Saygo

Privacy policy

Last updated 11 October 2026

This policy explains how Ian Chung (“Saygo”, “we” or “us”), Ontario, Canada, collects, uses, shares and protects personal information. It covers people who use Saygo, and people who visit or sign up on pages that businesses publish with Saygo. We follow Canada’s privacy law for businesses (PIPEDA) and the other privacy laws that apply to us.

Our privacy officer is responsible for this policy and for how we handle personal information. Questions or requests: hello@saygo.agency.

1. What we collect

  • From Google, when you sign in: your name, email address, profile photo and Google account ID. We never see your Google password.
  • What you put into Saygo: your business idea, notes, documents, photos you upload (with location data removed), messages to the operator, results you enter, the content Saygo reads from a website you import, and the email addresses of people you invite.
  • What Saygo makes for you: plans, drafts, pages, experiments, portraits and videos.
  • Your plan: which plan you’re on, its status and renewal date, and your Stripe customer and subscription numbers. Card details go only to Stripe.
  • Connected accounts: the keys or sign-in tokens for services you connect, such as Shopify, Netlify or Stripe, and social or analytics accounts where Saygo offers them. They’re stored encrypted, and only their last four characters are ever shown.
  • Usage records: which AI features ran, when, and what they cost, plus how many videos and portraits you made. These enforce your monthly allowance.
  • Your settings, such as whether you get the weekly email.
  • Technical information: a sign-in cookie that keeps you signed in, when you were last active, and basic server logs (time, page and result, with no IP addresses) used for security and fixing problems. Your IP address is used briefly, in memory, to stop abuse such as too many requests, and isn’t stored. Your light or dark theme choice stays in your browser.

We don’t use advertising or analytics trackers, and we don’t sell or rent personal information.

2. Why we use it

  • To run Saygo for you: to answer your requests with AI, make the portraits and videos you ask for, host the pages you publish, and send the emails you approve.
  • To run your account: sign-in, plans and billing, allowances, and team and client access.
  • To email you: account, billing and security messages, invitations, and a weekly summary of your businesses on Mondays, which you can turn off in Settings → General.
  • To keep Saygo safe: to prevent abuse and fraud, secure the service and fix problems.
  • To meet legal obligations, such as keeping tax records and answering lawful requests.
  • To improve suggestions for everyone: Saygo may combine anonymous results from many businesses, such as which kinds of headlines or videos tend to work. These are only counts and patterns across at least 20 businesses. Never names, customer details, your words, or anything that could identify you or your business. This isn’t switched on yet. Before it is, you’ll get a switch in Settings to leave your businesses out.

We use personal information only for these purposes, or for new ones we tell you about first and, where the law requires, ask your consent for. By using Saygo, you consent to these uses. You can withdraw your consent by deleting your account, though we can’t run Saygo for you without it.

3. Pages made with Saygo

When a business publishes its Saygo page, Saygo counts visits and button clicks so the owner can see how the page is doing. This uses no cookies, and we don’t store your IP address: each visit gets a code that changes every day, so visits can’t be linked back to you later. Visit records are kept for about 13 months.

If you sign up on a business’s page, or buy from its Shopify store and agree to its emails, that business decides how your details are used and is responsible for its own privacy practices. Saygo keeps your details and sends its emails on its behalf: your email, first name, the consent you gave, what you bought and which emails you received. We use them for nothing else. Every email has an unsubscribe link. To see or delete your details, contact the business, or email hello@saygo.agency and we’ll pass your request on.

4. Who else handles it

Saygo uses these companies to do the work. Each gets only what it needs for your request:

  • Google: sign-in. The app’s own pages also load fonts from Google Fonts, which sees your IP address. Pages you publish don’t.
  • OpenRouter: passes AI requests to AI companies, including DeepSeek, Anthropic, OpenAI, Google and xAI, and the companies that host their models. They get your requests, the business details needed to answer them, and the photos you ask to improve or make. When Saygo uses Anthropic, OpenAI or xAI directly instead, they get the same.
  • fal.ai: the prompts, images and clips for the AI videos and video edits you ask for.
  • HeyGen: the portrait, script and voice for a presenter video you ask for.
  • Resend: sends emails to you, your team and your customers (their address, name and the email).
  • Stripe: plan payments. Card details go only to Stripe.
  • Pexels: the search words for free photos.
  • Render: hosting. Our databases and files are stored on its servers in the United States.
  • Services you connect (Shopify, Netlify, Stripe, and social or analytics accounts where offered): what’s needed to sync your store, publish your page, make checkout links, or do what you ask with that account.

We choose these providers carefully and rely on their data protection terms to protect your information to a standard comparable to ours. They also handle data under their own policies, and some keep requests for a limited time, for example to monitor abuse. Where an AI provider lets us, we turn off the use of your information to train AI models.

We may also share personal information when the law requires it; to protect the rights, safety or property of Saygo, our users or others; with professional advisers such as lawyers and accountants; or with a business that takes over Saygo, which must keep protecting it as this policy says.

5. Where it’s stored

We store data in the United States, so it may be accessed by courts and authorities there under US law. AI and other providers may process requests in the United States or other countries, whose laws may differ from Canada’s.

6. How long we keep it

Your data stays until your account is deleted. Customers a business removes are deleted after 30 days. After an account is deleted, we keep only usage records (dates, amounts and costs, with no content) and a one-way code made from your email address; they keep allowances fair and prevent abuse. Records the law requires us to keep, such as billing and tax records, are kept for as long as it requires. Backup copies may hold deleted data for a while; we delete old backups regularly.

7. Your rights

You can see and change your businesses in Saygo at any time, and delete your account and data yourself in Settings → General. If the button isn’t there, email us.

You can ask us for a copy of your personal information, to correct it, or to stop using it for something, and you can withdraw your consent. Email hello@saygo.agency from the address you sign in with; we may need to confirm it’s you. We’ll reply within 30 days, and tell you if we need longer, as the law allows.

If you signed up on a business’s page, ask that business first. You can also email us, and we’ll pass your request on.

If you’re not happy with our answer, you can complain to the Office of the Privacy Commissioner of Canada, or to your local data protection authority if you live elsewhere.

8. Children

Saygo isn’t for children under 13, and we delete their accounts. To hold an account or buy a plan, you must be at least 18 and the age of majority where you live; people aged 13 to 17 may only be team members added by an adult who runs that business (see our Terms of use).

9. Security

You sign in with Google, the sign-in cookie can’t be read by page scripts, each person’s data is kept separate, keys for connected accounts are encrypted, and API keys stay on the server. No system is perfectly secure, so please tell us at once if you notice a problem.

If a breach of our security safeguards involving your information creates a real risk of significant harm, we’ll tell you and the Office of the Privacy Commissioner of Canada, as the law requires.

10. Changes

If this policy changes, we’ll update this page and the date at the top, and email you at least 30 days before important changes.

11. Contact

Privacy officer, Ian Chung, Ontario, Canada, hello@saygo.agency.

Terms of use Back to sign in