We built Sorinva with privacy as a design principle — not a checkbox. This policy explains exactly what data we collect, why we collect it, how we use it, and what rights you have over it. Written in plain language because you deserve to understand it.
Sorinva is a product of Talentnest Innovations Limited, a company incorporated in the Federal Republic of Nigeria ("Sorinva", "we", "us", or "our"). Sorinva is a workplace learning and HR operations platform delivered inside Slack, Microsoft Teams, WhatsApp, and Discord. We help companies grow their employees' skills through daily 90-second lessons, comprehension scoring, an HR analytics dashboard, and optional People Operations tools.
For questions about this policy, contact us at privacy@sorinva.com.
We collect only what is necessary to deliver the learning and HR experience. Nothing more.
Companies that activate optional People Operations add-ons may collect additional data through Sorinva's guided workflows:
This data is visible only to authorised HR administrators in your organisation and is used exclusively for the purpose it was collected for. It is never used to train AI models.
What we never collect: Messages exchanged between employees. We never read, store, log, or process the text of conversations employees have with each other on any platform. Sorinva only processes responses that employees submit directly to the Sorinva bot through guided prompts and interactive buttons.
| Data | Why we use it |
|---|---|
| Platform user ID, name, timezone | Deliver the right lesson to the right person at the right time |
| Job title | Automatically assign employees to domain-specific learning packs |
| Lesson responses and scores | Calculate comprehension scores, streaks, and mastery levels for employees and HR reporting |
| Weekly feedback ratings | Help the Sorinva team understand curriculum quality and improve lessons over time |
| People Ops data (where applicable) | Generate HR insights, track performance cycles, support goal management, and aggregate feedback — all within your organisation only |
| Admin email | Send billing reminders, plan notices, and account-critical communications |
We do not use any data for advertising, profiling, or any purpose not directly related to operating the platform for your organisation.
Sorinva uses artificial intelligence to power several features of the platform. We work with carefully selected third-party AI infrastructure providers based in the United States. In each case, only the minimum information needed for the task is shared — no employee personal data ever leaves the platform boundary.
We never send employee names, individual scores, raw responses, or any personally identifiable data to our AI providers. Platform data is never used to train AI models.
| Service | Purpose | Data location |
|---|---|---|
| Slack API | Delivering lessons, reading profiles, processing interactive responses for Slack-connected companies | Slack's infrastructure |
| Microsoft Azure Bot Service | Delivering lessons and interactive prompts for Teams-connected companies | Microsoft's infrastructure |
| WhatsApp Business API | Delivering lessons and collecting responses for WhatsApp-connected employees | Meta's infrastructure |
| AI language model services | Curriculum generation, document processing for custom packs, and anonymised qualitative synthesis. No employee personal data is shared. | United States |
| Neon (PostgreSQL) | Encrypted primary database | United States (AWS us-east-1) |
| Upstash (Redis) | Session state and delivery tracking | United States |
| Render | Application hosting | United States |
| ZeptoMail | Transactional email (billing notices, account alerts). Only the admin email address is processed. | India / United States |
| Flutterwave | Payment processing for NGN subscriptions | Nigeria / United States |
| Paddle | Payment processing for USD subscriptions and automatic renewal | United Kingdom / United States |
/sorinva pauseWe process data under the lawful basis of legitimate interests — specifically, the legitimate interest of organisations in developing their workforce. EEA employees have the right to data portability and the right to object to processing.
Talentnest Innovations Limited (Sorinva) is a registered Data Controller/Processor with the Nigeria Data Protection Commission (NDPC) under the Nigeria Data Protection Act 2023 (NDPA). Our registration is publicly verifiable on the NDPC portal.
As a registered entity, we are bound by the full obligations of the NDPA 2023, including lawful basis of processing, data minimisation, purpose limitation, storage limitation, data subject rights, and mandatory breach notification. We undergo periodic data protection audits and maintain a Data Protection Officer (DPO) function in line with statutory requirements.
Data subjects in Nigeria have the right to: access their personal data, request correction of inaccurate data, withdraw consent, request deletion, and lodge a complaint with the NDPC at ndpc.gov.ng.
Verify our NDPC registration: Scan the QR code in our footer or visit services.ndpc.gov.ng to verify our registration status directly on the NDPC portal.
We retain data for as long as your company has an active Sorinva subscription. Your data is not automatically deleted when a subscription expires or lapses — it is preserved intact so you can resume without data loss. All employee learning data and company configuration data is permanently deleted within 30 days of a deletion request. To request deletion, contact privacy@sorinva.com.
In the event of a data breach affecting personal data, we will notify affected organisations within 72 hours of becoming aware of the incident, in line with GDPR requirements.
When we make significant changes, we will notify the HR administrator at each company via email and platform message. The "Last updated" date at the top of this page will always reflect the most recent version.
This privacy policy applies to the Sorinva service. If you are an employee with questions about how your company uses your learning data, please speak with your HR administrator.