SOVO Finance Business privacy policy
Privacy information for Small Business, Medium Business and Corporate deployments controlled by the customer.
Publisher and contact
Microsoft Store publisher display name: Sovo. SOVO HOLDINGS is the product brand used by Awwad Shakshak. For privacy questions, support, or a security concern, email contact@awwadshakshak.com.
Do not include passwords, bank credentials, identity documents, complete financial files, or recovery secrets in an initial support email. Describe the issue with a redacted example where possible.
Organisation records and purpose
Business editions process company books, financial transactions, invoices and bills, customer and supplier details, bank-file contents, uploaded financial originals, derived analysis, employee names and roles, password hashes, permissions, session records, workflow and audit history, and edition-specific investment or engagement records. These support the functions the organisation has enabled.
Small Business uses an authoritative customer-hosted SQLite database. Medium Business and Corporate use a customer-hosted PostgreSQL database. Financial originals, analysis and configured job evidence remain on the selected host. Employee devices can connect to that host over HTTPS. SOVO receives no financial records through the default product deployment.
The default application does not send product telemetry, behavioural analytics, or advertising identifiers to SOVO, and does not sell financial records or use them to train an external AI service. This describes SOVO’s product behaviour, not independent Microsoft, operating-system, email-provider, or customer-hosted services.
The organisation’s responsibilities
The deploying organisation controls the purposes, access assignments, host, retention schedule, and employee use of its records, subject to applicable law. Administrators and authorised staff may access information within their configured permissions. Employees and clients should direct questions about organisation-held records to that organisation.
This policy does not replace the customer’s own privacy notices, legal basis, financial-record obligations, or contracts with clients and staff. SOVO’s travel operations product is a different service and is not covered by this Finance policy.
Optional external connections
Local password authentication works offline. Corporate identity-provider connections contact the provider an administrator explicitly configures. Optional APIs, external hosts, or other integrations require separate authorisation and disclosure of their data flows. Provider catalogue entries alone do not establish banking, SaaS, payroll, or market-data connections. Optional SEC fetching is disabled by default in offline mode.
A customer’s externally hosted deployment or separately arranged support/hosting service requires its own documented service scope and privacy arrangements. It is not silently enabled by using the default edition.
Retention, backups, and deletion
Administrators set retention and backup practices. Backups may include company records, financial originals, audit evidence, and employee credential hashes; protect them as confidential. Uninstall retains company data. Deleting an unreferenced library item can remove its original and derived library result, but related job evidence, accounting references, audit history, and prior backups may remain. Do not promise blanket deletion without checking those records.
Data subjects may have access, correction, deletion, or other rights under applicable law. The organisation must assess requests against its obligations and lawful exceptions. SOVO cannot remotely retrieve or erase a database that it does not hold.
Security, diagnostics, and support
Use properly validated HTTPS for employee connections, appropriate host and database permissions, protected backups, and the edition’s supported authentication controls. Encryption features depend on configuration and supported runtimes; no automatic encryption of every record is promised. Administrators should review diagnostics before sharing and exclude financial content, credentials, recovery secrets, and unnecessary personal identifiers.
If you choose to email support or sales, your email provider sends the information you include to the selected recipient. SOVO receives your address, message, and any attachments you voluntarily send, and uses them to respond to the request. Enquiries do not automatically subscribe you to marketing. Correspondence may be retained for support, dispute handling, or applicable obligations; contact us to request access, correction, or deletion where applicable.
Contact links only open your email application. The product does not send a message or attach a financial file automatically.
Microsoft may process information for Store acquisition, installation, licensing, updates, reviews, diagnostics, and account services. Windows and WebView2 also operate under their own configuration and privacy terms. These services are separate from SOVO’s local product records. Read the Microsoft Privacy Statement.
Policy updates
These policies may change when product behaviour changes. The date above identifies this version. Material changes to data use will be explained before the changed feature is enabled. Microsoft Store and operating-system services have their own terms and privacy notices.