Effective Date: 24 November, 2025
Sayy AI is designed to meet GDPR requirements end to end, including clear lawful bases for processing, strict data minimisation, strong encryption in transit and at rest, granular access controls, defined retention policies, and documented procedures for data subject rights, data processing agreements, and international data transfers.
*See Section 4 for legal bases.
We do not intentionally collect special-category data (race, religion, health, etc.). If you upload such data,
you’re responsible for having a lawful basis to do so.
Whenever we rely on legitimate interest, we do a balancing test to be sure your privacy isn’t overridden.
We use first-party cookies for login sessions and security, plus cookieless analytics tools. Detailed cookie list → [placeholder link].
We never sell personal data.
When data leaves the EU/UK we rely on adequacy decisions, SCCs, and additional technical safeguards (encryption in transit & at rest).
Back-ups roll off after 30 days.
You can: access, rectify, erase, restrict, port, or object to processing of your data, and withdraw consent at any time. Use in-app settings or the
contact method in Section 15. We reply within 30 days. You may also lodge a complaint with your local supervisory authority.
We don’t make decisions with legal or similarly significant effects solely by automated means.
The platform isn’t directed at children under 16. Let us know if a child’s data was submitted and we’ll delete it promptly.
We follow documented procedures to detect, report, and investigate personal-data breaches. If a breach poses a high risk to you, we’ll let you know and notify authorities, within 72 hours.
We sometimes update this page for legal or operational reasons. Major changes are announced in advance via email or in-app notice. Check the “Last updated” date to see the current version.
For privacy questions or to exercise your rights, please use privacy@sayy.ai
Workspace owners can request and e-sign our standard DPA in Settings → Compliance. It incorporates the EU SCCs 2021/914 and the UK IDTA by reference.