Your privacy matters. This policy explains what data we collect, how we use it, and the controls you have. We don't sell your personal data — ever.
Contents
1. Who We Are
SayStack is operated by Polsia, Inc. ("we," "us," or "our"). SayStack is a content creation and scheduling platform that lets you record voice, generate AI-powered content, and publish to social media platforms.
When you use SayStack, you're trusting us with your data. We take that seriously. This Privacy Policy explains our practices clearly and plainly.
2. Data We Collect
We collect the minimum necessary to run the service.
Information you provide directly
| Data Type | What It Includes |
|---|---|
| Account data | Email address, display name, profile picture |
| Voice recordings | Audio files you record within SayStack |
| Generated content | Posts, captions, scripts, and other AI-generated or edited content |
| Social OAuth tokens | Access tokens for connected platforms (X, LinkedIn, Instagram, TikTok), stored encrypted |
| Scheduled posts | Content and timing for posts you've queued for publishing |
Information collected automatically
| Data Type | What It Includes |
|---|---|
| Usage data | Features used, actions taken, session duration, pages visited |
| Device & browser info | Browser type, operating system, screen resolution, language |
| Log data | IP address, timestamps, error logs, API request data |
| Analytics | Anonymized visit and engagement metrics (via first-party analytics) |
3. How We Use Your Data
We use your data to:
- Provide the Service — process recordings, generate content, schedule and publish posts
- Authenticate you — verify your identity and keep your account secure
- Improve the Service — understand how features are used, fix bugs, build new features
- Communicate with you — send transactional emails (account verification, security alerts), and occasionally product updates (you can opt out)
- Support you — diagnose issues and respond to support requests
- Comply with law — meet legal obligations when required
We do not use your voice recordings or content to train AI models for third parties. Voice data is processed to generate content on your behalf and is not shared with external AI providers beyond what's necessary for that generation step.
4. Third-Party Sharing
We never sell your personal data.
We share data with third parties only in these circumstances:
- Service providers — cloud hosting (Render), database (Neon/PostgreSQL), file storage (Cloudflare R2), and AI processing (Anthropic, OpenAI). These providers are bound by data processing agreements and may only use your data to provide services to us.
- Social platforms — when you publish content, your posts and credentials are sent to the relevant platform APIs (X, LinkedIn, Instagram, TikTok).
- Legal compliance — if required by law, court order, or to protect rights and safety.
- Business transfers — if we merge with or are acquired by another company, user data may be transferred as part of that transaction. We will notify you of any such change.
5. Social Media Integrations
When you connect a social media account (X, LinkedIn, Instagram, TikTok), SayStack receives an OAuth access token that allows us to post content and read basic account data on your behalf.
We store these tokens encrypted at rest using AES-256-GCM encryption. We request only the minimum permissions required to operate the features you use.
You can disconnect any social account at any time from your SayStack settings. Upon disconnection, we delete the associated access tokens from our database.
Your use of connected social platforms is also governed by those platforms' own privacy policies:
6. Voice Recordings & AI
Voice recordings you create in SayStack are stored securely and used to generate content at your direction. Specifically:
- Recordings are stored in Cloudflare R2 (encrypted at rest and in transit)
- Audio is transcribed and processed to create written content drafts
- We do not share raw voice recordings with third parties for any purpose other than transcription processing
- You can delete your recordings at any time from within the app
AI-Generated Content: When SayStack generates content on your behalf, your input (transcript, topic, context) is sent to AI providers (e.g., Anthropic Claude, OpenAI). These providers process the data per their own privacy policies. We do not permit them to use your data to train general AI models.
7. Data Retention
We retain your data for as long as your account is active. Specifically:
- Account data — kept until you delete your account
- Voice recordings — kept until you delete them or close your account
- Generated content & posts — kept until you delete them or close your account
- OAuth tokens — deleted when you disconnect the social account or close your account
- Log data — retained for up to 90 days for security and debugging purposes
After account deletion, residual data may remain in encrypted backups for up to 30 days before being permanently purged.
8. Security
We implement industry-standard security measures to protect your data:
- All data is encrypted in transit via TLS/HTTPS
- OAuth tokens are encrypted at rest using AES-256-GCM
- Database access is restricted to authorized services only
- Regular security reviews and dependency updates
No system is 100% secure. If you discover a security vulnerability, please report it responsibly to support@saystack.ai. We will investigate and respond within 48 hours.
9. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — request a copy of the data we hold about you
- Correction — request that inaccurate data be corrected
- Deletion — request deletion of your personal data ("right to be forgotten")
- Portability — request your data in a machine-readable format
- Opt-out of marketing — unsubscribe from non-transactional emails at any time
- Restrict processing — in certain circumstances, request that we limit how we use your data
To exercise any of these rights, email us at support@saystack.ai. We will respond within 30 days.
If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under GDPR/UK GDPR and may lodge a complaint with your local data protection authority.
California residents may have additional rights under the CCPA. We do not sell personal information, so the "opt-out of sale" right does not apply, but you may request disclosure of data collected about you.
10. Cookies & Tracking
SayStack uses minimal, functional cookies:
- Session cookies — to keep you logged in during your session
- Preference cookies — to remember settings like dark mode
- First-party analytics — anonymized page visit data to understand product usage
We do not use third-party advertising cookies or cross-site tracking pixels. We do not share browsing data with ad networks.
You can disable cookies in your browser settings, though some features may not function correctly without session cookies.
11. Children's Privacy
SayStack is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected data from a child, contact us at support@saystack.ai and we will delete it promptly.
Users between 13 and 18 should use SayStack only with parental consent.
12. Changes to this Policy
We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. For material changes, we'll notify you by email or with an in-app notice before the change takes effect.
Continued use of SayStack after changes are posted means you accept the updated policy.
13. Contact Us
For privacy questions, data requests, or concerns:
- Email: support@saystack.ai
- Website: saystack.ai
We aim to respond to all privacy inquiries within 5 business days.