1. Who is responsible
Veridorn LLC, a Wyoming limited liability company, operates the Savorum websites, Savorum Cloud, and Savorum Connect and develops the Savorum applications. This policy explains the information we handle through those activities.
Contact us at info@veridorn.com. Veridorn is responsible for the personal information it processes to operate these services. Payment sellers and independently operated Savorum servers have their own responsibilities, as explained below.
2. Self-hosted Savorum, Cloud, and Connect
Self-hosted Savorum. Your library is stored on the server you or its operator control. Using our software does not, by itself, send a copy of that library to Veridorn or require a Cloud subscription. Applications connect to the server you configure and services you choose to use. The server's operator is responsible for its hosting, access, and privacy practices. Information you separately send us, such as a support email, is covered by this policy.
Savorum Cloud. We and our infrastructure providers process the library and account information necessary to host your workspace, give you access, and operate the managed service. Cloud hosting is not the same as keeping all information exclusively on your own hardware.
Savorum Connect. Connect provides remote access to a compatible self-hosted Savorum instance. Your library remains stored on the server you or its operator control. The server operator remains responsible for its operation, security, and backups. Cloud's household-content retention and deletion periods below do not apply to data held on that server.
3. Information we process
Accounts and households. Email addresses, account identifiers, authentication information, settings, household memberships, and invitations. Some details may come from the person who invites you.
Library content. Recipes, images, notes, and other files or information you upload, import, or create in your hosted workspace. Information available to other household members depends on their permissions and your sharing choices.
Purchases. Customer and transaction identifiers, subscription status, plan, payment and renewal dates, and billing information supplied by the seller, such as your name, email, billing address, and purchase history. We do not receive full payment-card numbers or card security codes.
Service operations. Network and security information such as IP addresses, request times, authentication events, error records, and resource consumption needed to deliver, secure, and troubleshoot the service. These operational records are not behavioral advertising profiles.
Support. Messages and attachments you choose to send us. Please send only information needed to understand your request.
4. Why we use it
We use account and library information to provide the service you request, including authentication, household access, storage, imports, exports, and the backup features included in your plan. We use purchase records to activate and manage paid access. Where a contractual legal basis applies, these activities are necessary to perform our agreement with you.
We use relevant operational and support information for our legitimate interests in securing the service, diagnosing faults, preventing abuse, and answering inquiries, balanced against your rights. We retain information required to meet legal obligations. When a particular optional activity requires consent, we ask separately and allow you to withdraw it.
We do not sell personal information, use your recipe library for advertising, or train machine-learning models on it. We do not add behavioral advertising or product-analytics trackers to Savorum. Necessary account, transaction, and operational processing still occurs when you use Cloud.
Providing basic account information is necessary to use Cloud. You choose what library content to add and what to share with other users. We do not use automated profiling to make decisions about you that have legal or similarly significant effects.
5. Who receives information
We use infrastructure and communications providers to operate the service. They receive the information needed for their role and are subject to appropriate contractual restrictions.
| Provider | Purpose and information involved |
|---|---|
| Cloudflare | Hosting and delivering the Savorum website; network requests and operational information |
| Fly.io | Hosting the Cloud services and customer workspaces; hosted data and operational information |
| Amazon Web Services | Cloud backup storage in S3 and backup processing, including prepared exports; hosted content and backup metadata |
Paddle is an independent seller and controller for purchases it handles, not merely a processor acting on our instructions. We exchange information needed to fulfill and manage your purchase. Its own Privacy Notice explains its processing. Apple separately handles information for purchases billed through Apple; we receive the transaction information needed to verify and manage access.
When you use external recipe sources or other third-party integrations, the relevant service receives the requests needed for that action. We do not send your full library to a recipe source merely because you import a recipe from it.
We may disclose necessary information to comply with law, protect people or the service, or establish or defend legal claims. A business transfer may involve relevant records, subject to applicable law, confidentiality, and notice requirements. It does not give a successor permission to disregard this policy or your rights.
When responding to a specific misuse report or security concern, we may review the limited account, operational, or Cloud content information reasonably needed to assess and address it. We may restrict access or preserve relevant information where required by law or necessary for a security investigation or legal claim.
6. Cookies, local storage, and external services
The applications use cookies or equivalent local storage where needed to maintain sign-in, protect sessions, and remember settings. Local application data may remain on your device until you remove it. We do not use that storage for cross-site advertising tracking.
Checkout and other independently operated services may use their own cookies and security technologies. Their policies and choices apply to their processing. Our statements about Savorum's own tracking practices are not a promise that every external service has identical practices.
7. Locations and security
Veridorn operates from the United States. Where we offer a storage-region choice, we identify the data covered by it; that choice does not necessarily confine billing, support, or network operations to the same region.
We use safeguards appropriate to the information we hold, including encrypted network connections and restricted administrative access. Access to hosted content is limited to what is needed for service operation, authorized support, recovery, security, or legal compliance. Savorum Cloud is not offered as an end-to-end encrypted service in which the operator is technically unable to access hosted content.
No service can promise complete security. Contact us promptly about suspected unauthorized access.
8. Retention and deletion
We retain Cloud household content while its trial or paid service is active, including any permitted billing grace period. When a 14-day trial ends without a subscription, a paid period ends after cancellation, permitted billing grace ends, or a refund ends paid access, we retain the content for at least 30 days so the authorized household owner can request an export without resubscribing. We tell the owner the deadline and allow at least seven days after a late notice is accepted for delivery. A temporary billing provider error does not itself start this period.
An authorized household deletion request ends the export period and starts deletion of the shared collection for all members after outstanding work drains. Cleanup removes the household’s incremental backup repository and prepared export downloads, checks backup cleanup before and after infrastructure removal, and retries provider failures until cleanup is confirmed. These household backups have no additional 30-day retention period after an explicit deletion request. Our policy requires live content removal within seven days after deletion becomes due and backup removal within 30 further days; these are upper bounds, not waiting periods. Provider failures can delay completion and require further retries. If a service recovery backup is restored, outstanding deletion requirements are reapplied. Routine Cloud operational logs are retained for up to 30 days.
Limited records may be held longer for a specific security investigation, legal obligation, or dispute, and are removed when that reason ends. Support correspondence is kept while needed to answer the request and resolve related issues. Limited transaction and business records may need to remain for legally required recordkeeping periods.
Deleting a personal account does not necessarily delete shared household content or copies held by other users. We explain the scope when handling an account or household deletion request, subject to applicable privacy rights. Paddle and Apple retain their own transaction records under their policies and obligations.
9. Your choices and rights
You can edit information through the available account and recipe controls and export your library. Contact info@veridorn.com for access, correction, deletion, or help with another privacy request. We may ask for proportionate verification to protect the account and other household members.
Depending on your location, you may also have rights to restrict processing, obtain a portable copy, withdraw consent, or use an authorized representative. You may have a right to object to processing based on legitimate interests. Contact us to exercise it. Withdrawing consent does not invalidate processing already carried out on that basis.
Where an appeal right applies, you can appeal our response by emailing the same address and identifying it as an appeal. You may complain to your local privacy regulator without contacting us first. We do not penalize you for exercising applicable privacy rights.
10. Children and changes
Savorum Cloud is not directed to children under 13. We do not knowingly allow accounts for children below that age. Contact us if you believe such information has been provided so we can investigate and take appropriate action. Higher local age or guardian-consent requirements still apply.
We will update the effective date when this policy changes and provide additional notice of material changes where appropriate or legally required. We will obtain consent where the law requires it.