24 months
Contact inquiries: Up to 3 years from last contact
SAVA Lab client data: Duration of engagement plus 7 years (for legal/tax purposes)
SAVAI audit data: Up to 12 months from the date of the audit
Business contact data from public sources: Up to 2 years from collection, or until you ask us to stop contacting you

Data we hold as a processor on behalf of a client business is retained for as long as that engagement requires, and is dealt with at the end of it as set out in Section 8. The periods above do not extend it.

When data is no longer needed, we securely delete or anonymise it.

We retain personal data only as long as necessary for the purposes outlined in this policy. The periods below apply to data we hold as the data controller:

Website analytics data: Up to 24 months
Contact inquiries: Up to 3 years from last contact
SAVA Lab client data: Duration of engagement plus 7 years (for legal/tax purposes)
SAVAI audit data: Up to 12 months from the date of the audit
Business contact data from public sources: Up to 2 years from collection, or until you ask us to stop contacting you

When data is no longer needed, we securely delete or anonymise it.

Your Data Protection Rights

Under the GDPR and the NDPA, you have the following rights:

Right to access: Request copies of your personal data
Right to rectification: Request correction of inaccurate data
Right to erasure: Request deletion of your data (subject to legal obligations)
Right to restrict processing: Request limitation on how we use your data
Right to data portability: Receive your data in a structured, machine-readable format
Right to object: Object to processing based on legitimate interests
Right to withdraw consent: Where processing is based on consent
Right to lodge a complaint: File a complaint with your local data protection authority

12.1 How to Exercise Your Rights

To exercise any of these rights, contact us at:

Email: legal@sava.global

Subject Line: Data Subject Rights Request

We will respond to valid requests within 30 days.

To exercise any of these rights, contact us at:

Email: legal@sava.global

Subject Line: Data Subject Rights Request

We will respond to valid requests within 30 days.

Data Security

We implement appropriate technical and organisational measures to protect your data, including:

Encryption of data in transit and at rest (where appropriate)
Access controls and authentication requirements
Regular security assessments
Secure payment processing through PCI-DSS compliant providers
Training on data protection for everyone with access to personal data

However, no system is completely secure. We cannot guarantee absolute security of data transmitted over the internet.

We implement appropriate technical and organisational measures to protect your data, including:

Encryption of data in transit and at rest (where appropriate)
Access controls and authentication requirements
Regular security assessments
Secure payment processing through PCI-DSS compliant providers
Training on data protection for everyone with access to personal data

However, no system is completely secure. We cannot guarantee absolute security of data transmitted over the internet.

Children's Privacy

Our platforms are not directed to individuals under 18 years of age.

We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately at legal@sava.global.

Our platforms are not directed to individuals under 18 years of age.

We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately at legal@sava.global.