Privacy Policy

Last updated: March 12, 2026

1. Introduction

Sarah ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard data when you use our AI social media management service.

2. Information We Collect

We collect information you provide directly:

  • Account details (name, email address)
  • Business profile and onboarding answers
  • Connected social media account tokens
  • Content you share with Sarah for analysis or drafting

We also collect usage data automatically, such as pages visited and feature interactions, to improve our service.

3. How We Use Your Information

  • To provide and personalise Sarah's AI-driven recommendations
  • To draft, schedule, and publish social media content on your behalf
  • To analyse post performance and deliver insights
  • To send service-related communications
  • To improve our product and train internal models (only with your explicit consent)

4. Data Sharing

We do not sell your personal data. We share information only with third-party services necessary to operate Sarah (such as hosting providers and social platform APIs) and only to the extent required to deliver the service. All sub-processors are bound by appropriate data protection agreements.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the service. We also apply shorter retention windows to some operational data so we keep only what is necessary for drafting, analytics, and product improvement.

  • Account, billing, and workspace records are kept while your account is active.
  • Raw inbound source content from connected channels is retained for up to 14 days.
  • Temporary signal input excerpts used for drafting and review are retained for up to 14 days.
  • Saved trend observations used to improve future drafts are retained for up to 30 days unless refreshed sooner.
  • Post engagement analytics are retained for up to 90 days, and follower-growth snapshots are retained for up to 180 days.

You may request deletion of your account and associated data at any time by contacting us. We may retain limited information for longer when required to comply with law, resolve disputes, prevent abuse, or enforce our agreements.

6. Security

We use industry-standard measures to protect your data, including encryption in transit (TLS) and at rest. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Object to or restrict certain processing
  • Data portability

To exercise any of these rights, please contact us at the address below.

8. Cookies

We use essential cookies to keep you signed in and remember your preferences. We do not use third-party advertising cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice in the app.

10. Contact

If you have any questions about this Privacy Policy, please contact us at privacy@sarah.ai.