Legal

1. Introduction

Servalian ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (servalian.com), including any other media form, media channel, mobile website, or mobile application related or connected to it (collectively, the "Site").

We use your Personal Information only for providing and improving the Service. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect different information depending on how you interact with our Site. Here is exactly what we collect in each context:

Contact Form

When you submit our contact form, we collect:

• Your name, email address, and message content
• Whether you requested a copy of your message

This is the only place on our Site where we collect your name.

Product Waitlist

When you join a product waitlist, we collect:

• Your email address
• Your selections about interests, data volume, and access needs (used to understand what you are looking for)

Newsletter

When you subscribe to our newsletter, we collect:

• Your email address

Feedback and Ratings

When you leave feedback or rate one of our tools, we collect:

• Your rating (1–5) and optional comment

We do not ask for your name, email, or any other identifying information when you leave feedback or a rating.

Survey

We collect only your survey responses (such as selected challenges, platforms, or team size). We do not ask for your name, email, or any other identifying information.

Web-Based Tools

When you use our tools (Koppie, Groom, Shed), you provide your own data for processing (such as form structures, phone numbers, or spreadsheet files). We act as a processor of your data, not a collector — we do not store it permanently. See Section 9 for details on each tool.

Browsing the Site

When you browse our Site (reading blog posts, viewing pages, etc.), we do not collect any personal information. Our privacy-focused analytics provider (Vulpasoft) collects the following non-personal data:

• Page views and navigation patterns
• Browser type, device information, and referral source
• Session duration and interactions with page elements
• Anonymized IP address information

This data is not linked to any personal information and cannot identify you.

Security and Abuse Prevention

When you submit any form on our Site (contact, waitlist, feedback, ratings), we also record your IP address and browser user agent. This data is used solely for rate limiting and abuse prevention, and is not used to identify or profile you.

3. How We Use Your Information

We use your information only for the specific purpose you provided it. Here is how each type of information is used:

Contact Form Submissions

• To read and respond to your inquiry
• If you requested a copy, to provide a secure viewing link to your message

Waitlist Signups

• To notify you when the product you signed up for becomes available
• To understand what prospective users are looking for (via your interest selections)

Newsletter Subscriptions

• To send you our newsletter (every email includes an immediate unsubscribe link)

Feedback, Ratings, and Surveys

• To improve our tools and website based on your anonymous feedback

Analytics Data

• To understand how visitors use our Site so we can improve the experience
• To monitor for abuse and ensure the security of our services

We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not use your data to build advertising profiles or for any purpose beyond what is described above.

4. Data Security

We implement a variety of security measures to maintain the safety of your personal information when you enter, submit, or access your personal information, including:

• All information is encrypted during transmission using TLS (Transport Layer Security)
• All stored data is encrypted at rest
• Access to stored data is limited to authorized Servalian personnel only
• Session-based authentication using unique tokens for API requests
• Rate limiting and security monitoring on all endpoints
• Secure temporary storage with automatic deletion for tool-generated content

5. Analytics

We use Vulpasoft, a privacy-focused analytics platform, to understand how visitors interact with our website. Vulpasoft is designed with privacy at its core:

• Does not use cookies for tracking
• Stores a minimal anonymous visitor identifier in localStorage (vs_uid)
• Does not collect or store personally identifiable information (PII)
• Does not perform cross-site tracking
• Masks all text and personal information in session recordings

Information collected by Vulpasoft includes:

• Page views and navigation patterns
• Interactions with website elements (clicks, form submissions)
• Referrer information
• Browser type and device information
• Session recordings (with all text and personal information masked)
• Session duration and active time on pages

This data helps us understand how visitors use our website so we can improve the user experience. Vulpasoft does not track you across other websites and does not build advertising profiles.

For more information about Vulpasoft's privacy practices, visit vulpasoft.com.

6. Cookies and Local Storage

Essential Cookies

Our website uses a single cookie, which is essential for the site to function securely:

• session_token: A unique session identifier used for authenticating API requests and rate limiting. This cookie is httpOnly, secure, and scoped to our domain (expires after 24 hours)

We do not use any cookies for advertising, marketing, or cross-site tracking purposes.

Preferences (Local Storage)

We store a small number of user preferences in your browser's local storage to enhance your experience:

• theme: Your preference for light or dark mode
• snow: Your preference for the seasonal snow effect
• srv_dismissed: Whether you have dismissed the privacy transparency notice

These items do not contain personal information and are used solely to remember your visual preferences between visits.

Analytics (Local Storage and Session Storage)

Our analytics provider, Vulpasoft, stores the following in your browser:

• vs_uid / vs_uid_ts: An anonymous visitor identifier and its timestamp, stored in localStorage
• vs_tab: A tab-level session identifier, stored in sessionStorage (cleared when the tab closes)

These identifiers are anonymous and are not linked to any personal information. Vulpasoft does not use cookies.

