🔒 Privacy Policy
1. Introduction
SayToken (“we”, “our”, or “us”) is a multilingual AI chat platform designed to connect users across languages and countries. The platform commits to transparent data handling compliant with GDPR (EU 2016/679), CCPA (2018), and Peruvian Data Protection Law (Law No. 29733 and Supreme Decree 003-2013-JUS).
2. Data We Collect
The platform gathers information necessary for service provision:
- Account Information: name, email, country, preferred language
- Usage Data: chat messages (processed for translation), connection logs, IP address, time zone
- Transactional Data: payment and credit purchase records (processed securely via authorized third-party payment processors).
We do not sell your data to third parties.
3. Purpose of Data Processing
Personal data usage includes account management, multilingual chat translation, technical support, billing, and platform security improvements. Processing relies on user consent, contractual necessity, or legitimate interest.
4. Data Retention
Data is stored only for the period necessary to fulfill the purpose of collection or as required by law. Inactive accounts face automatic anonymization or deletion per internal policy timelines.
5. Data Protection Rights
Users possess rights to access, rectify, delete (“Right to be Forgotten”), withdraw consent, object to processing, and request data portability. Exercise these by contacting support@saytoken.com.
6. Data Transfers
Your data may be processed in different countries, but always under safeguards consistent with GDPR, CCPA, and Peruvian law, using encrypted channels (TLS/WSS) and secure storage systems.
7. Cookies and Tracking
SayToken uses cookies strictly for essential functionality, such as authentication and session management. Browser disabling is possible but may impair features.
8. Data Security
Implementation includes advanced encryption (TLS 1.3, AES-256), access controls, and continuous monitoring. Servers operate on AWS following international security standards.
9. Third-Party Services
We use trusted third-party providers payment processors strictly under data-processing agreements compliant with international regulations..
10. Children’s Privacy
SayToken is intended for users over 16 years old. Minors require parental/guardian consent before account creation.
11. Updates
Policy modifications occur for legal or technological compliance, with current versions at www.saytoken.com/privacy.
12. Contact
Questions or rights exercises: support@saytoken.com or www.saytoken.com
13. Google API Services
SayToken offers optional integrations with Google services, including Google Calendar and Google Tasks, through Google’s OAuth 2.0 authorization protocol. When you choose to connect your Google account, we request access to the following scopes:
openid,email,profile— to identify your Google account and confirm the connection.https://www.googleapis.com/auth/calendar— to read and create events on your Google Calendar on your behalf, at your explicit request.https://www.googleapis.com/auth/tasks— to read and create tasks on your Google Tasks on your behalf, at your explicit request.
How we use this data. Data obtained through Google APIs is used exclusively to provide the calendar and task-management features you request within SayToken (for example, listing your upcoming events or scheduling a new appointment when you ask our AI agent to do so). We do not use this data for advertising, profiling, or any purpose unrelated to the feature you explicitly enabled.
Storage and security. Your Google access and refresh tokens are encrypted at rest and are only decrypted at the moment a request is made on your behalf. We do not store the content of your Google Calendar events or Google Tasks beyond what is required to complete the specific request in real time.
Sharing. We do not sell, rent, or share data obtained through Google APIs with third parties, except as required to operate the feature itself (e.g., communicating with Google’s own servers) or as required by law.
Retention and deletion. You may disconnect your Google account at any time from My Profile > Connections within SayToken, or by revoking access directly at https://myaccount.google.com/permissions. Once disconnected, we delete the stored access and refresh tokens associated with your account. You may also request deletion of any associated data by contacting support@saytoken.com.
Compliance. SayToken’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.