This Privacy Policy explains how we collect, use, disclose, and process your personal data when you use our website and other products provided by us from time to time where we act as a data controller.
Personal Data Collection
Personal data that you need to provide to us
Identity and Contact Data: We collect the identifiers, including your name, email address, and phone number when you sign up for a Sayso account, or to receive information about our Services.
Inputs and Outputs: Our Services will generate responses and actions ("Outputs") based on your interaction with our Services ("Inputs"). This includes third-party applications you choose to integrate with our Services. If your Inputs include personal data, reference external content, or contain audio Inputs, we will collect that information, and the corresponding data may be reproduced in your Outputs. If you enable the optional feature, we may collect limited, relevant contents from the texts on the screen to enhance the accuracy of Sayso's Outputs.
Third-Party Platforms: We may collect information when you link your account to an account operated by a third party, such as a social media service ("Third-Party Account"). With your authorization, the Services may obtain information about you from your Third-Party Account. When you sign in through a Third-Party Account like Facebook or Google, we receive information from that provider which identifies your account. We collect and store the information to facilitate your access to the Services. Linking a Third-Party Account is entirely optional, and you will be asked to grant permission when you choose to connect it. You may withdraw this permission at any time by logging into the Third-Party Account and disconnecting Sayso, or by using your device's native applications. We may continue to retain the information that we have collected from you.
Feedback on your use of our Services: We appreciate the feedback, including ideas and suggestions for improving or rating an Output. We will collect the information you provide in your feedback to better serve you.
Personal data we receive automatically from your use of the Services
Device and Connection Information. Your device or browser will, with their permissions according to their respective internal policies, automatically send us the information about when and how you install, access, or use our Services, which may include the information such as your device type, operating system information, browser information and web page referrer, mobile network, connection information, mobile operator or internet service provider (ISP), time zone setting, IP address (including the information about the location of the device derived from your IP address), identifiers (including device or advertising identifiers, probabilistic identifiers, and other unique personal or online identifiers), and device location.
Usage Information. Your use of the Services, such as the date and time of access, browsing history, search queries and other information about how you use the Services, and the technology on the devices you use to access the Services, will also be collected by us.
Logging and Troubleshooting Information. Please note that we will collect the information about how our Services are performing when you use them. The information includes log files. We may collect the information about the error if you or your device experiences an error, as well as the time the error occurred, the feature being used, the state of the application when the error occurred, and any communication or content provided at the time the error occurred.
Cookies and Similar Technologies. To help us to recognize you, customize or personalize your experience, market additional products or services to you, and analyze the use of our Services to make them safer and more useful to you, we and our service providers use cookies, scripts, or similar technologies ("Cookies").
Personal data we collect or receive to train our models
We obtain personal data from third-party sources in order to train our models. Specifically, we train our models using data from the following sources:
Publicly available information via the Internet;
Inputs and Outputs from our Services (unless users opt out) and other data that our users or crowd workers provide;
Feedback that the users explicitly provide about our Services;
Data that we generate internally.
To communicate with you, including to send you information about our Services and events;
To create and administer your account;
To provide, maintain and facilitate optional services and features that enhance the platform functionality and user experience;
To prevent and investigate fraud, abuse, and violations of our policies, unlawful or criminal activities, unauthorized access to or use of personal data or our system and network, to protect our rights and the rights of others, and to meet legal, governmental and institutional policy obligations;
To investigate and resolve disputes and security issues;
To debug and to identify and repair errors that impair the existing functionality, and improve the Services and train our models;
How We Disclose Personal Data
We will disclose personal data to the following categories of third parties for the purposes explained in this Policy:
Affiliates. We may disclose the categories of personal data described above between and among our affiliates and related entities.
As part of a significant corporation event. If we are involved in a merger, corporation transaction, bankruptcy, or other situation involving the transfer of business assets, we will disclose your personal data as part of these corporate transactions.
Third Party Websites and Services: If we link to a site or service via our Services, you should read their data usage policies or other documents. Our inclusion of such links does not constitute an endorsement of, or representation on behalf of, those third parties. Our Services may involve integrations with, or may direct you to, websites, apps, and services managed by third parties. By interacting with these third parties, you are providing information directly to these third parties and not to Sayso, and thus you are subject to privacy policies of third parties.
