Privacy Policy

Account Data

• Email address — used for account identification, login, and account-recovery emails (handled by our authentication provider, Supabase).
• Password — stored only as a secure hash by our authentication provider (Supabase). We never see your plaintext password.
• Your subscription tier and payment status (free / pro / per-document / family).

Document Metadata

• Document name, type, tier used, word count, and status — the small metadata record used to list your history on the dashboard.
• We do NOT store the content of your documents or your translation results on our servers.

Anonymous Aggregate Statistics

• Total number of users and total documents translated — aggregate, not tied to your identity.

Payment Data

Stripe processes all payments. We do not see or store your credit card number or payment details.

• Your document contents, clauses, or terms (never uploaded)
• Your translation results (stored only in your browser on your device)
• Anything you open in a private/incognito window (results live in that browser only)

All AI translation happens in your browser using WebLLM. Your document text is processed locally on your device and never leaves it. No document content is transmitted to our servers or any AI provider's servers during translation.

Our server only: (1) handles authentication and account management via Supabase, (2) stores document metadata for your history and account limits, and (3) processes payments via Stripe.

Document metadata (name, type, word count, status) remains stored until you delete it. You can delete individual documents or your entire account at any time. Document content and translation results live only in your browser's local storage and are cleared when you delete a document or your browsing data. Anonymous aggregate statistics are retained indefinitely but contain no personally identifiable information.

• Document processing: fully local in your browser — no cloud exposure
• Authentication: handled by Supabase Auth (industry-standard password hashing, HTTPS)
• Transmission: all data over HTTPS (TLS 1.2+)
• Storage: account data and document metadata encrypted at rest with our hosting and database providers

• We do NOT sell your document data (we don't have it)
• We do NOT share your document data with third parties (we can't — it never leaves your device)
• We do NOT use your document data for advertising
• We do NOT train AI models on your document data
• We do NOT sell email addresses to third parties

Supabase (authentication and account data), Render (server hosting), Vercel (frontend hosting), Stripe (payment processing). None of these vendors receive or have access to your document content — it never leaves your browser.

SayWhat? provides plain-English translations for reading comprehension only. It is not a law firm, does not provide legal advice, and does not flag risks or recommend a course of action. Translations are AI-generated and may contain errors. Your documents remain yours and are never readable by us.

SayWhat? is not intended for use by children under 18. We do not knowingly collect information from minors.

• Access: view your document metadata and history anytime through the app
• Deletion: delete individual documents or your entire account at any time
• Transparency: this policy explains exactly what we can and can't see

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.

Questions about privacy? Contact us at support@saywhat.app