Privacy Policy
Last updated: May 19, 2026
Savant ("we", "us") is a product of Doranalytics LLC (Delaware, USA). This policy describes the data we collect, why we collect it, how long we keep it, and how you can delete it. Questions: privacy@svnt.so.
1. Information We Collect
1.1 Account information
- Email address and name (from signup or Google OAuth)
- Password (hashed, never stored in plaintext)
- Organization name and team membership
1.2 Instagram and Facebook data (Meta Platforms)
When you connect an Instagram Business or Creator account via the Login with Instagram flow, we receive an access token scoped to the permissions you approve. We use this token to fetch the following data on your behalf:
| Permission | Data we receive | Why we need it |
|---|---|---|
instagram_business_basic | Account username, name, biography, profile picture, follower count, media count, post captions, media URLs, permalinks | Show your profile and posts in Savant; analyze your content for hook patterns and performance trends |
instagram_business_manage_insights | Post-level metrics: views, reach, likes, comments, shares, saves | Power dashboards, identify your best-performing content, and benchmark performance over time |
instagram_business_manage_messages | Direct messages sent to your account, sender's username and ID | Run automated DM responses (e.g. our @-mention carousel generator) and forward messages into your Savant inbox |
instagram_business_manage_comments | Comments on your posts, comment text, commenter username and ID | Trigger comment-based automations (e.g. reply with a DM when a user comments a keyword) |
instagram_business_content_publish | Permission to publish posts and reels you author in Savant | Schedule and publish posts you create in Savant directly to your Instagram account |
We do not request your Instagram password and we do not read messages or comments from accounts you don't own.
1.3 TikTok data
When you connect a TikTok account, we receive your username, display name, profile picture, follower/video counts, and a list of your videos with public metrics — strictly for the same purposes as the Instagram data above (display, analysis, publishing).
1.4 Usage data
- Pages viewed, buttons clicked, time spent
- Device, browser, and IP address (for security)
- Payment metadata (handled by Stripe — we never see card numbers)
2. How We Use Information
- Provide and operate the Service (display your content, run analytics)
- Generate AI-powered insights about your content using LLM providers (OpenAI, Anthropic) — only your own data, never sold or used to train external models
- Improve features and performance
- Communicate product updates (you can unsubscribe)
- Ensure security and prevent abuse
3. Data Retention
- Active account: we retain your IG/TikTok data for as long as your account is connected, plus a 30-day grace period after disconnection.
- Deleted account: all personally-identifying data (profile, posts, messages, comments, metrics) is purged within 30 days of your deletion request. Anonymized aggregates (e.g. "average engagement rate across all users") may persist.
- OAuth tokens: deleted immediately when you disconnect or revoke access in Instagram's settings.
4. How to Delete Your Data
You can delete your data at any time:
- In-app: visit /data-deletion and click "Delete all my data". This removes your account and every connected social account.
- From Instagram: go to Instagram → Settings → Apps and Websites and remove Savant. Meta will notify us and we will purge your data automatically within 30 days.
- By email: write to privacy@svnt.so and we will process the request within 30 days.
5. Data Sharing
We do not sell your personal data.
5.1 Sharing with brands that pay you
Savant operates a two-sided platform. Creators connect their social accounts to manage and grow their content. Brands use the business side of the platform to find and pay creators for sponsored posts.
If you accept a brand partnership, or a brand accepts your application, we share a limited slice of your Instagram data with that specific brand for the duration of the partnership:
- Post performance and insights. Reach, impressions, likes, comments, shares, saves, and audience engagement on the specific sponsored posts the brand is paying for, plus your overall content performance trends so the brand can evaluate fit.
We do not share your direct messages, comment text, OAuth tokens, follower list, or any data unrelated to your performance as a creator. The brand never receives your Instagram access token and cannot post on your behalf.
You can detach a brand at any time from Settings, Creator opportunities. Once detached, the brand loses access to your future data. Data they already viewed during the partnership remains in their account for the brand’s own records (campaign reporting).
5.2 Processors and service providers
We share data with the following processors, each contractually bound to keep it confidential:
- Vercel, Neon, Upstash. Hosting, database, cache (US data centers).
- OpenAI, Anthropic, Google. LLM inference for content analysis. Zero data-retention contracts apply where available. Your data is never used to train models.
- Stripe. Payment processing.
- PostHog. Product analytics.
- Resend. Transactional email.
- Authorities if legally required (court order, subpoena).
6. Your Rights
Under GDPR, CCPA, and similar laws, you have the right to:
- Access the data we hold about you
- Correct inaccurate data
- Delete your data (see Section 4)
- Export your data in a portable format
- Object to processing
Email privacy@svnt.so to exercise any of these rights.
7. Cookies & Analytics
We use cookies for authentication (session) and PostHog for product analytics. No third-party advertising cookies.
8. Security
OAuth tokens are stored encrypted at rest. All traffic is HTTPS. We follow industry-standard practices but no system is 100% secure — please use a strong, unique password.
9. International Transfers
Data is processed in the United States. By using Savant you consent to this transfer.
10. Children
Savant is not directed at users under 13 (or 16 in the EU). We do not knowingly collect data from minors.
11. Changes to This Policy
We will notify users of material changes via email or in-app banner at least 14 days before they take effect.
12. Contact
privacy@svnt.so
Doranalytics LLC, 8 The Green, Ste R, Dover, DE 19901, USA