Privacy Policy

This policy explains what personal information Saarah.ai collects about you, why, who else sees it, how long it is kept, and how you can read it back or have it deleted. It is written to the Australian Privacy Principles in the Privacy Act 1988 (Cth).

The short version

• The most sensitive things stored here are the transcripts of your customer conversations — other people's words. They are used only to do your own work: drafting your artefacts, reading across your evidence, and answering you in Talk.
• Nothing is sold, and nothing is shared for advertising.
• There are no analytics, no tracking pixels and no third-party advertising cookies. None.
• You can download everything held about you, or delete all of it, from Settings. Deletion removes it from the live service immediately; encrypted backups expire under the provider's retention schedule.

What is collected, and why

When you create an account

Your name, email address and password. The password is stored only as a cryptographic hash and cannot be read back by anyone, including us. These exist so you can sign in and so your workspace is yours.

When you talk to saarah

Everything you type or say in Talk, and everything she answers, including the sources and confidence behind each answer. The thread is kept so she can pick up where you left off rather than asking you to re-explain your business. It is yours alone: nobody else in a cohort, and no internal role, can read it.

When you link a conversation to a person

Your contacts are kept in Creme, not here. When a conversation is linked to one of them, Saarah keeps that contact’s Creme id and their name beside the conversation, so it can say who said what. They are held for that one purpose and go when the conversation does.

When you upload a conversation

The audio, video or text you provide, its transcript with speaker labels, the excerpts you mark as Wow Moments, and the consent state you set for the source: external quotation allowed, internal use only, or notes only. This is third-party information — the words of people who never signed up to this service — and it is handled accordingly; see “People you interview” below.

When saarah drafts for you

The artefacts she drafts, every claim in them with its provenance, your edits, and the decisions you confirm. Quotes in an artefact are taken verbatim from stored sources only; nothing is attributed to a person that they did not say.

Automatically, when you use the site

Your IP address and browser user-agent are recorded against your active sessions, and your IP address is counted against sign-in attempts to stop password guessing. Authenticated high-cost actions use your internal account id instead. Account-id counters are deleted with the account; all counters are removed by the next daily retention sweep after they become 24 hours old.

Cookies

Two, both first-party and both functional. One keeps you signed in. The other remembers whether you had the sidebar open. There are no advertising or analytics cookies, so there is nothing here to opt out of.

Who else sees it

Personal information is not sold, rented, or disclosed for marketing. These providers process it in order to run the service:

• Supabase — the database, hosted in Sydney, Australia. All stored information lives here.
• Vercel — hosting. Application servers are pinned to Sydney; the content delivery network that serves images and scripts is global, and sees the requests that pass through it.
• Resend — transactional email, operated from the United States. It receives your email address and the account-verification or password-reset message being sent.

Sending an account email therefore involves an overseas provider. The primary application database stays in Australia.

People you interview

Your interviewees did not sign up to this service, so their words are handled with particular care:

• Consent is recorded at capture. Every source carries a consent state from the moment it is stored, and every artefact and export honours it. A quote marked internal use only, or notes only, is never placed in an external document.
• Deletion on request. If someone asks for their words to be removed, deleting the source removes it and every quote bound to it, and flags the artefact claims that relied on it so they can be reviewed. Requests from an interviewee can also be sent to trevor.brunton@woolamaigroup.com.
• Same retention as yours. A source is kept until you delete it, or until you delete your account. It is never used for anything but your own work.

How long it is kept

• Your account, Talk thread, evidence, artefacts and decisions — until you delete them.
• Abuse-prevention counters, which hold an IP address or internal account id — account-linked rows are deleted with the account; all become eligible after 24 hours and are removed by the next daily sweep.
• Sign-ups that were never confirmed, never signed into and own nothing — erased by the daily sweep after three days.

Deleting removes information from the live database immediately. Routine encrypted backups may retain a copy for a limited period afterwards before they expire in the normal course; those backups are not used for anything except restoring the service after a failure.

Seeing it, correcting it, deleting it

• See it. Settings → Download my data returns everything held about you as a file, and Founder workspace returns the workspace alone in a format you can restore into a clean account. Your current password is required before either download. The password hash and session tokens are deliberately excluded because they are credentials. IP-based counters shared by a household or network are also excluded because they cannot reliably be assigned to one account.
• Correct it. Your name in Settings; your email in Settings after approving the change from the old inbox and verifying the new one; sources in Evidence and artefacts in Work, each where it lives. Contact us at trevor.brunton@woolamaigroup.com if you cannot access the old address.
• Delete it. Any contact, source or artefact can be deleted on its own. Settings will delete your account and everything attached to it — contacts, transcripts, artefacts, decisions and the Talk thread. Account deletion asks for your password and for your email address typed out, because it cannot be undone.

You do not have to ask us to do any of this and you will not be charged for it.

Keeping it safe

Traffic is encrypted in transit. Passwords are hashed, never stored in a readable form. The application connects to the database with an account that has only the permissions it needs. Everything you own — contacts, transcripts, artefacts, decisions and the Talk thread — is additionally protected by database row-level policies tied to the signed-in account, so isolation between founders is enforced at the data layer rather than the interface. Every response containing your information is marked so that it is never cached by anything between our servers and your browser. No system is perfectly secure, and this policy does not claim otherwise.

Children

This service is not intended for people under 16. If you believe a child has created an account, contact us and it will be removed.

Complaints

If you think your privacy has been mishandled, write to trevor.brunton@woolamaigroup.com. We will acknowledge your complaint and respond within a reasonable time.

If you are not satisfied with the response, you can escalate to the Office of the Australian Information Commissioner, the independent regulator for privacy in Australia.

Changes

If this policy changes in a way that affects how your information is used, the change will be noted here and the date at the foot of the page updated. Continuing to use the service after a change means accepting the updated policy.