Privacy Policy

1. Who we are

YouSaid is operated by Sansa Vision, a subdivision of Sansa Group AB. Sansa Group AB, organization number 559111-9507, is the responsible legal entity. Its registered address is Soldathemsgatan 20, 415 28 Göteborg, Sweden. Contact us at privacy@yousaid.dev. For data protection questions or requests, use our data rights center.

2. Our privacy roles

We act as a controller for account registration, billing administration, website use, service security, and direct support. We generally act as a processor when a customer uses YouSaid to receive and analyze messages, diagnostics, surveys, or product events from its own users, and when a customer uses Proof to collect, manage, and display testimonials from its own customers. The customer determines the purpose and lawful basis for that customer content. If you gave a testimonial to a company that uses YouSaid, that company is responsible for it; you can also manage your consent directly as described in section 6.

3. Data we collect

• Account data such as name, email, organization, role, session information, and authentication events.
• Customer content such as support threads, feature requests, votes, surveys, attachments, product context, and linked evidence.
• Proof content that a customer collects from its own customers: written testimonials and answers, ratings, video and audio recordings that the person records in the browser or uploads, images and screenshots they upload, and the identity details they choose to give, such as name, email, role, company, location, and profile link.
• Transcripts and captions for Proof recordings. The person can review and edit them or type their own. Where automatic transcription is enabled, the machine transcript is kept unchanged alongside the edited version. Live Room sessions can also produce transcripts and, when turned on, recordings.
• Consent records: the consent wording and version shown, the choices made (channels, media, how the name is displayed, how long the permission lasts), approvals, corrections, pauses, withdrawals, and signed receipts.
• Evidence from outside sources that a customer brings in: imported reviews and testimonials, public posts and reviews found by Brand Monitor, and quotes captured with the YouSaid browser extension, each with its source link and capture time.
• Reward data when a customer offers a thank-you for taking part: the offer, its disclosure text, the recipient's name and email, and the issuance record.
• Bounded diagnostics such as product version, route, device, browser, correlation identifiers, and consented screenshots. Form values, cookies, access tokens, and authorization headers are excluded by default.
• Usage and security data such as IP address, user agent, request timing, audit events, webhook delivery, and abuse signals.
• Billing data such as plan, subscription status, and transaction identifiers. Stripe Managed Payments and Link process payment method details.
• Preference data such as language, notification choices, cookie consent, and Global Privacy Control state.

4. Why we use data

• Provide and secure the service under our contract with you.
• Authenticate users and prevent fraud based on contract and legitimate interests.
• Process customer content on documented customer instructions.
• Send service, security, and support communications.
• Measure service reliability and improve features with consent where required.
• Meet tax, accounting, dispute, and legal obligations.
• Establish, exercise, or defend legal claims.

5. AI and model processing

YouSaid uses AI to classify and summarize messages, draft replies and updates, compile documents, and, in Proof, to summarize stories, draft case studies and translations, propose video highlights, classify Brand Monitor mentions, and suggest where proof could be used. Every model call goes through SansaAI, a Sansa AI gateway; YouSaid has no other model provider and no fallback. Before text is sent for generation or search indexing, YouSaid removes secrets and common personal identifiers from it: email addresses, phone numbers, payment card and bank account numbers, national identity numbers, IP addresses, and street addresses. Names and other free text are not removed. Where automatic transcription is enabled, the audio of a Proof recording is sent to SansaAI to produce the transcript; audio cannot be redacted this way. Live audio and video sessions in Rooms run on Cloudflare RealtimeKit, which transcribes them unless the host turns transcription off and records them only when the host turns recording on and confirms that participants consented. Tenant and product filters are applied before retrieval, and Proof drafts are checked against their sources. AI drafts of replies, updates, and proof are not sent or published until a person approves them, Proof content is not published without the approval of the person who gave it, and AI answers in Rooms are labeled as coming from an agent. YouSaid does not use customer content to train models.

6. Proof: consent, control, and public display

A story is private by default. It is used publicly only when the person who gave it grants permission for specific channels, media, and display details, and only within that permission. Material edits and translations need the person's approval again. Each person gets a private control center link, valid for 400 days, where they can approve or decline, narrow what is allowed, request a correction, pause, or withdraw one story or all of them. The Consent Passport in the control center shows every place a story is used and can be downloaded as a signed file.

When a person withdraws, YouSaid stops serving the story on YouSaid placements, normally within minutes, and records copies outside YouSaid, such as exports, as removal tasks for the company. A content-free record of the consent and the withdrawal is kept so the company can show what was allowed and when. Public proof can link to an "About this proof" receipt that shows where the story came from and its consent status. Receipts are signed so anyone can check they are genuine; they do not contain contact details or private notes, and after a withdrawal they show only that the story was withdrawn. Proof widgets and pages measure views and clicks without cookies or visitor identifiers; IP addresses are used only briefly to limit abuse.

