Privacy
What we hold, and why.
Last updated September 7, 2026.
What we collect
On sovereum.com: the name, work email and company you give us when you book a walkthrough or open a Forms workspace, and ordinary web-server logs. In the product: the people on your roster, what they log, the forms your customers fill, files and signatures, and the messages your team sends each other. Everything in the product is entered by you or your people, or by the people who fill your forms.
Why
To run the service for you: the board, the pipeline, the statements, the forms. To reach you about your account. To keep the service safe. We do not sell personal information and we do not use one company's data to serve another.
Where it lives
Sovereum runs on Convex (database, files and functions) and Vercel (the web application), in the United States. Emails are sent through Resend. Each of these processes data only on our instructions. Health information is held only for plans with a signed business associate agreement, and never passes through the web application layer.
Cookies
A session cookie keeps you signed in. On the public site, a preference cookie remembers a tab or a filter. We do not run advertising trackers.
How long
Your data stays while your workspace is open. After it closes, we delete it within sixty days unless a law or a signed agreement requires a longer hold; backups roll off within sixty days after that. Records subject to insurance or benefits regulations are kept for the period those rules require.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it, by writing to info@sovereum.com. If you are a person whose information a Sovereum customer holds, for example someone who filled one of their forms, contact that company first; we will help them respond.
Changes and contact
We update this notice when what we do changes, and say so in the product. Questions go to info@sovereum.com.