Souvenir, Inc. ("Souvenir," "we," "us," or "our") operates the Souvenir platform at getsouvenir.com, a unified AI workspace that connects multiple large language models and AI services into a single interface with persistent context management, intelligent model routing, workflow automation, and organizational tools. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you access or use our Services (as defined in our Terms of Service). It applies to all users of our Services in the United States, Canada, and India, and includes jurisdiction-specific disclosures for each. By creating an account or using our Services, you acknowledge that you have read and understood this Privacy Policy. Where required by applicable law, we will obtain your consent before processing your personal information.
1. Overview
Souvenir, Inc. ("Souvenir," "we," "us," or "our") operates the Souvenir platform at getsouvenir.com, a unified AI workspace that connects multiple large language models and AI services into a single interface with persistent context management, intelligent model routing, workflow automation, and organizational tools.
This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you access or use our Services (as defined in our Terms of Service). It applies to all users of our Services in the United States, Canada, and India, and includes jurisdiction-specific disclosures for each.
By creating an account or using our Services, you acknowledge that you have read and understood this Privacy Policy. Where required by applicable law, we will obtain your consent before processing your personal information.
2. Information We Collect
2.1 Information You Provide
• Account information: name, email address, password, and account credentials
• Inputs: prompts, files, images, instructions, and other content you submit to the platform ("Inputs")
• Workspace data: projects, workflows, saved context, Personas, Pins, and AI-generated outputs ("Outputs")
• Payment information: billing details processed by our payment processor, Stripe. We do not store credit card numbers, bank account details, or UPI IDs on our servers.
• Communications: support inquiries, feedback, and correspondence with us
2.2 Information Collected Automatically
• Device and browser information: type, operating system, screen resolution, and browser version
• IP address and approximate geographic location (country/region level)
• Usage data: features accessed, interaction patterns, session duration, and activity timestamps
• Log data: server logs including timestamps, error reports, referring URLs, and system activity. We use Sentry for error monitoring, which may capture request metadata and stack traces when errors occur.
• Cookies and similar technologies: as described in our Cookie and Tracking Disclosure Policy
• Approximate geolocation: we use ip-api.com to resolve your IP address to city, region, and timezone for localization purposes. Your IP address is transmitted to this third-party service.
2.3 Information from Third-Party Integrations
If you connect third-party services to your Souvenir account, we may access and process data necessary to enable those integrations, in accordance with the permissions you grant.
3. How We Use Your Information
We use collected information for the following purposes:
• To provide, operate, and maintain the platform, including persistent context and memory across workflows
• To route your Inputs to appropriate AI models based on your settings or our auto-routing algorithm
• To process payments and manage your subscription
• To improve output quality, system performance, and user experience
• To support collaboration within shared workspaces and team accounts
• To respond to support requests, user inquiries, and feedback
• To monitor usage for abuse prevention, security, and enforcement of our Terms of Service and Acceptable Use Policy
• To comply with legal obligations, respond to lawful requests, and protect our legal rights
• To send transactional communications (account confirmations, billing notices, security alerts)
We do not use your Inputs or Outputs to train our own AI models unless you explicitly opt in.
4. AI Models and Third-Party Data Processing
Souvenir integrates with multiple third-party AI model providers, AI services, and processing infrastructure. When you submit an Input, it may be transmitted to one or more of the following providers for processing. AI requests are routed through OpenRouter, a third-party middleware that directs your Inputs to the appropriate model provider.
Text and Chat Models (United States): OpenAI, Anthropic, Google Gemini, xAI / Grok
Text and OCR Models (France): Mistral AI
Search and Data Retrieval (Germany): Jina AI
Image Generation (Germany): Flux by Black Forest Labs
Text and Chat Models (People’s Republic of China): DeepSeek, Alibaba / Qwen, Moonshot AI / Kimi, ChatGLM / Zhipu AI — data may be processed and stored in China
AI Request Routing: OpenRouter (United States) — middleware service that routes your Inputs to the appropriate AI model provider
Vector Embeddings (United States): AWS Bedrock with Cohere embed-v4 — generates semantic embeddings from your content for search and memory features
Document Processing (United States): AWS Textract extracts text from uploaded documents and images via OCR. Mistral OCR API may also be used for document processing on certain plans. Local parsing (PyMuPDF, python-pptx) is performed on our servers.
Code Execution: User-submitted or AI-generated code may be executed in isolated Docker sandbox containers on our infrastructure in the United States.
Important Data Sovereignty Notice: When you select or are routed to DeepSeek, Alibaba/Qwen, Moonshot AI/Kimi, and ChatGLM/Zhipu AI, your Input data is transmitted to servers located in the People’s Republic of China. These providers may be subject to Chinese data access laws. You may disable China-based AI models (DeepSeek, Alibaba/Qwen, Moonshot AI/Kimi, and ChatGLM/Zhipu AI) at any time from your account Settings. When disabled, your data will not be transmitted to servers in the People’s Republic of China. Our auto-routing algorithm preferences US-based inference providers with Zero Data Retention (ZDR) enabled by default.
