1. Who we are
Sovvento (“we”) is the data controller for personal data processed through this service. Contact: privacy@sovvento.eu.
2. What we collect
Account identifiers (email), company information you provide during onboarding (legal name, country, VAT number, NACE code, headcount, financials, founded year, website), professional profile (sector tags, keywords, value proposition, team summary, project details), limited usage and performance data (page views, route visits, and web vital measurements), and records of activity (matches, drafts, applications, awards) and KYB / VIES verifications.
3. Why we process it
- To match your company with relevant grants — performance of our contract with you (Art. 6(1)(b) GDPR).
- To verify your eligibility (KYB, VIES) and prevent fraud — legitimate interest (Art. 6(1)(f)).
- To understand product usage and site performance so we can improve the service — legitimate interest (Art. 6(1)(f)).
- To meet our accounting, tax and AML obligations once a paid award is recorded — legal obligation (Art. 6(1)(c)).
4. Sub-processors
We share the minimum necessary data with: Supabase (authentication, database hosting), Vercel (hosting, traffic analytics, and performance insights), our LLM providers (drafting), Stripe (invoicing for awards), and the public grant registries and award datasets we query on your behalf (including VIES, the EU Funding portal, and national grant portals). All sub-processors are bound by data processing agreements compatible with the GDPR.
5. Retention
We retain your data for as long as your account is active. On deletion we erase everything except the minimum award/invoice ledger required by EU accounting and AML law (typically 10 years).
6. International transfers
Data is hosted within the European Economic Area. Where a sub-processor operates outside the EEA, we rely on Standard Contractual Clauses adopted by the European Commission.
7. Your rights
Under the GDPR you have rights of access, rectification, erasure, restriction, portability, objection, and to lodge a complaint with your national supervisory authority. You can exercise access and erasure self-service from your dashboard privacy page. For other rights, email privacy@sovvento.eu.
8. Cookies
We use strictly necessary cookies to keep you signed in. We also use privacy- oriented first-party traffic and performance measurement to understand page views and Core Web Vitals. We do not use advertising cookies and do not track you across other sites.