Privacy Policy

• We process the message text you choose to rewrite. Nothing else.
• We do not store your messages on our servers.
• We do not sell your data. Ever.
• We do not use your messages to train AI models.
• We do not read messages you do not click on.
• You can stop using Say Right at any time and there is nothing left to delete.

When you click the Say Right chip inside WhatsApp Web, Gmail, or our web app, the following is sent to our backend:

• The message text you are rewriting
• The tone you selected (e.g. Polite, Confident, Casual)
• The target language you selected
• An anonymous request identifier used only to return the response to you

We do not collect your name, email, contacts, recipient details, conversation history, IP address beyond what is required to deliver the response, or any other content from the page you are on.

Your message is sent over an encrypted connection (HTTPS) to our backend, which forwards it to a third-party AI provider (currently Google Gemini and OpenAI via Lovable AI Gateway) solely to generate the rewritten variations. The response is returned to your browser and the request is discarded.

Our AI providers are contractually prohibited from using your message to train their models when accessed through this gateway.

On our servers: Nothing tied to your message content. We keep short-lived, anonymised request logs (timestamp, response time, error codes) for up to 30 days for reliability and abuse prevention. These logs do not contain your message text.

On your device: Say Right uses Chrome local storage and your browser's local storage to remember your preferences (last-used tone, language) and to cache recent rewrites so the chip feels instant. This data never leaves your browser. You can clear it at any time by removing the extension or clearing your browser data.

• storage — to remember your tone and language preferences locally.
• Host access to web.whatsapp.com and mail.google.com — required to place the Say Right chip next to the Send button on those sites. The extension does not run on any other website.

Say Right does not request access to your tabs, browsing history, downloads, cookies, or any other site.

We share personal data only with the following categories of recipients:

• Service providers / subprocessors — hosting (Lovable Cloud / Supabase), AI inference (Google Gemini and OpenAI via Lovable AI Gateway), analytics, and customer support tooling, all under contractual data-protection terms.
• Merchant of Record — when you upgrade to Pro, payment, billing, tax, and invoicing are handled by Paddle, which acts as Merchant of Record and processes your billing data under its own privacy policy. We do not see or store your full payment-card details.
• Professional advisers — legal, accounting, and similar advisers where strictly necessary.
• Authorities — where we are required to do so by law.

We do not sell your personal data, and we do not share it with advertisers.

Some of our service providers are located outside the UK and EEA (for example, in the United States). Where personal data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or adequacy decisions issued by the UK or European Commission.

If you are in the UK or EEA, you have the right to access, rectify, erase, restrict, or port your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority — in the UK, the Information Commissioner's Office (ico.org.uk). We will respond to verified requests within one month.

We use appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS), access controls, and regular review of our providers' security posture. No system is 100% secure, but we work hard to keep yours safe.

Say Right is not directed at children under 13 and we do not knowingly collect data from them.

Because we do not store your messages or link requests to your identity, there is no personal data on our servers to access, correct, or delete. If you believe we hold data about you, or you have any privacy question, email us at privacy@sayright.app.

If we change how Say Right handles your data, we will update this page and the “Last updated” date. Material changes will also be announced inside the extension popup.

Questions, concerns, or data requests: privacy@sayright.app