Each AI provider processes your data under their own terms and privacy policies. We share only the data necessary to fulfill your request. Under our API agreements with US- and Europe-based providers, your Inputs and Outputs are not used for model training. China-based providers may reserve the right to use inputs/outputs for model training under their own terms.
5. Data Storage and Retention
• Your data is primarily stored on Amazon Web Services (AWS) infrastructure in the United States. User data, conversations, personas, memories, and document embeddings are stored in a PostgreSQL database with pgvector extension. Uploaded files and documents are stored in AWS S3.
• We store conversation history, context, memory, and workspace data to provide persistent functionality across sessions
• Data is retained for as long as your account is active or as needed to provide the Services
• You may request deletion of your data at any time by contacting info@getsouvenir.com
• Upon account termination, we will delete your Materials within 90 days, except where retention is required for legal, security, or compliance purposes
• Analytics data is retained for up to 24 months
• Session cookies are deleted upon logout or browser close
6. Data Sharing and Disclosure
We do not sell your personal data. We do not share your personal data for cross-context behavioral advertising.
We may share data in the following limited circumstances:
• With AI model providers: to process your Inputs and generate Outputs, as described in Section 4
• With service providers: including Stripe (payments), Auth0 (authentication), AWS (hosting, infrastructure, S3 storage, Textract OCR, Bedrock embeddings), OpenRouter (AI model routing), Cohere (vector embeddings via AWS Bedrock), Sentry (error monitoring — may capture request metadata and stack traces), ip-api.com (IP-based geolocation for localization), Mixpanel and Google Analytics (usage analytics), and email service providers (transactional communications)
• To comply with law: in response to valid legal process, court orders, subpoenas, or regulatory requests from authorities in the United States, Canada, or India
• To protect rights and safety: to enforce our Terms of Service, protect the security of users and the platform, or prevent fraud
• In connection with a business transaction: if Souvenir, Inc. is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, subject to this Privacy Policy
7. International Data Transfers
Souvenir, Inc. is based in the United States. Your information is primarily stored and processed in the United States. Certain AI models process data in France, Germany, and the People’s Republic of China, as disclosed in Section 4.
For users in Canada, we ensure that personal information transferred outside Canada receives a comparable level of protection through contractual safeguards with our service providers, as required under PIPEDA.
For users in India, cross-border data transfers are currently permitted under the Digital Personal Data Protection Act, 2023, unless the Central Government restricts transfers to specific jurisdictions. We will comply with any future restrictions.
8. Your Rights and Choices
8.1 All Users
Regardless of your location, you may:
• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data
• Export your data in a machine-readable format
• Withdraw consent where processing is based on consent
• Close your account at any time
8.2 United States Residents
California Residents (CCPA/CPRA): You have the right to know what personal information we collect; request deletion; opt out of sale or sharing (we do not sell or share personal information); and non-discrimination. Contact info@getsouvenir.com.
Other U.S. State Privacy Laws: If you reside in a state with a comprehensive privacy law (Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, among others), you may have similar rights. Contact info@getsouvenir.com.
8.3 Canadian Users (PIPEDA)
• Access their personal information held by us
• Challenge accuracy and have information amended
• Withdraw consent, subject to legal or contractual restrictions
• Know how personal information is used and to whom it has been disclosed
We obtain meaningful consent for collection, use, and disclosure. Express consent is required for sensitive information, including AI processing of your content.
8.4 India Users (DPDP Act, 2023)
• Access a summary of personal data processed
• Correct and update inaccurate personal data
• Erase personal data no longer necessary for its original purpose
• Nominate another individual to exercise rights in event of death or incapacity
• File a grievance and complain to the Data Protection Board of India
We process your personal data based on your consent, which you may withdraw at any time by contacting info@getsouvenir.com. Withdrawal does not affect prior lawful processing.
8.5 How to Exercise Your Rights
Email: info@getsouvenir.com
Address: 211 28th Street, Des Moines, IA 50312
We will respond within 30 days (or sooner if required by applicable law).
9. Security
We implement reasonable technical and organizational measures to protect your personal data, including encryption of data in transit (TLS/SSL) and at rest, role-based access controls, regular security assessments, and secure authentication protocols via Auth0.
No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
In the event of a personal data breach, we will notify affected users and relevant authorities in accordance with applicable law, including U.S. state breach notification laws (including Iowa Chapter 715C), PIPEDA in Canada, and the DPDP Act in India (once in effect).
10. Team and Workspace Data
• Workspace owners and administrators may control access permissions and account settings
• Content shared within a workspace may be visible to other members
• You are responsible for data you share within collaborative environments
11. Children's Privacy
Souvenir is not intended for individuals under 18. We do not knowingly collect personal data from anyone under 18. If we learn we have, we will delete it promptly. Contact info@getsouvenir.com to report.
13. Do Not Track Disclosure
We do not currently respond to DNT signals as no universally accepted standard exists.
14. Third-Party Links
We are not responsible for privacy practices of third-party websites linked from our Services.
15. Changes to This Privacy Policy
We will provide at least 14 days’ notice before material changes take effect. Continued use constitutes acceptance.
16. Contact Information
Company: Souvenir, Inc.
Address: 211 28th Street, Des Moines, IA 50312
Email: info@getsouvenir.com
Website: getsouvenir.com