Privacy Policy

We collect the following categories of information:

• Account information such as your name, email, role, headline, brand goals, audience, tone, and topics you set during onboarding.
• Content you share including voice recordings, text, transcripts, images, and the drafts and posts generated from them.
• Connected account data from platforms you link, such as LinkedIn and TikTok, limited to the permissions you grant and used to publish or schedule on your behalf.
• Usage and device data such as actions in the app, voice minutes used, log data, approximate location from IP, and basic device and browser details.
• Payment data processed by our payment provider. We do not store full card numbers.

We use your information to:

• transcribe your voice and generate drafts that sound like you;
• schedule and, where authorized, publish posts to your connected accounts;
• remember your preferences and improve Sally's suggestions for you over time;
• provide support, secure the Service, and prevent fraud or abuse;
• process payments and manage subscriptions and usage limits; and
• comply with legal obligations.

We do not sell your personal information. We do not use your private content to train third-party foundation models, and we direct our AI providers not to use it for their own model training where their terms allow.

To create drafts, Sally sends your voice or text to AI service providers for transcription and content generation. These providers process the data only to return results to us and operate under contracts that restrict further use. AI output may be imperfect, so you review drafts before they are published. You can delete recordings, transcripts, and drafts at any time.

Where the GDPR or similar laws apply, we process your data based on: your consent (for example, when you record a voice note or connect an account); performance of our contract with you (to deliver the Service); our legitimate interests (to secure and improve the Service); and compliance with legal obligations. You may withdraw consent at any time.

We share information only as needed:

• Service providers who host our infrastructure, provide AI processing, send email, and process payments, under confidentiality and data-protection terms.
• Connected platforms such as LinkedIn and TikTok, when you choose to publish or schedule content.
• Legal and safety when required by law or to protect rights, safety, and the integrity of the Service.
• Business transfers if the Service is involved in a merger or acquisition, subject to this Policy.

We keep your information for as long as your account is active or as needed to provide the Service. You can delete individual recordings, drafts, and posts at any time. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain limited records for legal, tax, or security reasons.

We use technical and organizational measures to protect your data, including encryption in transit, access controls, and row-level security on stored data. No system is perfectly secure, but we work to safeguard your information and will notify you and regulators of significant breaches as required by law.

Depending on where you live, you may have the right to access, correct, delete, or export your data, to object to or restrict certain processing, and to withdraw consent. You can manage much of this in the app, including disconnecting accounts and deleting content. To exercise other rights, contact us through the in-app support options. You also have the right to complain to your local data protection authority.

If you are in California, you have rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined.

Your information may be processed in countries other than your own. Where we transfer data internationally, we use appropriate safeguards such as standard contractual clauses to protect it.

The Service is not intended for anyone under 16, or the minimum age of digital consent in your country. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

We may update this Policy from time to time. If we make material changes, we will notify you through the Service or by email before they take effect. The Last updated date above shows the latest revision.

If you have questions about your privacy or this Policy, reach out through the support options inside the app and I will help personally.