01 · PRIVACY
Review what you share.
The planning screens work in your browser without an account or model call. They do not upload business documents. Where the quote-request service is enabled, you review the exact requirements and contact details before sending them to SovereigntyBox’s request system. The form does not send those details to an AI model, place an order or collect payment. The form reports whether your request was recorded. If a submission cannot be confirmed, keep the same request for retry; you can also save your brief.
Local browser data
The site stores planning drafts, anonymous wishlist and quote-cart selections, theme, configurator, tour and window preferences in browser storage. Anonymous selections stay on this browser until you explicitly import them into a signed-in account. A draft may contain the business description you enter. Clearing site data removes browser copies; it does not delete server records.
Accounts and shopping — local test
SovereigntyBox is the provisional name for this test service; the final legal entity and monitored contact details remain to be confirmed. Test mode saves actual account, wishlist, cart and quote-request records to the local database using the fake details you provide.
The Proxmox shopping preview connects to a separate SovereigntyBox Medusa service and PostgreSQL database. It is currently for synthetic testing only: use an email ending in .invalid, a made-up name and a unique test password. Do not use real customer information on the HTTP preview. Public customer registration and payment remain disabled.
Creating an account sends the name, email and password you enter to this local service. Passwords are hashed by the authentication service. A necessary HttpOnly session cookie identifies your signed-in session; it is not an advertising cookie. Signed-in wishlist, cart and contact changes are stored on the server. Anonymous selections are imported only when you choose that action.
Before submitting a nonbinding quote request, you can review the products, quantities, contact details and requirements that will enter the operator queue. The request is not an order, does not reserve stock and collects no payment. No marketing subscription or model call is made. Email verification, recovery and confirmation messages are not enabled for this local test.
Your account panel can export your records, update contact details and delete your account and saved lists, with personal request details redacted. Operational references may remain. Protected operator backups are separate and require a defined retention and deletion process before real-customer use. Session expiry, access controls and data tools alone are not a certification of compliance.
External resources
Fonts are served with the site. Cloudflare delivers the public website and, where enabled, its request gateway; hosting involves ordinary network requests and request logs. A browser-local draft does not make website visits anonymous. Retention, access and service-provider terms must be confirmed before activating public personal-data collection. External links open the named provider’s service.
Contact & rights
No privacy-rights inbox or controller address is published yet. Those details must be added before the contact channel or telemetry is activated.