This English version is for reading. The German version is the one that applies.
Privacy policy
For this site and the client portal linked from it · as of October 2026
1. Who is responsible for what
Two parties share this site, and each is responsible for its own part.
| What | Responsible |
|---|---|
| The content of this storefront: text, pictures, the pieces shown | your advisor |
| Messages and calls directly with your advisor | your advisor |
| Everything else in this policy: visits to this site, ring kits, "ask anything", sign-in, your projects, orders and payment | Savro |
Your advisor: Shreya Bansal, Gedühren 3, 55743 Idar-Oberstein · shreya@aureya.studio
Savro, a brand of World Wide Gems Edelsteinhandel OHG, Am Markt 3, 55743 Idar-Oberstein, Germany · +49 6781 42497 · support@savro.co. Represented by the personally liable partners Ramesh Agrawal and Adarsh Bansal. No data protection officer is appointed, as the statutory conditions are not met. "We" in the rest of this policy means Savro.
2. What your advisor sees
Your advisor is self-employed and works with us. So that they can advise you, they see in our system your name and contact details, your ring kit orders, your projects and designs, and the messages and pictures you share about them. Advisors are bound by their agreement with us to use this only for advising you, and they do not see payment details.
3. What we process, and why
| What | What for | Legal basis | How long |
|---|---|---|---|
| Visiting this site: IP address, time, page, browser | Showing the site, security | Art. 6(1)(f) GDPR, legitimate interest | 30 days |
| Ring kit order: first and last name, email, postal address | Sending the kit, following up on your size | Art. 6(1)(b), pre-contractual steps at your request | If no order follows: 12 months after the kit was sent. If you order: as client data, below |
| Client login: email, one-time code, session | Access to the client portal | Art. 6(1)(b), contract | The code expires after a short time; the session ends when you leave |
| Client and project data: name, address, phone, piece specification, messages, uploads | Advice, offer, making, delivery, aftercare | Art. 6(1)(b), contract | During the relationship, then until the warranty (2 years) and the guarantee (4 years) have run out |
| Questions to "ask anything": your question, the page you asked from, the answer | Answering questions about pieces, stones, sizing and care | Art. 6(1)(f) on this site; Art. 6(1)(b) in the client portal | On this site, 30 days. In the client portal, with your project |
| Payment data: name, address, payment status (no full card details) | Deposit and balance | Art. 6(1)(b), contract | 10 years |
| Invoices | Commercial and tax law obligations | Art. 6(1)(c); § 147 AO, § 257 HGB | 10 years |
| Service emails: email, name, content | Sign-in codes, confirmations, status updates | Art. 6(1)(b), contract | Logs 30 days |
| Error logs (server-side) | Stability and security | Art. 6(1)(f) | 90 days |
| Backups | Resilience | Art. 6(1)(f) | Rolling, encrypted |
Uploaded files can only be opened by someone signed in to the project. We need your details to carry out an order; without them we cannot make your piece. There is no automated decision-making, including profiling.
4. Ring kits
If you order a ring kit, we use your name and email so your advisor can follow up on the size, and your address to send the kit. We keep that address with your details, and if you later order a piece it is suggested as the delivery address; you confirm or change it. You can ask us to delete it at any time.
5. "Ask anything"
Answers are written by an AI model run for us by Google Cloud (Vertex AI) in the EU. Your questions are not used to train it. Please don't put payment details or anything you would rather keep private in a question.
6. Texting your advisor
The "text" button opens WhatsApp or your phone's messaging app with a first message filled in. What you send goes straight to your advisor's phone and does not pass through this site. Your advisor is responsible for these messages, and the privacy terms of the messaging service you use apply to them.
7. Cookies
This site uses no cookies or similar technology for advertising or analytics. When you are signed in to the client portal, one strictly necessary cookie keeps your session; it needs no consent (§ 25(2) no. 2 TDDDG).
8. Who receives data
| Service | Purpose | Location |
|---|---|---|
| Google Cloud (Cloud Run, Storage, Identity Platform) | Hosting this site and the client portal, files, sign-in | EU |
| Neon | Database | EU |
| Sentry | Error monitoring (server-side) | Germany |
| Resend | Service emails | EU |
| Google Cloud Vertex AI (Anthropic) | "Ask anything" | EU |
| Stripe Payments Europe, Ltd. | Payments | EU, partly USA |
These providers are processors under Art. 28 GDPR. Transfers to the USA are based on the Standard Contractual Clauses (Art. 46) and, where applicable, the EU-US Data Privacy Framework (Art. 45).
We also pass data to your advisor (section 2), to shipping companies, to our tax adviser, and to public authorities where the law requires it.
9. Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), to object to processing based on legitimate interests (Art. 21), and to withdraw consent with effect for the future (Art. 7(3)).
An email to support@savro.co is enough. We reply within one month. Where the law requires us to keep data, we restrict its use instead of deleting it. For the content of this storefront or your direct messages with your advisor, write to your advisor.
You can complain to: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz, Germany, poststelle@datenschutz.rlp.de
10. Security and changes
Data is sent encrypted (TLS) and stored encrypted in the database and file storage. Access to production systems is limited to a small group and protected by multi-factor authentication.
We update this policy when our processing or the law changes. The version published on this page applies.