Privacy Policy

Effective 2026-08-11 · v1.5

Sovra ("Sovra," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you use our websites, products, and services (collectively, the "Services"), and the choices you have regarding that information. Sovra does not sell your account information to third parties for their independent marketing or commercial purposes.

By accessing or using our Services, you acknowledge that you have read and understand this Privacy Policy. The Services are intended for use within the United States only and are not directed at individuals located in the European Economic Area, the United Kingdom, or Switzerland.

Who We Are

Sovra LLC, a Delaware limited liability company headquartered in Houston, Texas, operates a consumer people-search platform. Our service uses identity resolution and data matching to help individual users search, verify, and connect publicly available and licensed information about people, for example verifying the identity of someone met online or reconnecting with a lost family member. In operating the service, we work with business partners such as data suppliers, payment processors, and service providers, as described in this Policy.

We are committed to responsible data stewardship, transparency, and the protection of individual privacy rights. We maintain administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and security of the information we process.

1. Scope of this Policy

This Privacy Policy applies to:

  • Visitors to our websites and web applications within the United States.
  • U.S. users of Sovra's Services.
  • U.S. individuals whose information we obtain from data providers and other third parties in connection with our Services.
  • U.S. individuals whose data we obtain from public or commercially available sources.

If you are visiting our Site from outside of the United States, please note that our Site is hosted in the United States. Where permitted by applicable law, we may transfer the personal data we collect about you to the United States and other jurisdictions that may not be deemed to provide the same level of data protection as your home country, as necessary for the purposes set out in this Policy.

2. Information We Collect

The types of information we collect depend on how you interact with Sovra and use our Services.

2.1 Information You Provide Directly

  • Contact details: Name, email address, telephone number, mailing address, job title, company name.
  • Account information: Username, password, authentication data, security questions.
  • Billing details: Payment card information (processed by our payment processor), billing address, transaction history.
  • Preferences: Marketing preferences, communication settings, and other choices you make in your account.

Communications and User-Submitted Content

When you use the Services, you may provide information to us through various channels, including messages, queries, and prompts submitted to Sovra's AI-powered assistant or search features; files, images, documents, and other content you upload to the platform, including photographs, screenshots, and text-based files ("User-Submitted Content"); communications with our customer support team; and feedback, survey responses, and other information you voluntarily provide.

How We Use User-Submitted Content

We may use User-Submitted Content to operate and deliver the Services you have requested, including identity resolution, data matching, and verification. We may also use User-Submitted Content to maintain, improve, and develop our Services, including to train, fine-tune, and evaluate our artificial intelligence and machine learning models. Where User-Submitted Content is used for model training or development purposes, we take reasonable steps to de-identify or aggregate the data before use. You may opt out of having your User-Submitted Content used for model training by contacting privacy@sovra.ai.

Accuracy and Legality of User-Submitted Content

You are solely responsible for the accuracy, completeness, and legality of all User-Submitted Content. Sovra does not independently verify User-Submitted Content and makes no representations or warranties regarding its accuracy or integrity. You represent and warrant that you have the legal right to provide all User-Submitted Content to Sovra, and that your submission does not violate any applicable law, including laws governing wiretapping, electronic surveillance, recording consent, and data privacy. Sovra is not responsible for User-Submitted Content that was obtained by you in violation of applicable law. If Sovra becomes aware or reasonably suspects that User-Submitted Content was obtained unlawfully, Sovra reserves the right to delete such content, suspend or terminate your account, and cooperate with law enforcement as required by law.

Permitted File Types

Sovra currently accepts the following file types for upload: images (JPEG, PNG), documents (PDF), and text-based files. Sovra reserves the right to modify the types of files accepted at any time. You should not upload files containing sensitive personal information such as Social Security numbers, financial account numbers, or protected health information unless specifically instructed to do so as part of a verified identity resolution workflow.

2.2 Information Collected Automatically

When you interact with our Services, we may automatically collect:

  • Device and usage data: IP address, browser type and settings, device identifiers, operating system, mobile network, and other technical details.
  • Log data: Dates and times of access, pages viewed, links clicked, referring and exit pages, error logs, and performance data.
  • Cookies and similar technologies: Information collected through cookies, pixels, web beacons, and similar tools to remember your settings, analyze usage, and improve the Services.

