Saya← Back to site

Privacy Policy

Last updated: 6 July 2026

This policy explains how [Legal Entity Name] (“we”) collects, uses, and protects your personal data when you use Saya / Neura. We act as the data controller for your account data. For content you process through the Service on behalf of your own audience or customers, you are the controller and we act as your processor.

1. Data we collect

  • Account data: email, authentication identifiers, workspace name and settings.
  • Content & configuration: the briefs, signals, drafts, products, and settings you create or generate.
  • Connected-account tokens: credentials/OAuth tokens for services you connect (social, email, payment), stored to act on your behalf.
  • Usage & metering: logs, feature usage, and AI-usage counts for operating and billing the Service.
  • Payment data: handled by Stripe. We do not store full card details.

2. Why we use it (legal bases)

  • To provide the Service — performance of our contract with you.
  • To bill and prevent abuse — legitimate interests and contract.
  • To improve reliability and features — legitimate interests.
  • To communicate with you about the Service — contract / legitimate interests; marketing only with consent where required.

3. Sub-processors

We use trusted providers to run the Service. Each processes data only as needed:

  • Supabase — database, authentication, file storage.
  • Hetzner (via Coolify) — application hosting.
  • Stripe — payments.
  • Resend — transactional and newsletter email.
  • Anthropic — AI text generation.
  • Voyage AI — text embeddings for memory/search.
  • PDF rendering provider — generating product PDFs.
  • Social / third-party platforms you connect — to publish or act as you direct.

We do not sell your personal data.

4. AI processing

Content you generate is sent to AI providers to produce output. We instruct providers not to use your data to train their models where such options are available. Review AI output before relying on it.

5. International transfers

Some providers are located outside your country, including the United States. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses.

6. Retention

We keep personal data for as long as your account is active and as needed to provide the Service, then delete or anonymise it within a reasonable period, unless a longer period is required by law (e.g. accounting records).

7. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict, or port your data, and to object to certain processing. You can exercise these by contacting us. You may also lodge a complaint with your local data protection authority.

8. Security

We use technical and organisational measures to protect your data, including access controls and encryption in transit. No system is perfectly secure; we work to protect your data and to respond promptly to incidents.

9. Cookies

We use strictly necessary cookies — authentication, security, and your language preference — which require no consent. Any non-essential analytics is loaded only if you accept it via our consent banner; both “Accept” and “Reject” are offered equally, and you can change your choice at any time from the “Cookies” link in the footer. We don’t use advertising or third-party tracking cookies.

10. Contact

Privacy questions or requests: [privacy@makewithsaya.tech]. Data controller: [Legal Entity Name, address].