Privacy Notice

1. Who We Are

SaySo is the data controller for the personal data you provide when using SaySo OS. We are responsible for deciding how your personal data is collected, used, and protected.

2. What Data We Collect

We collect and process the following categories of personal data:

• Account data: name, email address, login credentials
• Usage data: prompts, generated outputs, feature usage, and interaction logs
• Technical data: IP address, device identifiers, browser type, operating system
• Support data: messages and communications with our support team

3. How We Use Your Data

We process your personal data for the following purposes and legal bases:

• Contract performance: to create and manage your account, provide the service, and process payments
• Legitimate interests: to improve our product, prevent fraud, ensure security, and provide customer support
• Consent: for optional marketing communications (you can withdraw consent at any time)
• Legal obligation: to comply with applicable laws and regulations

4. Who We Share Data With

We share your data only with trusted recipients necessary to deliver our service:

• Service providers: hosting, analytics, error tracking, and customer support tooling
• Paddle: our Merchant of Record, who processes payments, subscription management, tax compliance, and invoicing on our behalf
• LLM providers: your prompts are forwarded to the AI model providers you choose (e.g., OpenAI, Anthropic) for processing
• Professional advisers: legal and accounting professionals where necessary
• Authorities: where required by law or to protect our legal rights

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the service. When you delete your account, we will remove your data within 90 days, except where we are legally required to retain it for tax, accounting, or regulatory purposes.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right to access your data
• Right to rectify inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

To exercise any of these rights, email us at ops@sayso.app. We will respond within one month.

7. Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit and at rest, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure.

8. Cookies

SaySo OS uses essential cookies necessary for the operation of the platform (e.g., session management, authentication). We also use analytics cookies to understand how users interact with our product. You can manage your cookie preferences through your browser settings.

9. International Transfers

Your personal data may be transferred to and processed in countries outside your jurisdiction, including the United States (for LLM provider processing). Where required, we use Standard Contractual Clauses and other appropriate safeguards to ensure your data is protected.

10. Changes to This Notice

We may update this Privacy Notice from time to time. Material changes will be communicated via email or through the platform. Please review this page periodically for the latest information.

11. Contact

If you have any questions about this Privacy Notice or how we handle your data, please contact us at ops@sayso.app.