2.3 Information from Third-Party Data Providers and Brokers

As part of providing identity resolution, verification, analytics, and related services, Sovra may collect and process information from a variety of sources.

The categories of information we collect may include but is not limited to:

  • Full name and aliases
  • Postal addresses
  • Email addresses
  • Telephone numbers
  • Device identifiers and online identifiers
  • IP addresses
  • Demographic information
  • Commercial and transactional information
  • Professional or employment-related information
  • Public records information
  • Internet or network activity information
  • Geolocation information
  • Inferences and analytical data derived from other information

We may collect information from publicly available sources, to include, but not limited to:

  • Government records and filings
  • Court records
  • Business registrations
  • Professional licenses
  • Property and tax records
  • Public websites and directories
  • Social media platforms and publicly accessible online content

We may obtain information from third-party vendors, data brokers, analytics providers, marketing partners, identity verification providers, and commercial data suppliers. These third parties may provide demographic data, contact information, device and advertising identifiers, fraud prevention data, or other consumer and business-related information. We require our service providers and data partners to represent that the information they provide has been collected and disclosed in compliance with applicable law.

3. How We Use Information

We use personal information for the following purposes:

  • Providing and operating the Services: Including account creation, authentication, customer support, and service delivery.
  • Improving and developing the Services: Monitoring performance, analyzing usage, troubleshooting, and developing new features.
  • Analytics and insights: Conducting statistical analysis, modeling, and reporting to improve our offerings or support customer use cases (for example, identity resolution) as permitted by law and contract.
  • Security and fraud prevention: Detecting, investigating, and preventing fraud, abuse, security incidents, and other harmful or unlawful activity.
  • Legal and compliance: Meeting U.S. legal obligations, responding to lawful requests, and protecting our rights, property, users, and the public.
  • Marketing and communications: Sending you product updates, newsletters, and promotional messages in accordance with your preferences and applicable U.S. laws; you can opt out at any time.

We may de-identify or aggregate data so that it can no longer reasonably be linked to an identified or identifiable individual, and we may use such information for any lawful business purpose.

4. Regulation and Compliance

We collect and process information only for lawful business purposes and in accordance with applicable privacy and data protection laws. We may create derived data, scores, linkages, profiles, or inferences using artificial intelligence, machine learning, statistical modeling, and identity resolution technologies. These features are designed to provide context to help individual users make informed personal decisions. Users are expected to exercise their own judgment and to independently verify information before acting on it.

Sovra is not a consumer reporting agency under the Fair Credit Reporting Act (15 U.S.C. § 1681 et seq.) ("FCRA"), and the Services do not provide "consumer reports." Information available through the Services may not be used to determine any individual's eligibility for employment, housing, credit, insurance, or any other purpose regulated by the FCRA. Such use is prohibited under our Terms and Conditions.

Children's Privacy

The Services are intended for individuals 18 years of age or older. We do not knowingly collect personal information from anyone under 18, and we do not knowingly display or distribute profile information about individuals under 18. If we learn that we have collected personal information from a child, or that a profile available through the Services contains information about a minor, we will promptly take steps to delete that information. If you believe we might have any information from or about a child, please contact us at privacy@sovra.ai.

5. Data Retention

Sovra retains personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, including providing identity resolution services, maintaining business operations, complying with legal obligations, resolving disputes, enforcing agreements, and protecting the security and integrity of our systems.

The criteria we use to determine specific retention periods include the nature and length of our business relationship with you, our legal and regulatory requirements, and whether we have an ongoing business purpose for retaining your information (such as communicating with you about ongoing or prospective Services).

Where feasible, we maintain documented retention schedules and data lifecycle management procedures. When personal information is no longer required, we take commercially reasonable steps to securely dispose of, anonymize, or de-identify the information in accordance with applicable law and industry standards.

6. Data Security and Safeguards

Sovra maintains a comprehensive information security program designed to protect the confidentiality, integrity, availability, and resilience of personal information and sensitive personal information processed through our systems. Our security program includes administrative, technical, and physical safeguards appropriate to the nature of the information and the risks associated with processing identity-related and sensitive data.

Because our services may utilize artificial intelligence, machine learning, and automated processing technologies, we implement additional safeguards intended to reduce risks associated with: unauthorized access to training or inference data, improper data linkage or identity matching, model manipulation or adversarial attacks, inaccurate or biased outputs, and excessive or unnecessary data processing.

