Privacy Policy

What we collect

• Your email address, when you join the waitlist, along with when you joined, which signup form on the page you used, and how you found us: the referral code in the link you followed and the website that sent you, if your browser shares it.
• Basic technical data such as your IP address, browser type and the pages you request. Our hosting provider records this automatically in server logs whenever you visit.
• Anonymous usage statistics, such as which pages are viewed, the referring site, and your country, browser and device type. Vercel Analytics collects these without cookies and without identifying you: a visitor is recognised only by a hash that changes every day, and we only ever see totals.
• Your light or dark theme choice, saved in your browser’s local storage. It stays on your device and is never sent to us.

We don’t use cookies, advertising trackers or tracking pixels.

Why we use it

• The waitlist: to tell you when sayso is ready and send the occasional launch update. Our legal basis is your consent (GDPR art. 6(1)(a)), which you give by submitting your email. You can withdraw it at any time.
• Server logs: to keep the site running and secure. Our legal basis is our legitimate interest in operating a safe website (GDPR art. 6(1)(f)).
• Usage statistics: to understand which parts of the site are useful and improve it. Our legal basis is our legitimate interest in improving our website (GDPR art. 6(1)(f)). You can object at any time, and blocking the analytics script in your browser doesn’t affect the site.

We never sell your data, and we don’t use it for advertising.

Who we share it with

We use a small number of service providers to run the site. They handle data only on our instructions and under a data processing agreement.

• Vercel

  Hosts this website, keeps short-lived server logs and runs our cookie-free analytics. Location: United States.

• Supabase

  Stores the waitlist in its database. Location: United States (US East).

We’re based in the United Arab Emirates and our providers store data in the United States, so your data is processed outside the EU/EEA and UK. Those transfers are covered by the European Commission’s Standard Contractual Clauses or, where a provider is certified, the EU–US Data Privacy Framework.

We don’t send launch emails yet. When we start, we’ll add the email provider we use to this list.

How long we keep it

Your email stays on the waitlist until you unsubscribe or ask us to delete it. If you haven’t created an account within 12 months of launch, we delete it. Server logs are kept for a short period set by our hosting provider, then deleted automatically. Usage statistics are aggregated and never linked to you.

Our promises for the app

When sayso launches:

• Your messages and files will never be used to train AI models, ours or anyone else’s.
• Your data will be encrypted in transit and at rest.
• You can delete your workspace and everything in it at any time.

Before launch, we’ll update this policy to describe exactly how the app handles your data.

Your rights

Under the GDPR and the UAE’s data protection law, you can ask us to:

• show you the personal data we hold about you
• correct it if it’s wrong
• delete it
• restrict or object to how we use it
• give you a copy in a portable format

Email contactsaysoo@gmail.com and we’ll reply within one month. Every email we send also has a link to unsubscribe.

Complaints

If you think we’ve handled your data wrongly, please tell us first so we can put it right. If you live in the EU/EEA or the UK, you also have the right to complain to the data protection authority where you live, work or think the problem happened.

Who we are

Arrale LLC (registration no. 2535622), Dubai, UAE, is responsible for your personal data as the data controller. For anything privacy related, contact us at contactsaysoo@gmail.com.

Changes to this policy

When we change this policy, we’ll update the date at the top. If a change affects how we use your email, we’ll let you know by email first.