top of page

PRIVACY POLICY

Effective Date: May 24, 2026
Last Updated: June 11, 2026

1. Introduction

Sorvago LLC ("Sorvago," "we," "us," "our") operates the Sorvago platform at sorvago.com. This Privacy Policy explains how we collect, use, and protect information about you when you use Sorvago.

We respect your privacy. Sorvago's privacy practices are enforced architecturally — through code, not just through policy. This document explains what that means in plain language.

By using Sorvago, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use Sorvago.

2. Information we collect

Information you provide:

  • Account information: name, email address, payment information (processed by Stripe)

  • Channel information: YouTube channel data you authorize Sorvago to access via OAuth

  • Voice samples: if you use voice cloning, the voice samples you upload (processed by ElevenLabs)

  • Creative content: scripts, video drafts, thumbnails, and other content you create using Sorvago

  • Communications: emails and support messages you send to us

Information collected automatically:

  • Usage data: how you interact with Sorvago features

  • Device information: browser type, operating system, IP address

  • Cookies and similar technologies (see our Cookie Policy)

3. How we use information

We use the information we collect to:

  • Provide, maintain, and improve Sorvago's features

  • Process subscription payments and manage your account

  • Generate AI content (video, thumbnails, scripts, voice) as you request

  • Analyze your channel performance to provide Intelligence recommendations

  • Communicate with you about your account, support requests, and product updates

  • Detect, prevent, and address fraud, security issues, and abuse

  • Comply with legal obligations

We do not sell your personal data to third parties. We do not use your data to train AI models that benefit competitors. We do not transfer your channel-specific data to other Sorvago users.

4. How we share information

Sorvago shares information only as necessary to provide the service. We use the following categories of third-party services ("sub-processors") — see our full Sub-processor List:

• YouTube API Services (Google) — to access your channel data with your OAuth consent
• Anthropic (Claude API) — to power our Intelligence layer
• ElevenLabs — voice cloning and transcription services
• fal.ai — AI video and image generation compute
• Stripe — payment processing
• Mercury Bank — business banking for subscription management
• Railway — license server and infrastructure
• Wix — web hosting
• Iubenda — legal compliance management

Each sub-processor receives only the data necessary for its specific function. We require all sub-processors to protect your data and comply with applicable privacy laws.

5. Architectural privacy enforcement

Sorvago enforces several key privacy commitments architecturally — through code, not just policy. These commitments would require rebuilding the platform to remove:

Per-channel exclusion is enforced at the architectural boundary. No individual creator's specific channel data is ever surfaced to any other creator. This is enforced by code-level tests that prevent cross-channel data leakage from shipping.
 

Local-first architecture. Sorvago runs as a desktop installation on your machine. Your channel data, scripts, drafts, voice samples, Authenticity Receipts, and configuration are stored on your local installation, not in a Sorvago-controlled central database. Sorvago does not aggregate individual creator data into a server-side store for cross-creator analysis, except where you explicitly opt into Sense pattern aggregation, which surfaces only aggregated patterns across many creators (see Section 11).
 

External provider routing. Specific operations require routing prompts and content to external AI providers under their commercial terms: AI video and image generation via fal.ai, Intelligence and script analysis via Anthropic, voice cloning and transcription via ElevenLabs, channel data refresh via YouTube API (Google). When you initiate one of these operations, the relevant content leaves your local installation and is processed by the provider. See our Sub-processor List for what each provider receives and how they handle it.

Pattern aggregation operates under an aggregated-only output boundary, architecturally enforced. Raw event data from Sense pattern aggregation participation is retained for 30 days maximum, then deleted by automated purge. The architectural firewall preventing any individual creator's content, drafts, or decisions from surfacing to other creators is enforced at code substrate today. The feature that surfaces aggregated patterns derived across many creators extends this same architectural firewall when fully released.

No auto-publish code paths exist anywhere in Sorvago. Every upload requires creator approval. Sorvago suggests; the creator decides.

6. AI content data handling

Sorvago uses AI to generate video, images, scripts, and voice content. Here is what happens to your data during AI generation:
AI video and image generation (fal.ai): Generation prompts and references you provide are sent to fal.ai to generate the requested content. fal.ai may retain prompts and outputs per their own privacy policy. Generated content is returned to Sorvago and stored on your machine.

AI script generation (Anthropic Claude): Your script inputs and intelligence-layer prompts are sent to Anthropic for processing. Anthropic processes inputs without retaining them for model training under their commercial API terms. Voice cloning and transcription (ElevenLabs): Voice samples you upload for cloning and audio you transcribe are sent to ElevenLabs under their commercial OEM terms. ElevenLabs does not use voice samples to train models without consent.

For full details on each sub-processor's data handling, see the
Sub-processor List.

7. Voice cloning consent

Voice cloning requires explicit consent. Before Sorvago creates a voice clone from your samples, you complete an in-app consent flow confirming: (a) the voice samples are yours or you have authorization to use them; (b) you understand the cloned voice will be used to generate audio content under your direction; (c) you can request deletion of voice clones at any time. See full terms here.

8. Authenticity Receipt data

Sorvago generates cryptographically-signed Authenticity Receipts that document the creative decisions you made during production. Receipts contain:
• Records of which creative options you reviewed and which you chose
• Authenticity Signal analysis scores at the time of production
• Timestamps for each approval gate
A cryptographic signature that makes the receipt tamper-evident

 

Receipts are cryptographically signed and tamper-evident. You can export your receipts, share them with third parties at your discretion (for example, sponsor due diligence), and delete them from your account at any time. Sorvago makes no guarantee about how any third party will interpret or accept a receipt. Sorvago does not transmit your receipts to third parties without your explicit action.

9. Data retention

Sorvago retains your information for as long as your account is active. When you delete your account:
• Personal account information is deleted within 30 days
• Channel data stored locally on your machine is yours to retain or delete
• Authenticity Receipts you have not exported are deleted at account deletion
• Aggregated pattern data is retained in anonymized form (no individual creator data)
• Backup retention may extend deletion by up to 90 days

Some information may be retained longer where required by law (e.g., tax records, fraud investigation).

10. Your rights

Depending on your jurisdiction (GDPR, CCPA, others), you have rights regarding your personal information:
• Access — request a copy of the information we have about you
• Correction — request correction of inaccurate information
• Deletion — request deletion of your information (subject to legal retention requirements)
• Portability — receive your information in a portable format
• Objection — object to certain processing
• Withdraw consent — revoke consent for voice cloning or Sense pattern aggregation at any time
• Revoke OAuth — disconnect Sorvago from your YouTube account through Google Security Settings

To exercise any of these rights, email ej@sorvago.com.

11. International users

Sorvago is operated from the United States. If you are located outside the United States, your information may be transferred to the U.S. for processing. By using Sorvago, you consent to this transfer.

12. Children

Sorvago is not intended for use by anyone under the age of 16. We do not knowingly collect information from children. If you believe a child has provided information to Sorvago, contact ej@sorvago.com and we will delete it.

13. Contact

Questions about this Privacy Policy or your information:
Email: ej@sorvago.com
Sorvago LLC

1766 Elmira Street

Suite #323

Sayre, PA 18840

bottom of page