Pursuant to regulatory or legal requirements. We may disclose personal data to governmental regulatory authorities as required by applicable laws, including legal, tax or accounting purposes, in response to their requests for such information or to assist in investigations. We may also disclose personal data to third parties in connection with claims, disputes or litigation, when otherwise permitted or required by the law, court or arbitration tribunal, or if we determine its disclosure is necessary to protect the health and safety of you or any other person, to protect against fraud or credit risks, to enforce our legal rights or the legal rights of others, to enforce contractual commitments that you have made, or as otherwise permitted or required by applicable laws.
With an individual's consent. We will otherwise disclose personal data when you give us permission or direct us to disclose this information.
Depending on where you live, you may have certain statutory rights in relation to your Personal Data, including:
The right to know information about our processing of your Personal Data;
The right to access, update or correct your Personal Data;
The right to restrict or object to our processing of your Personal Data, and to withdraw your consent (where the consent is the legal basis for processing);
The right to request deletion of your Personal Data;
The right to lodge a complaint with your local data protection authority.
Data Transfer
When you access our website or Services, your personal data may be transferred to our servers in China or to other countries outside the jurisdiction where you locate. This may be a direct provision of your personal data to us, or a transfer that we or third parties make.
Where the information is transferred outside the jurisdiction where you locate, we ensure that it benefits from an adequate level of data protection by relying on:
Adequacy decisions. These are decisions from the European Commission under Article 45 GDPR (or equivalent decisions under other laws) where they recognize that a country outside of the EEA offers an adequate level of data protection. We transfer your information as described in "Personal Data Collection" to some countries with adequacy decisions; or
Standard contractual clauses. The European Commission has approved contractual clauses under Article 46 GDPR that allows companies in the EEA to transfer data outside the EEA. These clauses (and their approved equivalent for the UK and Switzerland) are called as standard contractual clauses. We rely on standard contractual clauses to transfer information as described in "Personal Data Collection" to certain affiliates and third parties in countries without an adequacy decision.
In certain situations, we rely on derogations provided for under applicable data protection law to transfer information to a third country.
Online Analytics and Tailored Advertising
Analytics
We may utilize third-party web analytics tools on the Services, including Google Analytics. These providers employ the technologies described in the corresponding section to help us understand how users interact with the Services, such as identifying the third-party site that refers you. Information gathered through these technologies may be shared with or directly collected by these providers who use it to assess your use of the Services. We may also rely on Google Analytics for certain advertising-related purposes, as outlined in the next section. If you wish to prevent Google Analytics from collecting your information for analytics purposes, you may install the Google Analytics Opt-Out Browser Add-on.
Tailored Advertising
We promote our own products and services and track the advertising attribution to evaluate their effectiveness. To refine and deliver our marketing contents, we may use cookies or similar technologies to gather information about how you use our Services. We do not sell your data or use it to improve advertising for other companies. At present, we do not permit unaffiliated third parties to deliver personalized marketing through our Services. You may still see our advertisements, though they may not always be tailored to your specific interests.
Data Retention
We will retain your Personal Data only for as long as necessary to provide our Services to you, or for other legitimate business purposes such as resolving disputes, safety and security reasons, or complying with our legal obligations. The duration we retain Personal Data will depend on a number of factors, such as:
Our purpose for processing the data;
The term that we need to retain the data to provide our Services;
The amount, nature, and sensitivity of the information;
The potential risk of harm from unauthorized use or disclosure;
Any legal requirement that we are subject to.
We will delete or anonymize Personal Data once it is no longer necessary or when the applicable retention period expires. If Personal Data is anonymized, aggregated, or de-identified, we may use and share it for any business purpose. Additionally, as to information related to your interaction with or usage of the Services—including, without limitation, your IP address, device type, browser type and version, pages of our Services that you visit, the time and date of your visit, the time spent on those pages, device language, unique device identifiers, system logs, performance metrics, the application used for dictation, and other diagnostic data related to your interaction with the Services—we may retain it for the internal analysis. This information is generally kept for a shorter duration, except when it is needed to enhance security, improve the functionality of our Services, or when legal requirements mandate longer retention.
Security
We implement commercially reasonable, technical, administrative, and organizational security measures designed to protect Personal Data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or email transmission is ever fully secure or error free. Therefore, you should take special care by yourself in deciding the information you provide to the Services.
In addition, we are not responsible for the circumvention of any privacy settings or security measures contained on the Services, or third-party websites.
Children
Our Services are not directed to, and we will not intentionally collect, use, store, disclose, sell, or share any information from children under the age of 18. If you become aware that a child under the age of 18 has provided any personal data to us while using our Services, please inform us immediately and we will investigate the matter and, if appropriate, delete the personal data.
Sharing With Others
Service Providers. We may share Personal Data with service providers acting on our behalf, such as billing and payment processors, third-party LLM providers, analytics vendors, cloud hosting services, and communication providers. We may also provide your data to third-party LLMs to enable certain features. Your data is never used to train those models and will be deleted within 30 days.
Customers. If you access the Services through a Sayso's customer (such as your employer), we may share certain information about you—like your account or device details—with that customer to fulfill our contractual obligations and for the purposes described in this Privacy Policy.
Protection of Sayso and Others. We may disclose your information when necessary to protect the rights, property, or safety of Sayso, us, our affiliates and agents, our users, or the public. The protection may include exchanging information with organizations for fraud prevention, spam or malware mitigation, and other related security purposes. We may also disclose Personal Data when required to comply with laws, court orders, legal processes, or government or regulatory requests, or when needed to enforce our agreements and policies.
Business Transfer. We may share Personal Data in connection with a merger, acquisition, financing, sale of assets, or other transfer of all or part of our business, based on our legitimate business interests.
Affiliates. We may share Personal Data with our affiliates, which will use the information as described in this Privacy Policy.
Advertising Partners. We may work with advertising networks, advertising exchanges, and social media platforms (such as LinkedIn) to display advertisements on our Services or to manage advertisements on other websites. For these purposes, we may disclose or otherwise make Personal Data available to these partners.
With Your Consent. We may share your Personal Data with third parties when you explicitly authorize us to do so.
We shall have the right to update this Privacy Policy from time to time. We will publish an updated version and effective date on this page, unless another type of notice is required by applicable laws.
Contact Information
If you have any questions about this Privacy Policy, as well as complaints or requests regarding your personal data, you can email us at contact@sayso.ai.
In Case of Disputes
Governing law and exclusive jurisdiction. Our Policy will be governed by, and construed and interpreted in accordance with, the laws of the People's Republic of China without giving effect to conflict of law principles. You agree that any disputes arising from or relating to this Policy shall be submitted to China International Economic and Trade Arbitration Commission (CIETAC) Shanghai Sub-Commission (Arbitration Center) for arbitration which shall be conducted in accordance with the CIETAC's arbitration rules in effect at the time of filing the arbitration. The arbitration award is final and binding upon both parties.
Supplemental Disclosure for Residents of Canada
The supplemental disclosure contains the additional information relevant to residents of Canada. This content should be read in conjunction with the rest of our Privacy Policy. In case of any conflict between our Privacy Policy and the supplemental disclosure, the supplemental disclosure shall prevail in relation to residents of Canada.
We will only collect, use and disclose your personal data with your consent, unless permitted or required by laws.
Consent. By expressly consenting to this Privacy Policy, you confirm you read, understand, and consent to the collection, use, processing, and disclosure of your personal data in accordance with this Privacy Policy and understand that we also rely on other lawful bases for the foregoing as more fully set out in this Privacy Policy. Your consent may be given expressly or implied, depending on the circumstances and the sensitivity of the information involved.
Cross-jurisdiction Transfer. By providing us with personal data, you acknowledge and agree that your personal data may be transferred or disclosed to other jurisdictions for processing and storage outside of Canada, including to China and other countries, where the laws regarding the protection of personal data may be less strict than the laws in your jurisdiction. Furthermore, we may disclose your personal data in these jurisdictions in response to legal procedures or where we believe in good faith that the disclosure is required or permitted by laws.