Tool-Specific Storage

When you actively use our web-based tools, additional data may be stored locally in your browser for functionality purposes. This data is only created when you use the respective tool:

• Koppie / Shed: OAuth security state parameters temporarily stored in sessionStorage during authentication flows
• Feedback modal: A session flag (srv_fbm) to avoid showing the feedback prompt repeatedly within the same tab

All tool-specific storage is functional in nature and does not contain tracking data. Security-related items (OAuth state, PKCE verifiers) are ephemeral and cleared after use.

Third-Party Services

Our site does not use third-party cookies for advertising or cross-site tracking purposes. We integrate with the following third-party services:

• Typeform / JotForm: For our tools, we temporarily access form platform data with your explicit authorization
• Vulpasoft: For privacy-focused analytics and session recording, with no PII collection

Your Choices

You have control over the data stored in your browser:

• Essential cookies cannot be disabled as they are necessary for site security and functionality
• You can clear all locally stored preferences and data through your browser's settings
• You can use your browser's private/incognito mode to browse without persistent storage
• Tool-specific data can be cleared individually through your browser's developer tools or storage settings

For more details about the specific cookies and storage items we use, please see our Cookie Policy.

7. Data Retention

Here is exactly how long we retain each type of data:

Personal Data

• Contact form submissions (name, email, message): Stored until you request deletion
• Waitlist signups (email, preferences): Stored until you unsubscribe or request deletion. When you unsubscribe, your email is anonymized (we keep the anonymized preferences data for aggregate analysis)
• Newsletter subscriptions (email): Deleted immediately when you unsubscribe

Feedback, Ratings, and Surveys

• Feedback, ratings, and surveys: Stored indefinitely. These contain no name or email — only your responses, plus IP address and user agent for abuse prevention

Tool Session Data

• Koppie: Your authentication token is encrypted and stored for 2 hours, then automatically deleted. Cached form data expires after 5–10 minutes. Export preview links expire within 1–2 hours
• Shed: Uploaded files are held in memory for 30 minutes, then automatically deleted. Authentication tokens are encrypted and stored for 1 hour
• Groom: No data is stored. Phone numbers are processed and returned immediately; nothing is saved on our servers

Security Data

• Session tokens: Expire after 24 hours
• Rate-limiting records: Expire after 24 hours

Your Data Protection Rights

You have the following rights regarding your personal data:

• Right to Access: You have the right to request copies of your personal data
• Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete
• Right to Erasure: You have the right to request that we erase your personal data
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data

If you would like to exercise any of these rights, please contact us using the information provided in the "Contact Us" section below.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

9. Web-Based Tools

All of our tools follow the same core principles: we process your data only to provide the service you requested, we use the minimum permissions necessary, and we do not retain your data beyond the active session.

Koppie — Form Export Tool

Koppie exports Typeform and JotForm form structures and conditional logic to PDF, Word, Markdown, and other formats. When using Koppie:

• Authentication: You connect your form platform account through OAuth or API key. Your credentials are encrypted (AES) and stored for 2 hours, then automatically deleted
• Minimum Permissions: We request only read access to your forms — the minimum required for the tool to function
• Data Processing: Form structure data is fetched from your account, processed to generate exports, and returned to you. We do not permanently store your form data
• Caching: Form data is cached for 5–10 minutes to avoid redundant API calls, then automatically cleared

Groom — Phone Number Formatter

Groom bulk-formats and validates phone numbers. When using Groom:

• Stateless Processing: Phone numbers are sent to our formatting service, processed, and returned immediately. No data is stored on our servers at any point
• No Authentication Required: Groom does not require an account or login
• No Logging of Input: We do not log or store the phone numbers you submit. Only aggregate statistics (request count, processing time) are recorded
• Rate Limiting: Requests are rate-limited to 50 per hour per IP address to prevent abuse

Shed — JotForm Data Splitter

Shed splits JotForm Configurable List and Product List data into separate columns for analysis. When using Shed:

• File Uploads: If you upload a CSV or Excel file, it is held in server memory for 30 minutes, then automatically deleted. Files are never written to disk
• API Connections: If you connect via JotForm API or Google Sheets, your credentials are encrypted and stored for 1 hour, then automatically deleted
• Data Processing: Your spreadsheet data is processed to split and expand columns, then returned to you. We do not permanently store your data
• No Account Required: Shed does not require a Servalian account. Authentication is only with your JotForm account when using the API connection method

10. Email Communications

Newsletter

When you subscribe to our newsletter:

• We collect your email address and any optional information you provide
• Every email includes an unsubscribe link that immediately removes you from our mailing list
• You can unsubscribe at any time without providing a reason
• Unsubscribing deletes your email from our mailing system

Waitlist

When you join our product waitlists:

• We collect your email address and any optional information you provide (name, company)
• We use this information to notify you about product launches and availability
• Every waitlist email includes a link to immediately remove your email from the specific waitlist
• You can remove yourself from any waitlist at any time

Contact Form

When you submit our contact form:

• We collect the information you provide (name, email, message content)
• You can optionally request to receive a copy of your message
• If requested, we provide access to your message through a secure viewing link that requires your reference ID to access
• The viewing link uses a cryptographically random token and is not discoverable without both the specific URL and your reference ID
• Messages are not sent directly via email for privacy and security reasons

11. Contact Us

If you have any questions about this Privacy Policy, please contact us: