Privacy Policy

Sail AI is the data controller. The service is operated by an individual sole trader based in Türkiye. For any privacy request, write to acquire@sailaiadvisory.com.

Account data. Your email address, and your name and profile image if you sign in with Google. Used to identify your account and to contact you about the service.

Onboarding answers. Sector, company size and stated priority. Used to give the assistant context so its answers are relevant.

Conversations and uploads. The questions you ask, the files you upload for analysis, and the responses generated. Stored so you can return to earlier sessions.

Usage counters. Number of requests per day, used to enforce plan limits and to detect abuse.

Subscription status. Plan, renewal state and provider identifiers received from Dodo Payments. We never receive or store your card number.

Technical logs. Errors, timestamps and coarse request metadata, used to diagnose faults.

• Performance of a contract — account data, conversations, uploads, usage counters and subscription status. Without these the service cannot be provided.
• Legitimate interests — technical logs and abuse prevention, balanced against a narrow retention window.
• Legal obligation — transaction records retained for tax and accounting purposes.

Your conversations and uploaded files are sent to the AI providers listed below only to produce your answer. We do not use your content to train or fine-tune models, and we do not sell or rent your data to anyone.

We use the following sub-processors. Each receives only what it needs to perform its function.

• Vercel — Application hosting and content delivery
• Neon — Managed PostgreSQL database
• Dodo Payments — Payment processing and invoicing (merchant of record)
• Groq — Large language model inference
• xAI — Large language model inference
• Google — Optional sign-in via OAuth
• Sentry — Error monitoring and diagnostics

Some of these operate outside your country. Transfers rely on the providers' standard contractual clauses and equivalent safeguards.

• Account, conversations and uploads — until you delete them or close your account. Deletion removes them within 30 days, including from backups.
• Usage counters — rolling window, retained no longer than 90 days.
• Technical logs — up to 90 days.
• Transaction records — retained as long as tax law requires, held by Dodo Payments as merchant of record.

Subject to your local law, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to processing, or transfer it elsewhere. You can also withdraw consent where processing relies on it.

Email acquire@sailaiadvisory.com. We respond within 30 days. If you are in the EU or UK you may also complain to your national data protection authority; in Türkiye the authority is the KVKK (Kişisel Verilerin Korunması Kurumu).

We set a session cookie so you stay signed in, and we store your language and interface preferences locally in your browser. These are strictly necessary for the service to function and are not used for advertising. We do not run third-party advertising or cross-site tracking.

Traffic is encrypted in transit. Data at rest sits in managed infrastructure with encryption enabled. Access to production data is limited to the operator. No system is completely secure; if a breach affects your data we will notify you and the relevant authority as required by law.

The service is not directed at anyone under 18 and we do not knowingly collect their data. If you believe a minor has created an account, contact us and we will remove it.

If we change this policy in a way that materially affects you, we will notify you by email or in the application before the change takes effect.