Privacy
SayAlign reads the message you are writing so it can rewrite it. It does not keep it.
Last updated: 11 September 2026
Your messages are not stored
When you ask for a rewrite or a reply, the selected text is sent to our server and on to our AI provider, which returns the result. That is the whole journey. The text is not written to our database, not written to logs, not sent to analytics, and not saved in your browser.
Our database has no column that could hold message content, and an automated test fails the build if one is ever added. We also instruct our AI provider not to retain the request.
This applies to what you write, what the tool generates, email subjects, recipients and thread contents alike.
What we do store
- Your email address and password hash, for signing in
- Your plan and how many actions you have used this period
- For each request: which action you chose, which model ran, how many tokens it used and what it cost us — never the text itself
- Product events such as “a rewrite was generated” or “a result was inserted”, with no content attached
- If you arrived through a creator link, which creator referred you
We keep usage counts because they are what your plan is billed against, and cost figures because they are how we know the product is sustainable.
Who else is involved
- OpenAI processes the text to produce a rewrite. We send it with retention disabled.
- Supabase hosts our database and handles sign-in.
- Stripe handles payment. We never see or store your card details. Stripe also acts as merchant of record, which means it calculates and remits sales tax or VAT on your purchase.
There is no advertising network, no tracking pixel and no third-party analytics service in this product.
What the extension can access
The extension asks for one browser permission — local storage, to keep you signed in — and access to four sites: Gmail, Outlook on the web, LinkedIn and our own backend. It cannot read your other tabs, your browsing history, your cookies or your bookmarks, because it never asks for those permissions.
On a supported site it only reads what you have selected or the message you are composing, and only when you ask it to.
Cookies
Two, both first-party. One keeps you signed in on the website. The other records which creator referred you, if you arrived through a creator link; it lasts 30 days, contains only a short reference, and is cleared once your account is created.
Two separate sign-ins
The extension keeps its own session, independent of the website. Signing out on one does not sign you out of the other. This is deliberate — it means closing your browser tabs does not sign you out of the tool you are working in — but it is worth knowing.
Your data
You can export or delete your account data by writing to privacy@sayalign.com. Deleting your account removes your profile, usage records and subscription link. Because we never stored your messages, there are none to delete.
We keep billing records for as long as tax law requires, which is separate from your account data.
Changes
If this policy changes in a way that affects what we do with your data, we will tell you by email before the change takes effect.
Contact
Areonex · privacy@sayalign.com