Version 2026-10-03 · effective 2026-10-03

SovernCommand Privacy Policy

Document version: 2026-10-03

Effective date: 2026-10-03

SovernCommand, at app.soverncommand.ai, is operated by INSIDERLIFE LLC. In this policy, "SovernCommand," "we," and "us" refer to INSIDERLIFE LLC.

This policy describes what SovernCommand actually collects and does today. It is written from the running product, not from plans.

1. Your account

• The email address you sign up with, and a display name if you give one.
• Your password, stored only as a salted hash. A signed-in session is an HTTP-only cookie; the session token is stored only in a form that cannot be turned back into it.
• Each consent you give (for example, accepting this policy), recorded with the document version and the date.
• How you arrived: the signup page or flow, an acquisition label such as "direct" or "referral", and, if you used a referral code, which member's code it was.
• Security and audit records of account and platform actions, kept to protect the service, not to profile you.

2. What you create in SovernCommand

• Your conversations with Sovern, including conversation tabs, what you share between them, and the requests and decisions you confirm.
• Briefs you describe to the Builder, including spaces you ask to create.
• Sources you add, including Google Drive files you choose to import (see section 5), and what SovernCommand has learned about your preferences in Getting To Know You.
• Your settings.
• Which areas of SovernCommand you open, such as a conversation, a space or the Grid, and when. Sovern uses this to understand what you are working on without you having to explain it again.
• For each answer Sovern gives, a copy of the view of your SovernCommand activity it answered from: your projects, conversations, spaces, development seat, connection status and what you last asked it. It is kept so you can see what an answer was based on.
• Your collaborator preset: the one SovernCommand selects for you by default, or one you chose, edited or imported, and each change you make to it. It is part of your profile, and you can remove it.
• Where you are working: your mode, mission, narrative state and leverage priority, the onboarding steps you have confirmed, and the next action Sovern named for you until you mark it done.
• Your prospect ledger: the people and organisations you choose to record as prospects, what you write about them (for example their name, platform, how to reach them, your notes and your assessments), the reports you file on your contact with them, and the work you choose to keep from their conversation. You enter this yourself, and you are responsible for having a lawful basis to record information about another person. SovernCommand does not contact them, enrich the record from other sources or share it, and it is used only to answer your own questions about your work. You can correct it, export it and delete your account with it.

3. Voice

• When you speak to Sovern, the recording is sent to OpenAI to be transcribed. The recording is not kept; the transcript becomes your turn in the conversation.
• When you play one of Sovern's replies aloud, the text of that reply is sent to fal.ai to generate speech. The generated audio is kept so the reply can be played again without being generated twice.

4. Connected accounts and secrets

• If you connect your own model-provider account, a Google account, or a development seat, SovernCommand stores the connection's provider, label, a masked hint, scopes, status and timestamps.
• The credential itself is sealed with AES-256-GCM. It is never shown back to you, never included in an export, and never sent anywhere except to the provider it belongs to.
• When you disconnect or revoke a connection, the sealed bytes are cleared.

5. Google user data

SovernCommand asks Google only for these permissions, and only when you choose to connect Google:

• Your identity (openid, email, profile): to know which Google account is connected.
• Drive files you choose (drive.file): to browse and import only the files you pick. It does not grant access to the rest of your Drive.
• Calendar events, read only (calendar.events.readonly): to show your events and availability when you ask.
• Gmail, read only (gmail.readonly): to find messages when you ask. SovernCommand cannot send, change or delete mail.
• Notebook Intelligence (discoveryengine.readwrite): to hold sources you choose in a notebook in your own Google account.

How Google user data is used:

• It is used only to provide the Drive, Docs, Sheets, Calendar, Gmail and Notebook Intelligence features you turn on and use.
• When you ask Sovern something that needs your Google account, it reads only what that question needs: the events in the window you ask about, how many messages match a search (never their content), or the names of Drive files you opened with SovernCommand and the text of a Doc you name.
• Gmail and Calendar results are shown to you and are not stored. A Drive file you import is stored as one of your sources until you remove it. A Notebook is held in your own Google account.
• When you use Google content in a request to Sovern, that content is sent to the AI provider answering the request (see section 7), only to answer you.
• SovernCommand keeps a record of each Google action: which capability, when, and whether it succeeded. The record holds parameter names, never the contents of a message, event or file.
• Google user data is never sold, never used for advertising, and never used to develop, improve or train generalized or non-personalized AI or machine-learning models.
• No person at SovernCommand reads your Google user data, except with your explicit permission, when needed for security or to investigate abuse, or to comply with the law.
• You can delete SovernCommand's access by disconnecting Google in Settings → Connections. Disconnecting revokes the grant at Google and immediately clears the stored tokens. Files you imported remain as your sources until you remove them, and the record of past actions is kept. You can also remove access at any time from your Google Account's permissions page.

SovernCommand's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The operator also holds a separate Google administrative connection used only to manage Notebook Intelligence licences. It requests identity and Notebook permissions, and it does not read members' Google data.

6. Usage and billing records

Each AI, speech or media operation you run is recorded: the operation, the model, the estimated and actual cost, and the credits it used. Operations SovernCommand runs to test the live service are marked as such and paid from its own allowance, never from yours. These records exist so that what you are charged matches what was done, and so that limits can be enforced.

7. Service providers

SovernCommand uses these providers to operate. Each receives only what its part of the service needs.

• Hetzner, which hosts SovernCommand's servers and database in Ashburn, Virginia, USA.
• Anthropic, OpenAI and Google (Gemini API), which generate AI responses to the requests you make. OpenAI also transcribes voice.
• fal.ai, which generates spoken replies and runs some AI models (including models routed through OpenRouter).
• Postmark, which delivers email from SovernCommand.

When you send a request to an AI feature, your input, and any sources or connected content you include in it, is transmitted to the provider answering it.

8. Societi and the development seat

• SovernCommand reads public information from the Societi network: spaces, member counts, open rulings and published contracts, plus events Societi publishes to SovernCommand. SovernCommand does not send your personal data to Societi.
• If you take a development seat, your seat's consents, limits and the work you explicitly authorize are recorded. The Dev Estate reads the authorizations you give so it can run exactly that work, within your limits.

9. What SovernCommand does not do

SovernCommand does not use advertising cookies, does not run third-party analytics or tracking scripts, and does not sell or share your personal information for anyone's marketing. The only cookie it sets is your session cookie.

10. Your data: export, correction and deletion

• Export. Settings → Data & privacy → Download my data gives you everything SovernCommand holds for you in one file. No credential of any kind is included.
• Correction and deletion. To correct or delete your data or your account, email admin@insiderlife.com. Deletion is currently handled by request, not by a self-service button. We will respond as applicable law requires, subject to security, record-keeping and legal-retention obligations.
• Retention. We keep personal information for as long as needed to provide and secure the service, keep required records, resolve disputes and comply with law.

11. Security

Passwords are hashed. Session tokens and connected credentials are never stored in a recoverable plain form. The database is not reachable from outside the application. No system is perfectly secure, and we cannot promise absolute security.

12. Where data is processed

SovernCommand runs in the United States. The providers in section 7 may process information in the United States and other countries where they operate.

13. Age

SovernCommand is for people 18 and older.

14. Changes

When this policy changes, a new version and effective date are published here. Earlier versions stay available at this address with ?version= followed by the version date.

15. Contact

admin@insiderlife.com

Draft pending counsel review.