We evaluate AI-related processing activities periodically and implement reasonable controls designed to support transparency, accountability, and responsible use of data.

While we implement reasonable safeguards designed to protect information, no method of electronic transmission, storage, or processing is completely secure. Accordingly, we cannot guarantee absolute security of information processed through our systems.

7. Incident Response and Breach Notification

We maintain incident response and business continuity procedures designed to identify, investigate, contain, and remediate suspected security incidents.

In the event of a data breach involving personal information, we will take actions consistent with applicable law, to include, but not limited: investigating the incident, mitigating potential harm, notifying affected individuals and regulatory authorities where required, and implementing corrective measures to reduce the likelihood of recurrence.

8. Your Privacy Rights

Subject to applicable law, individuals whose personal information we process may have certain rights regarding their personal data. Depending on your jurisdiction and relationship with Sovra, these rights may include:

Right to Access

You may request confirmation regarding whether we process your personal information and request access to the personal information we maintain about you.

Right to Correct Inaccurate Information

You may request correction of inaccuracies in your personal information, taking into account the nature of the information and the purposes of processing. When submitting a correction request, you must provide sufficient documentation to verify both your identity and the accuracy of the proposed correction. Sovra reserves the right to decline correction requests where the requestor cannot adequately demonstrate the inaccuracy of the existing information.

Right to Delete

You may request deletion of personal information provided by or obtained about you, subject to applicable legal, contractual, regulatory, and operational retention obligations.

Right to Data Portability

Where applicable, you may request a portable copy of certain personal information in a structured and commonly used electronic format.

Right to Opt Out

Sovra's people-search disclosures may constitute a "sale" or "sharing" of personal data under certain state privacy laws. Depending on your jurisdiction, you may opt out of these disclosures and certain processing activities, including the sale of personal data, targeted advertising, or profiling or automated decision-making with legal or significant effects.

Right to Withdraw Consent

Where we rely on your consent to process sensitive personal information, you may withdraw that consent at any time by contacting privacy@sovra.ai. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

Sensitive Personal Information

We process sensitive personal information only where permitted by law and, where required, with appropriate consent. Individuals may request additional information regarding our handling of sensitive personal information.

Identity Verification

To protect personal information and prevent unauthorized disclosures, we require individuals to provide sufficient documentation to verify their identity before processing certain requests. Authorized agents may submit requests on behalf of individuals where permitted by law, provided sufficient authorization and identity verification documentation is supplied.

9. Rights Available to Specified Covered Persons Such as Judges and Law Enforcement Officers

Certain U.S. state laws afford specified covered persons, including judges, judicial officers, law enforcement officers, elected officials, prosecutors, public defenders, and certain of their family members and cohabitants, the ability to limit the display of certain information about them from appearing in publicly available sources. We respect the safety and privacy of these covered individuals and comply with applicable laws that provide such protections.

If you are a person covered by one of these laws and would like to exercise any available rights with respect to information that may appear in our Services, you may contact us using the details in the "Contact Us" section below. In doing so, please:

  • Identify the applicable law under which you are asserting your rights.
  • Confirm that you are a covered person under that law.
  • Provide a description or screenshot of the record in our Services that corresponds to you.
  • Provide your complete name, date of birth, city and state of residence, phone number, and email address.
  • Provide any additional information that may be required by the specific law at issue.

Any identifying information provided in connection with such a request will be used solely to process and comply with your request pursuant to applicable law.

10. Changes to This Privacy Policy

Please note that we may modify or update this Policy from time to time, so please review it periodically. If we make material changes to how we treat Personal Information, we will notify you according to applicable law. Unless otherwise indicated, any changes to this Policy will apply immediately upon posting to our Site. You are responsible for periodically visiting our Site and this Policy to check for any changes. Your continued use of the Services after the updated Privacy Policy becomes effective indicates that you have read and understood the changes.

Exercising Your Rights

Individuals may submit privacy-related requests by contacting:

Sovra LLC 10497 Town and Country Way, Suite 940 Houston, Texas

Email: privacy@sovra.ai

We will respond to verified requests within 45 days, or such shorter period as applicable law requires. In certain circumstances, we may extend the response period where reasonably necessary and permitted by law.