7. Rewards and incentives

A company can offer a thank-you, such as a coupon, account credit, or e-gift card, for taking part. Rewards are for participation only: YouSaid refuses reward rules based on rating or sentiment, and declining public use never removes a promised reward. The company must write a disclosure, and YouSaid shows it next to the story wherever YouSaid displays it; a company that displays stories through its own code must show it too. Stories with an incentive are left out of search engine review markup. Every reward is approved by a person before it is issued. Where YouSaid delivers an approved e-gift card, the recipient's name, email, and the reward amount are sent to the e-gift provider listed on the subprocessor page; otherwise the company delivers the gift itself.

8. Imported reviews, Brand Monitor, and the browser extension

A company can import reviews and testimonials it already has, and Brand Monitor can search public sources such as Reddit, Hacker News, YouTube, G2, Trustpilot, and RSS feeds for mentions of the company's product, using the terms the company sets and the sources' official interfaces. Found mentions stay internal. A person at the company must confirm the source's terms before a mention becomes evidence, and monitored mentions are deleted after a source-specific period of 30 or 180 days. Consent given on another platform does not carry over: an imported or monitored item can be published through YouSaid only after the person who wrote it approves a new YouSaid permission request.

The YouSaid browser extension lets a signed-in company user capture a public quote, its source link, and the capture time as private evidence. A screenshot is stored only where the source's terms allow it and never for X or LinkedIn. The extension communicates only with YouSaid, uses short-lived sign-in tokens that can be revoked, and does not read pages until the user starts a capture.

9. Sharing and subprocessors

We share data only with service providers needed to operate YouSaid, including Cloudflare for compute, storage, media, email, and security, Stripe and Link for merchant of record billing, SansaAI for AI processing, an e-gift provider where YouSaid delivers approved e-gift cards, and customer-enabled integrations. Providers are bound by contractual confidentiality and data protection terms. Brand Monitor and imports read from the sources a customer selects; those sources are not our subprocessors. See the current subprocessor list.

10. International transfers

Where personal data moves outside the EEA, UK, or Switzerland, we use an applicable adequacy decision, Standard Contractual Clauses, the UK Addendum, or another valid transfer mechanism. Customers may select more restrictive routing where their plan supports it.

11. Retention and export

Account and billing records are kept while the account is active and as required for legal obligations. Resolved and closed support threads and their messages are deleted after the plan retention period: 30 days on Free, 1 year on Launch, 2 years on Portfolio, 3 years on Scale, and 7 years on Enterprise, or 30 days once a workspace is no longer active. Workspace audit events are kept for 1 year, authentication verification records only for their short validity period, support requests for up to 24 months after closure, and privacy request records for up to 36 months to demonstrate compliance. Webhook delivery records are kept for 90 days, and billing event payloads are cleared after 90 days. Backups expire on a rolling schedule.

Proof follows these retention classes:

• Stories, recordings, images, transcripts, and derived assets are kept until the company deletes them or a person's data is erased. A deleted story can be recovered for 30 days and is then purged with its files.
• Consent and withdrawal records are kept as content-free records after a story is purged.
• Withdrawn or expired permissions stop public use; a permission with an end date expires automatically.
• Unfinished submissions are cleared after 30 days.
• Proof analytics events lose their session and contact references after 90 days.
• Brand Monitor mentions are deleted after 30 days for Reddit and YouTube and 180 days for other sources.

A company can export its approved proof with consent summaries and a verifiable digest, and a person can download their Consent Passport and receipts from the control center. Data subject access and erasure requests include Proof. After termination, see the Terms for the export period.

12. Your choices and rights

Depending on where you live, you may request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or an appeal. California residents may also request disclosure, correction, deletion, and opt out of sale or sharing. YouSaid does not sell personal information. We honor Global Privacy Control for browser-based marketing choices. See the rights matrix and request form.

13. Security

We use scoped access, signed identity, encryption in transit, provider encryption at rest, hashed API keys, audit logs, rate limits, secret redaction, human approval for sensitive actions, and tenant-isolation tests. No service can guarantee absolute security. Report concerns to security@yousaid.dev.

14. Children

YouSaid is not directed to children under 16 and is not intended for collecting child data without a customer providing an appropriate lawful basis and configuration. Contact us if you believe child data was submitted improperly.

15. Complaints and changes

You may complain to your local supervisory authority. Our lead supervisory authority in Sweden is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY). We will publish material policy changes and provide advance notice when they significantly affect existing processing.