Who we are
Sayso ("we", "us") makes the Sayso Chrome extension - a tool that turns spoken website feedback into pinned screenshots and client-ready reports - and the website at sayso.digital. This policy covers both. Contact: sam@sayso.digital.
The one-line summary
What the extension handles, and where it goes
| Data | Where it lives |
|---|---|
| Screenshots of pages you review | Local Captured on your click, stored in your browser (chrome.storage), included in reports you export. |
| Voice, transcribed to text | Local result Transcription uses Chrome's built-in Web Speech service, which is provided by Google and processes audio on Google's servers under Google's privacy policy. Sayso stores only the resulting text, locally. |
| Screen and camera video | Local Recorded in your browser and embedded in the report file you download. Never uploaded by us. |
| Your settings (preferences, branding) | Local chrome.storage in your browser. |
| Reports | Local Generated as files on your machine. You choose where they go from there. |
Optional integrations you control
Some features send data to a third party - but only if you switch them on, only using credentials you provide, and only to the destination you choose:
- Optional Improve accuracy - sends your recording's audio to OpenAI's transcription API using your own API key. Off unless you add a key.
- Optional Trello - sends your feedback items to your own Trello board using your own key and token.
- Optional Slack - posts a summary to your own Slack webhook.
- Optional Sayso portal - see the section below; this is the one feature where data is stored with us, and only when you use it.
Your keys and tokens are stored locally in your browser and are sent only to the service they belong to. We never see them.
The Sayso portal (optional)
If you create a Sayso account and publish a review to the portal, that review is stored on our infrastructure (hosted on Supabase) so it can be shared as a link. Specifically, we then store: your email address (for sign-in - we use one-time codes, no passwords), the reviews you choose to publish (comments, screenshots, the reviewed page's address, and the walkthrough video if you include one), and any replies people add to a shared review. Share links are unguessable but not password-protected - anyone you give a link to can view that review, so treat links like unlisted videos.
Portal data is used only to provide the portal. You can delete any review from your portal dashboard at any time, which permanently removes it along with its threads and video; deleting your account removes everything. Reviews you never publish, and everything else the extension does, stay entirely in your browser as described above. Teams that prefer full control can instead connect their own database in the extension's advanced settings - then published reviews go only to infrastructure you run, and we store nothing.
What we do not do
- No analytics or tracking in the extension. We do not know who you review, what you say, or how often you use it.
- No accounts, no sign-up, no email required to use the extension.
- No selling, sharing or transferring of user data to anyone, for any purpose.
- No use of your data for advertising, profiling or creditworthiness - ever.
Why the extension asks for its permissions
- Access to the page you're on (activeTab, scripting, tabs, all-sites) - to highlight and pin the element you point at, and to screenshot it. Sayso only touches the tab you are actively reviewing, when you press Start.
- Tab capture - to record the walkthrough video of the tab you are reviewing, when you choose a video review.
- Storage - to keep your notes, screenshots and settings in your browser.
- Downloads - to save the finished report to your machine.
- Side panel - to show the Sayso panel next to the page.
- Microphone - requested in-browser the first time you record, used only while a review is running.
The website
sayso.digital is a static site hosted on Netlify. If you join the waitlist we store the email address you submit (via Netlify Forms) and use it solely to contact you about Sayso. Ask us to delete it any time. Netlify may log standard technical data (such as IP addresses) as part of serving the site - see Netlify's privacy policy.
Who else processes your data
When you use the optional portal, or receive our emails, a small number of trusted providers process data strictly on our instructions, as our processors. We name them so you know exactly who is involved:
- Supabase - hosts the portal database, sign-in, and stored walkthrough videos. Your portal data is held in the EU (Stockholm). Their privacy policy.
- Resend - sends your one-time sign-in codes and reply/approval notifications, and so processes the email address those are sent to. Their privacy policy.
- Netlify - hosts sayso.digital and collects waitlist emails. Their privacy policy.
- Google - provides the browser transcription service described above, and our own business email. Their privacy policy.
- OpenAI - only if you switch on "Improve accuracy" with your own key. Their privacy policy.
We do not add new processors without updating this page first, and we never sell or share your data with anyone else.
Data retention and deletion
Because most of your data lives in your browser, you are in charge of it: finishing a review clears the working session, removing the extension removes everything it stored, and reports you exported are ordinary files on your machine.
For data in the optional portal: published reviews are kept until you delete them - removing a review from your portal dashboard permanently deletes it along with its threads and video, and deleting your account removes everything. We keep portal data only while your account is active.
You have the right to access, correct or delete the personal data we hold, and to ask how it is processed. For any of that - including deleting a waitlist email - contact sam@sayso.digital and we will action it promptly and within any timeframe the law requires. If you are in the UK or EU and unhappy with our response, you can also complain to your data protection regulator (in the UK, the ICO).
Children
Sayso is a professional tool and is not directed at children under 13, and we do not knowingly collect data from them.
Changes to this policy
If we ever add features that change how data is handled - for example, portal accounts - we will update this page and the "Last updated" date before those features ship.