Privacy notice

01

Controller and contact

SAYA SIA is responsible for SAYA's processing described here. We are a limited liability company registered in Latvia, registration number 40203780346, with our registered office at Dzirnavu iela 57A-4, Riga, LV-1010, Latvia. Send privacy questions and requests to exercise your rights to info@sayagain.app; telephone +371 25 627 277. This notice covers the website, purchases, licensing, support and the application's handling of data.

02

Speech, scripts and data on your Mac

The application interface and speech recognition are currently English-only. Speech recognition runs on your Mac when the system supports it. Otherwise Apple's speech service may process your audio and an internet connection may be needed. You control microphone and speech-recognition permissions in macOS settings. Without those permissions, voice-following features cannot work.

SAYA does not record raw audio by default. Scripts, recognized text and session events are stored locally for session review and diagnostics. Pro and Team estimates of speaking pace and pauses can be affected by recognition errors; they do not assess your personality or emotions. Licensing requests do not contain scripts or audio. If you choose to send text, audio or diagnostics to support, that content becomes part of your support request. Please avoid unnecessary sensitive information.

03

Purchases, licences and trials

To enter into and perform your contract (GDPR Article 6(1)(b)), we use your email, selected plan, number of people, order and subscription identifiers, payment status and paid-period dates. Stripe processes the payment and billing information you enter in its checkout; the SAYA licence database does not store full payment-card numbers or security codes.

Licence activation and validation send us the licence key, device identifier (a hash of the Mac hardware identifier), device name, and activation/last-validation times. We use these to deliver licences and check access and the paid device allowance. Trial records contain the email, granted licence and trial period. These details are needed to provide the access you request; without them, we cannot issue or activate a licence. We also process records required to meet tax, accounting and consumer-protection duties under GDPR Article 6(1)(c).

04

Contact, withdrawal and support

We use the name, email, message and related order details you provide to reply, provide support and handle withdrawals, refunds and complaints. Contractual and pre-contractual requests are handled on the contract basis; statutory requests are handled to comply with a legal obligation. General correspondence relies on our legitimate interest in answering enquiries (GDPR Article 6(1)(f)).

The contact form opens a draft in your email app; your email provider handles sending. For withdrawals received by email or post, we process your identification and contact details, the contract reference, your statement and the date received to identify the contract and handle your request. If you cannot supply particular information, contact us by email to arrange another way to identify the contract.

05

Website operation, security and cookies

Website hosting and security involve technical request information such as the IP address, requested path, time and response status. Request rate limits and trial-grant records help prevent spam, licence-key guessing and repeated-trial abuse. The basis is our legitimate interest in providing a secure, reliable service; this information is not needed to build advertising profiles.

Choosing a website language stores that preference in a cookie for one year. You can change it using the language selector or delete it in your browser. On a first visit, country information from the hosting provider helps open the Latvian site for visitors from Latvia. We do not request device location permission or use a separate IP-geolocation service. Stripe may use technologies needed for its payment page and security; Stripe's privacy notices also apply to those services.

06

Who receives information

Information is available to the service providers and authorised people needed for the relevant activity. Stripe provides payments and billing; Neon hosts the licensing and related records database; Apple iCloud handles correspondence sent to our support email address. Cloudflare also provides website hosting and infrastructure and processes technical requests. Where direct website contact delivery is enabled, Cloudflare Email Service processes those messages. Apple may process audio when its speech service is used.

Providers may act as processors or, for certain duties of their own, as separate controllers. Accounting and legal advisers may receive information needed for their work; public authorities receive information where required by law. The recipient categories relate to the purposes described here. We do not sell your scripts, audio or personal data.

07

Transfers outside the EEA

International service providers may process or access data outside the European Economic Area. The applicable protection depends on the recipient, country and service: for example, an applicable European Commission adequacy decision or appropriate contractual safeguards. For information about the destination and a copy of the safeguards relevant to a particular transfer, contact info@sayagain.app.

08

How long information is kept

Retention depends on the purpose. Licence, activation and subscription records are kept to administer access and resolve related requests. A trial-grant record is needed to apply the one-trial restriction. Order, payment, contract, withdrawal and refund records are retained to meet applicable accounting, tax and consumer-protection requirements and to establish or defend legal claims.

Correspondence retention depends on the time needed to resolve the request and preserve evidence of an agreement or dispute. Security information depends on the relevant protection purpose and incident investigation. Information no longer needed is deleted or anonymised where there is no legal reason to retain it; backup copies follow the relevant deletion cycle. You can request retention information for a particular category by email. Deleting local files on your Mac does not itself remove licensing or legally required billing records. The language-preference cookie lasts one year.

09

Your rights and how to exercise them

Subject to the applicable conditions, you can request access and a copy of your data, correction, erasure, restriction of processing and data portability. You can object to processing based on legitimate interests on grounds relating to your situation. Where a particular activity relies on consent, you may withdraw it at any time without affecting earlier lawful processing. Erasure does not always apply to records that must be retained for a legal obligation or claim.

Email info@sayagain.app with your request. If we have reasonable doubts about identity, we may ask for proportionate additional information; do not send an identity document unless we have explained why it is needed. We respond without undue delay and normally within one month. Complex or numerous requests may require an extension of up to two further months; we notify you and explain within the first month. Requests are normally free, with exceptions only where the GDPR permits them.

10

Supervision and reviewing decisions

You have the right to complain to Latvia's Data State Inspectorate (Datu valsts inspekcija), https://www.dvi.gov.lv/en, or another competent data protection authority, including in the country where you live or work. You do not have to contact us before making a complaint.

We do not use personal profiling to make decisions with legal or similarly significant effects. Subscription status, activation limits and trial eligibility are checked automatically against the relevant records. If you believe a result is incorrect, contact info@sayagain.app for a person to review it.

11

Changes to this notice

This notice is version 2026-10-11. If processing purposes or arrangements change, we update the notice and provide additional information where required. Agreeing to general terms of service is not itself consent to optional data processing.