Privacy Policy

This policy applies to two groups: our customers (the businesses and individuals who subscribe to Sav Nebula) and their contacts (the leads, clients, and individuals whose data our customers upload or message through the platform). We act as a data processor for our customers and, in limited cases, as a data controller for our own direct website visitors.

If you are one of our customers, you are the controller of the data you upload. If you are a contact of one of our customers, the customer — not Sav Nebula — is primarily responsible for how your data is used. Questions about a specific business's handling of your data should go to that business first.

From website visitors: name and email (if you fill out a form or book a demo), booking details, IP address, browser and device information, and pages visited. We use cookies and analytics to understand traffic and improve the site.

From customers (account holders): name, business name, email, phone, billing address, payment method (processed securely by our payment provider — we do not store full card numbers), and usage data from the platform.

Customer-uploaded data: contacts, leads, clients, phone numbers, email addresses, calendar appointments, messages, form submissions, and any content our customers choose to store in the CRM. Sav Nebula does not control what data customers upload — customers are responsible for ensuring they have lawful consent to store and message each contact.

Communications data: SMS, email, social-media DMs, and call recordings or logs processed through the platform to deliver the automation features customers use.

We use personal information to:

• Provide, operate, and maintain the Services, including CRM, automation, and scheduling features.
• Process payments and manage subscriptions, including one-time setup fees.
• Provide ad management, funnel building, and marketing services as part of a subscribed plan.
• Send service-related notifications, onboarding, and account communications.
• Respond to support requests and billing questions.
• Detect, prevent, and address fraud, abuse, and security issues.
• Comply with legal obligations and respond to lawful requests.
• Improve and develop the platform and our website.

We do not sell your personal information to third parties. We may use aggregated or de-identified data for analytics and product improvement.

Where applicable privacy laws require a legal basis, we rely on: performance of our contract with you (to deliver the Services you subscribed to), our legitimate interests (security, fraud prevention, platform improvement), your consent (for optional communications and optional cookies), and legal compliance. You may withdraw consent for optional processing at any time without affecting the core service.

We share data only as needed to operate the Services, with:

• Service providers — hosting, payment processing, email/SMS carriers, calendar systems, analytics, and customer-support tools.
• Ad platforms — Meta and Google, only when a customer enrolls in ad management and only as needed to build and run that customer's campaigns.
• Travel partner — Beyond the Globe Travel, only for travel-booking requests you (or your clients, via your account) initiate.
• White-label resellers — under a reseller agreement, your clients' data may be accessible to the reseller, who acts as controller for that data.
• Legal authorities — when required by law, court order, or to protect rights, safety, or property.

Our service providers are bound by contractual obligations to protect data and to use it only for the purpose we share it.

We keep personal information for as long as your account is active, or as long as needed to provide the Services and comply with law. Customer-uploaded data can be exported from the dashboard at any time. After account cancellation, your data remains available for export for 30 days, after which it may be archived (for legal/backup needs) or deleted. Billing and tax records may be retained longer as required by law.

We use industry-standard measures to protect data, including encryption in transit (TLS) and at rest, access controls, and regular monitoring. No method of transmission or storage is fully secure, so we cannot guarantee absolute security. You are responsible for keeping your account credentials safe and for limiting user-seat access to authorized personnel.

Our website uses cookies and similar technologies for essential functionality, security, and analytics. You can control cookies through your browser settings. Some cookies are necessary for the site to function and cannot be disabled.

Depending on where you live, you may have the right to access, correct, delete, or port your personal data, and to object to or restrict certain processing. If you are a contact of one of our customers, please contact that customer directly — they control that data. If you are a direct website visitor or account holder, contact us and we will respond within a reasonable timeframe.

California residents may exercise rights under the CCPA/CPRA. We do not "sell" personal information as defined by California law, and we do not process sensitive data beyond what is needed to provide the Services.

When you provide your phone number or email through a form, booking, or opt-in, you consent to receive service-related and marketing messages at the number/address you provided. Message frequency varies. You can opt out at any time by replying STOP to any SMS or using the unsubscribe link in any email. Standard message and data rates may apply.

We follow applicable consent rules (including TCPA for SMS in the U.S. and GDPR consent in the EU/UK). Customers using our platform to message their own contacts are responsible for obtaining and documenting the required consent for each contact.

The Services are intended for businesses and are not directed at individuals under 18. We do not knowingly collect personal information from children. If you believe a minor has provided us data, contact us and we will delete it.

Your data may be processed in countries other than your own, including the United States. We take steps to ensure appropriate safeguards (such as standard contractual clauses) apply to such transfers where required by law.

We may update this Privacy Policy from time to time. Material changes will be posted here and communicated by email or in-app notice where appropriate. The "last updated" date above reflects the most recent revision.

Questions about this policy or your data? Contact us through the support options in your dashboard or via the contact form on our website. We will work to resolve any concern promptly.