Trust

Security & privacy

Your conversations are personal. Here's plainly how we protect them.

For the full architecture and data-flow explanation, read the Trust & Architecture page.

Your data is yours

Your chats are tied to your account and private to you, other users can't see them, and we never sell your data. We use conversations to run and improve the service, as explained in our Privacy Policy.

How we protect it

• Encrypted in transit, all traffic runs over HTTPS.
• Passwords are hashed, we never store your real password, so even we can't read it.
• Strict per-user access, the database itself refuses to return another person's chats, even if a request is forged.
• Least access, secrets and keys live server-side only, never in the app you download.
• Signed-in only, the AI answers only authenticated Sevoria accounts; every request is verified server-side.
• Rate limited, per-account and per-address limits keep floods and abuse away from everyone else's experience.
• Server-enforced usage, credit accounting happens on the server, where a client can't tamper with it.
• Input limits, oversized messages and payloads are rejected before they ever reach the model.

What we collect

The minimum to run the service: your account email, your conversations (so they sync and you can return to them), and basic technical logs needed for security and reliability.

You're in control

• Export a copy of your data.
• Delete individual chats or your whole account, anytime.

Responsible AI

Sevoria can be wrong, it tells you when it's unsure, and you should verify anything important. We don't use it to make automated decisions about you.

Found a vulnerability?

Tell us quietly via the contact page or email security@sevoria.co. Include steps to reproduce, affected pages, and whether user data could be exposed.