Privacy Policy

Last updated: June 30, 2026

This Privacy Policy explains how SavvPro (“SavvPro”, “we”, “us”) collects, uses, discloses, and protects information in connection with Business Pulse, our business-operations dashboard available at business.savv.pro(the “Service”). By using the Service you agree to this Policy.

1. Who this Policy covers

Business Pulse is a business-to-business tool used by organisations (“Customers”) and their authorised team members (“Users”). Customers control the data they enter about their own clients, contacts, finances, and documents (“Customer Data”). For Customer Data, SavvPro acts as a processor on the Customer’s behalf; for account and usage information, we act as a controller.

2. Information we collect

Account information — your name, email address, username, and a securely hashed password.
Business profile — company name, description, logo, contact details, and financial defaults you configure.
Customer Data you enter — client and contact records (which may include names, emails, phone numbers, and addresses), invoices and payments, projects, tasks, meeting notes, and uploaded documents.
Integration data — when you connect Google (see Section 4), we store OAuth tokens and the email address of the connected Google account.
Technical data — cookies required for authentication and session management, and basic logs (e.g. errors, security events).

3. How we use information

To provide, operate, and secure the Service and the features you use.
To generate documents and insights you request (see Section 5 on AI).
To send transactional and account communications, and, where you choose, to send emails and calendar invites on your behalf.
To maintain, troubleshoot, and improve the Service and prevent abuse.
To comply with legal obligations.

We do not sell your personal information or Customer Data, and we do not use it for advertising.

4. Google user data

Connecting a Google account is optional and only happens when you explicitly authorise it. When you do, we request the minimum scopes needed for the feature you enable:

Email address (userinfo.email) — to identify which Google account is connected.
Google Calendar (calendar.events, calendar.readonly) — to create, update, and delete the meeting events you schedule in Business Pulse, and to display your calendar in the app.
Gmail send-only (gmail.send) — to send emails that you compose and choose to send from your own address. This scope does not allow us to read, search, or access your inbox or existing messages.
Google Drive read-only (drive.readonly) — to let you pick and import specific files you select; we do not browse or modify your Drive.

Limited Use disclosure. Business Pulse’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google user data to provide and improve the user-facing features described above. We do not transfer or sell this data for advertising, and we do not allow humans to read it except (a) with your explicit consent, (b) as necessary for security or to comply with applicable law, or (c) where the data has been aggregated and anonymised.

You can disconnect Google at any time from the Integrations page, or revoke access via your Google Account permissions. Revoking access invalidates the stored tokens.

5. AI processing

Some features generate content (proposals, audits, briefs, drafts, extracted invoice/receipt fields) using third-party AI providers (currently OpenAI). To do this, the relevant content you submit or the record you act on is sent to the provider to produce the output you requested. We do not use your data to train third-party models, and we instruct providers to process it only to return the requested result.

6. Service providers and sharing

We share information only with providers that help us run the Service, under appropriate confidentiality terms:

Google — for the optional Calendar, Gmail-send, and Drive-import features you enable.
OpenAI — for AI generation features you invoke.
Email delivery — SMTP/email providers used to send notifications and messages.
Hosting & database — infrastructure operated by SavvPro to store and serve the Service.

We may also disclose information to comply with law, enforce our terms, or protect the rights and safety of users.

7. Data security

We protect data with industry-standard measures: passwords are stored only as salted hashes, session tokens are signed, third-party OAuth refresh tokens are encrypted at rest, access is scoped per business (tenant isolation), and rate limiting and input validation are applied to sensitive endpoints. No method of transmission or storage is perfectly secure, but we work to protect your information and to respond promptly to incidents.

8. Data retention

We retain account and Customer Data for as long as your account is active or as needed to provide the Service. You may delete records within the app; Customers may request deletion of their workspace. We may retain limited information as required for legal, security, or audit purposes.

9. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. Users should contact their Customer (workspace owner) for data they entered; for account data or other requests, contact us at info@savv.pro and we will respond in accordance with applicable law.

10. Children

The Service is intended for business use and is not directed to children under 16. We do not knowingly collect their data.

11. International transfers

Your information may be processed in countries other than your own. Where required, we take steps to ensure appropriate safeguards for such transfers.

12. Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by additional notice.

13. Contact us

SavvPro — Business Pulse
Email: info@savv.pro
Website: business.savv.pro