Privacy Policy

AlphaWhiskey Software LLC (“we,” “us,” or “our”) operates Savant, a managed AI digital assistant service. This Privacy Policy explains how we collect, use, store, and protect information when you visit our website, use our services, or interact with us.

By using Savant, you agree to the practices described in this policy. If you do not agree, please do not use our services.

1. Information We Collect

1.1 Information You Provide to Us

• Contact form data: Name, email address, company name, area of interest, and message content when you submit our contact form.
• Account information: Name, email, company, and billing details when you sign up for the Savant service.
• Onboarding preferences: Communication style, scheduling preferences, tool integrations, and workflow configurations you provide during setup.

1.2 Information Processed Through the Service

• Messaging data: Messages you send to and receive from your Savant assistant via WhatsApp, iMessage, Telegram, or Discord. This data is processed on your dedicated virtual machine.
• Session and context data: Conversation history, preferences learned over time, and task context maintained by the AI agent on your dedicated VM.
• Integration data: Calendar events, email content, documents, and other data accessed through integrations you configure. This data is processed on your dedicated VM and is not shared across customers.

1.3 Information Collected Automatically

• Website analytics: Page views, referral sources, browser type, device type, and general geographic region. We use privacy-respecting analytics that do not track individual users across sites.
• Server logs: IP addresses, request timestamps, and error logs for operational and security purposes. These are retained for a limited period.

2. How We Use Your Information

• To provide, operate, and maintain the Savant service on your dedicated infrastructure.
• To respond to your inquiries and communicate with you about your account.
• To process billing and manage your subscription.
• To improve and develop our services, including security hardening and feature development.
• To monitor and maintain the security and availability of your dedicated VM.
• To comply with legal obligations and enforce our terms.

3. Data Isolation & Architecture

Savant is architected for privacy by design. Each customer receives a dedicated, security-hardened virtual machine. Your data is isolated as follows:

• Dedicated VM: Your Savant instance runs on its own virtual machine. There are no shared databases, application instances, or storage volumes between customers.
• Zero-trust networking: Your VM is accessible only through Tailscale's identity-based, encrypted mesh network. No open ports, no traditional VPN.
• Encryption: Data is encrypted at rest on the VM and encrypted in transit between all components.
• Access controls: Our team's access to your VM is strictly limited to infrastructure maintenance and support, and all access is logged and auditable.

4. Sub-Processors

We use the following third-party service providers to deliver Savant. Each sub-processor is selected for its security posture and data handling practices.

For enterprise customers deploying to their own cloud (AWS, GCP, Azure) or on-premises, the hosting sub-processor may differ based on your deployment choice.

5. AI & Model Training

Your data is never used to train AI models. Savant uses Anthropic's Claude API, which operates under a zero-retention policy for API usage. Your messages are processed in real time and are not stored by Anthropic, nor are they used to train, fine-tune, or improve any AI models. Your conversation history is maintained only on your dedicated VM for session continuity.

6. Data Retention

• Website contact form data: Retained for as long as necessary to respond to your inquiry and for our legitimate business interests.
• Service data (on your VM): Retained for the duration of your subscription. You can request deletion of specific data at any time.
• Upon cancellation: We assist you in exporting any data you need. Your dedicated VM is then securely wiped and decommissioned. All customer data is permanently deleted within 30 days of account termination.
• Server logs: Retained for up to 90 days for operational and security purposes, then automatically deleted.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate personal information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Portability: Request export of your data in a machine-readable format.
• Opt-out of sale: We do not sell your personal information. This has always been and will remain our policy.

To exercise any of these rights, contact us at privacy@savant.run. We will respond within 30 days.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, and disclose.
• The right to request deletion of your personal information.
• The right to opt-out of the sale of your personal information. We do not sell personal information.
• The right to non-discrimination for exercising your privacy rights.

9. Security Measures

We implement industry-standard security measures to protect your information, including: security-hardened virtual machines with minimal attack surfaces, encryption at rest and in transit, zero-trust networking via Tailscale, regular security audits and automated vulnerability scanning, strict access controls with audit logging, and automatic security patch deployment. While no system is 100% secure, we are committed to maintaining the highest practical level of security for your data.

10. Cookies

Our website uses minimal cookies necessary for site functionality. We do not use tracking cookies or third-party advertising cookies. If we implement analytics, we use privacy-respecting solutions that do not track users across websites.

11. Children's Privacy

Savant is a business service and is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to active subscribers and posted on this page with an updated “Last updated” date. Your continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us: