SOVABOO

Privacy Policy

Last updated: October 2025

This Privacy Policy explains how SOVABOO DIGITAL OÜ (“the Company”, “we”, “our”, “us”) collects, uses, and protects your personal data when you use sovaboo.com (“the Sovaboo Platform”, “the Website”).

We are committed to safeguarding your privacy and complying with the General Data Protection Regulation (GDPR) and applicable data protection laws of the European Union and Ukraine.

By using the Sovaboo Platform, you agree to this Privacy Policy and the processing of your data as described below.

1. Data Controller

The data controller responsible for processing your personal data is:

SOVABOO DIGITAL OÜ
Registry code: 17150442
Registered address: Sepapaja tn 6, 15551 Tallinn, Estonia
Email: [email protected]
Website: https://sovaboo.com

2. Information We Collect

We collect and process the following categories of personal data:

2.1 Information You Provide Voluntarily

  • Account information — email address, display name, profile avatar, and authentication data (email or Google sign-in).
  • User interactions — comments, likes, or feedback on content.
  • Author data (for verified Authors only) — biography, display name, and optional social links.
  • Support requests — any information you provide when contacting us.

2.2 Automatically Collected Information

When you use the Sovaboo Platform, we may automatically collect:

  • IP address, device type, and browser information;
  • pages visited, language preferences, and general usage statistics;
  • cookies and similar technologies (see Cookies Policy).

2.3 Analytics (Only with Consent)

We use Mixpanel analytics to understand how users interact with the Platform.
Analytics are disabled by default and activated only after you give explicit consent via the cookie banner or settings.

3. How We Use Your Data

We process personal data for the following purposes:

  • To provide and maintain the Sovaboo Platform and its features;
  • To authenticate users and secure accounts;
  • To send transactional emails (e.g., account creation, password reset, notifications);
  • To moderate and manage user-generated content;
  • To improve performance, usability, and localization of the Website;
  • To comply with legal obligations and protect against abuse or fraud;
  • To communicate with you regarding account or policy updates.

We do not use your data for automated decision-making or profiling that produces legal effects.

4. Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds under GDPR:

  • Consent — for optional cookies and analytics (Mixpanel).
  • Contract — to provide access to your user account and Platform functionality.
  • Legitimate interest — to maintain security, prevent fraud, and improve services.
  • Legal obligation — when required by applicable law or regulatory authorities.

5. Data Storage and Security

Your personal data is stored securely on servers located in the European Union (DigitalOcean EU region).
We implement industry-standard technical and organizational measures to protect your information against unauthorized access, alteration, or disclosure.

Access to personal data is limited to authorized Company personnel and service providers who require it for operational purposes.

6. Data Retention

We retain your data only as long as necessary to fulfill the purposes described in this Policy or as required by law.

If you delete or deactivate your account:

  • Your account is immediately hidden from public view.
  • You have 7 days to restore it.
  • After this period, all personal data will be permanently deleted, except for data we must retain for legal or security reasons.

7. Sharing and Disclosure

We do not sell or rent your personal data.

We may share limited information with:

  • Service providers (e.g., hosting, analytics, email delivery) under strict data protection agreements;
  • Authorities or regulators, only when legally required;
  • Successors or affiliates, in case of business restructuring, merger, or acquisition (you will be notified beforehand).

All third-party providers process data only on behalf of the Company and in compliance with GDPR.

8. Cookies and Tracking Technologies

The Sovaboo Platform uses cookies for:

  • essential site functionality (authentication, security, preferences),
  • optional analytics (Mixpanel),
  • and user experience improvements.

You can manage your cookie preferences at any time.
Full details are described in our Cookies Policy.

9. Transactional Emails and Notifications

We send necessary transactional emails related to:

  • account registration and verification;
  • password reset and security alerts;
  • author application reviews and moderation decisions;
  • notifications about updates to legal documents.

You cannot unsubscribe from essential transactional emails.
However, you can disable optional marketing or community updates (if introduced in the future).

10. Your Rights under GDPR

As a data subject, you have the following rights:

  • Right of access — obtain a copy of your personal data.
  • Right to rectification — correct inaccurate or incomplete information.
  • Right to erasure (“right to be forgotten”) — request deletion of your data.
  • Right to restriction of processing — limit processing in certain cases.
  • Right to data portability — receive your data in a structured, machine-readable format.
  • Right to object — oppose processing based on legitimate interests.
  • Right to withdraw consent — for optional cookies or analytics, at any time.

You can exercise these rights directly from your profile settings or by contacting us at [email protected].

If you believe your data protection rights have been violated, you may lodge a complaint with the Estonian Data Protection Inspectorate or your local authority.

11. International Data Transfers

All data is processed within the European Union.
If, in the future, we use service providers outside the EU, we will ensure that appropriate safeguards (such as Standard Contractual Clauses) are in place to protect your information.

12. Children's Privacy

The Sovaboo Platform is intended for general audiences and is not directed toward children under 13.
If you believe that a child has provided us with personal data without consent, please contact us for prompt deletion.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect new features, technologies, or legal requirements.
The updated version will always be available at sovaboo.com/privacy-policy with the date of the last revision.

Significant changes will be announced on the Website or via email.

14. Contact Information

If you have any questions about this Privacy Policy or your personal data, please contact us at:

SOVABOO DIGITAL OÜ
Email: [email protected]
Address: Harju maakond, Tallinn, Kesklinna linnaosa, Narva mnt 5, 10117 Registry code: 17150442

This document is originally written in English.
Translations into other languages are provided for convenience only.
In case of discrepancies, the English version shall prevail.