Privacy policy

Last Updated: October 6, 2025

The Short Version

We collect minimal information when you use our assessment tool (your name, email, and role). We use this data to send you your assessment results and occasionally share helpful insights about digital sovereignty. We don’t sell your data. We don’t spam you. You can ask us to delete your information anytime.


Who We Are

Sovrnti is a technology research firm based in Bordeaux, France. We help businesses make confident decisions about sovereign technology.

Contact us:

  • Email: hello@sovrnti.io
  • Address: SAS Sovrnti, 16 place des quinconces, 33000 Bordeaux, France

What Information We Collect

Information You Give Us Directly

When you complete our assessment tool, we collect:

  • Your name - so we know who we’re talking to
  • Your email address - to send you your assessment results
  • Your role - to understand your perspective and provide relevant insights

That’s it. We don’t ask for credit cards, company secrets, or your favorite color.

Information Collected Automatically

Like most websites, we collect basic technical information when you visit sovrnti.io:

  • Your IP address
  • Browser type and version
  • Pages you visit on our site
  • Time and date of your visit
  • Referring website (if you came from a link)

This helps us understand how people use our site and spot any technical issues.

We use standard website analytics tools for this. We don’t use this information to identify you personally.


How We Use Your Information

We use the information you provide to:

  1. Send you your assessment results - the main reason you gave us your email
  2. Occasionally send relevant insights - articles, research, or tools related to digital sovereignty (you can opt out anytime)
  3. Improve our services - understanding what tech leaders need helps us build better tools
  4. Respond if you contact us - pretty self-explanatory

We will never:

  • Sell your information to anyone
  • Share your information with advertisers
  • Spam you with irrelevant content
  • Use your data for purposes you didn’t agree to

Who We Share Your Information With

We keep your information private, with these limited exceptions:

Service Providers We Trust

We use a few carefully selected tools to run our business:

  • Assessment platform - to deliver the assessment tool (the form you fill out)
  • Email service - to send you results and occasional updates
  • Website hosting - to keep sovrnti.io online

These providers only access your data to perform their specific services. They can’t use it for their own purposes.

We may disclose your information if required by law, such as:

  • Responding to a valid court order
  • Protecting our legal rights
  • Preventing fraud or security threats
  • Complying with regulations

We’ll notify you if this happens, unless prohibited by law.


Your Rights and Choices

You’re in control of your information. Here’s what you can do:

Access Your Information

Ask us what data we have about you. We’ll send it to you in a readable format.

Correct Your Information

If something’s wrong, let us know and we’ll fix it.

Delete Your Information

Want us to delete everything? Just ask. We’ll remove your data from our active systems within 30 days.

Opt Out of Emails

Every email we send includes an unsubscribe link. Click it and you’re done. You’ll still receive your assessment results if you’ve just completed the assessment, but no marketing emails.

Data Portability

You can request a copy of your data in a common format (like CSV or JSON) to take elsewhere.

To exercise any of these rights, email us at: privacy@sovrnti.io

We’ll respond within 7 days.


How We Protect Your Information

We take reasonable security measures to protect your data:

  • Encrypted connections (HTTPS) for all data transmission
  • Secure storage with reputable service providers
  • Limited access - only team members who need it can access your information
  • Regular security reviews

How Long We Keep Your Information

We keep your information as long as it’s useful and you want us to:

  • Assessment data - until you ask us to delete it, or 1 year of inactivity (whichever comes first)
  • Website analytics - aggregated and anonymized after 12 months
  • Email correspondence - while it remains relevant to our relationship

When we delete your data, we remove it from our active systems. It may persist in backups for up to 90 days, then it’s gone.


Cookies and Tracking

We use minimal cookies:

  • Essential cookies - needed for the website to function
  • Analytics cookies - to understand how people use our site

We don’t use advertising cookies or track you across other websites.

You can block cookies in your browser settings, but some parts of our website may not work properly.


International Data Transfers

We’re based in France (EU), but some of our service providers are located outside the European Union, including in the United States.

When we transfer data outside the EU, we ensure appropriate safeguards are in place:

  • Standard contractual clauses approved by the European Commission
  • Service providers certified under recognized data protection frameworks
  • Equivalent data protection measures

Children’s Privacy

Our services are not intended for anyone under 18. We don’t knowingly collect information from children.

If you believe we’ve accidentally collected information from a child, contact us immediately and we’ll delete it.


Changes to This Policy

We may update this privacy policy occasionally. When we do:

  • We’ll update the “Last Updated” date at the top
  • For significant changes, we’ll email you (if we have your email)
  • For minor updates, we’ll post the new policy here

Continuing to use our services after changes means you accept the updated policy.


Contact Us

Questions? Concerns? Want to exercise your rights?

Email: privacy@sovrnti.io
Address: SAS Sovrnti, 16 place des quinconces, 33000 Bordeaux, France

We’ll respond within 7 days.


Under GDPR, we process your data based on:

  • Consent - when you provide your information through the assessment
  • Legitimate interests - to improve our services and communicate about relevant topics
  • Legal obligation - when required by law

You can withdraw consent anytime by contacting us.


Supervisory Authority

If you’re in the EU and have concerns about how we handle your data, you can lodge a complaint with your local data protection authority.

For France, this is the CNIL (Commission Nationale de l’Informatique et des Libertés): www.cnil.fr