saor.io (“we,” “our,” or “us”) is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your information when you use our persistent brain infrastructure platform for AI tools.
1. Information We Collect
We collect information you provide directly:
- Account information (name, email address, password)
- Organization, project, and brain data you create within the platform
- Content you input through the brain builder, absorb, or Brain API
- Payment information (processed securely through Stripe)
- Communications with us (support requests, feedback)
We automatically collect:
- Usage data (pages visited, features used, session duration)
- Device information (browser type, operating system)
- Log data (IP address, access times, error reports)
2. How We Use Your Data
- To provide, maintain, and improve the saor.io platform
- To power AI features including the brain builder, absorb processing, and context packs
- To process payments and manage your subscription
- To communicate with you about your account, updates, and support
- To analyze usage patterns and improve the product experience
- To detect, prevent, and address technical issues or abuse
3. Data Sharing
We do not sell your personal information. We share data only in these circumstances:
- Service providers — we use third-party services (Supabase for data storage, Stripe for payments, Anthropic for AI processing, Postmark for email, Vercel for hosting) that process data on our behalf
- Client collaboration — when you share review links with your clients, they can access the specific content you choose to share
- Legal requirements — when required by law, regulation, or legal process
4. AI & Data Processing
saor.io uses AI (currently Anthropic's Claude) to power the brain builder, absorb processing, and context assembly. When you interact with the AI or use the Brain API:
- Your brain data (context pack, conversation history, memory items) is sent to the AI provider during brain-building conversations
- Brain API context retrieval is a database operation and does not involve AI processing
- We do not use your brain data to train third-party AI models
- All brain data belongs to you and is stored within your project
- Memory items and brain updates extracted from conversations are used only within your project context
5. Brain API & External Access
When you connect external AI agents to your brain via the Brain API:
- Your brain data is served to any agent holding a valid API key you have created
- We log all API access including timestamps, endpoints called, and requesting IP addresses
- Feedback submitted through the API is stored as performance memories within your brain
- You control API key creation, scoping, and revocation through your account settings
- We do not share your brain data with other users or organizations
6. Cookies & Tracking
We use essential cookies to:
- Maintain your authentication session
- Remember your preferences (cookie consent, UI settings)
We do not use third-party advertising cookies or cross-site tracking. You can manage your cookie preferences through your browser settings or our cookie consent banner.
7. Data Retention
We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain it. Anonymized usage data may be retained for analytics purposes.
8. Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Object to or restrict certain processing
- Withdraw consent where processing is based on consent
To exercise any of these rights, contact us at privacy@saor.io.
9. Security
We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, row-level security policies in our database, and regular security reviews. No system is perfectly secure, and we cannot guarantee absolute security.
10. Children's Privacy
saor.io is not intended for use by anyone under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
11. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of saor.io after changes constitutes acceptance of the updated policy.
12. Contact
If you have questions about this privacy policy or our data practices, contact us at:
saor.io