Privacy Policy

1. Information We Collect

We collect information you provide directly:

• Account information (name, email address, password)
• Organization, project, and brain data you create within the platform
• Content you input through the dashboard, absorb, or Brain API
• Payment information (processed securely through Stripe)
• Communications with us (support requests, feedback)

We automatically collect:

• Usage data (pages visited, features used, session duration)
• Device information (browser type, operating system)
• Log data (IP address, access times, error reports)

2. How We Use Your Data

• To provide, maintain, and improve the saor.io platform
• To store and serve structured brain data to your connected AI tools and agents
• To process payments and manage your subscription
• To communicate with you about your account, updates, and support
• To analyze usage patterns and improve the product experience
• To detect, prevent, and address technical issues or abuse

3. Data Sharing

We do not sell your personal information. We share data only in these circumstances:

• Service providers — we use third-party services (Supabase for data storage, Stripe for payments, Postmark for email, Vercel for hosting) that process data on our behalf
• Client collaboration — when you share review links with your clients, they can access the specific content you choose to share
• Legal requirements — when required by law, regulation, or legal process

4. AI & Data Processing

saor.io does not run AI models on its servers. Your brain is structured data — memories, identity, tags, and connections — stored in a database. saor.io stores and serves this data only.

AI processing happens entirely within your own tools. When an AI agent (Claude, ChatGPT, or any other tool you connect) reads from or writes to your brain via the Brain API, the AI inference occurs on that tool's infrastructure, not ours.

• We do not send your data to any AI provider
• We do not use your brain data to train any AI models
• All brain data belongs to you and is stored within your project
• Memory items written by your agents are stored as structured data, not processed by us

5. Cross-Brain Data

Within your account, memories may be linked across brains via tags. This allows related knowledge to surface across projects you own. Cross-brain linking operates only within your account.

Cross-organization data is never shared. Brains belonging to different organizations are fully isolated, regardless of whether they share tags or similar content.

6. Knowledge Graph

saor.io automatically creates connections between memories within your brain based on content similarity, shared tags, and temporal proximity. These connections form a knowledge graph that helps your AI tools retrieve relevant context.

The knowledge graph is scoped entirely to your account. Connections are never formed between your data and another user's data.

7. Brain API & External Access

When you connect external AI agents to your brain via the Brain API, those agents can both read and write data:

• Your brain data is served to any agent holding a valid API key you have created
• Agents may write memories, feedback, and other structured data to your brain on your behalf
• All writes made through the API are your responsibility — you control what agents are authorized to do
• We log all API access including timestamps, endpoints called, and requesting IP addresses
• You control API key creation, scoping, and revocation through your account settings
• We do not share your brain data with other users or organizations

8. Cookies & Tracking

We use essential cookies to:

• Maintain your authentication session
• Remember your preferences (cookie consent, UI settings)

We do not use third-party advertising cookies or cross-site tracking. You can manage your cookie preferences through your browser settings or our cookie consent banner.

9. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain it. Anonymized usage data may be retained for analytics purposes.

10. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at legal@saor.io.

11. Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, row-level security policies in our database, and regular security reviews. No system is perfectly secure, and we cannot guarantee absolute security.

12. Children's Privacy

saor.io is not intended for use by anyone under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of saor.io after changes constitutes acceptance of the updated policy.

14. Contact

If you have questions about this privacy policy or our data practices, contact us at: