Privacy Policy – SayCover.com

Last updated: October 15, 2026

This Privacy Policy explains how VATINIUS LLC collects, uses, stores, discloses, and otherwise processes personal information in connection with SayCover.com, its website, applications, AI-powered features, accounts, and related services.

We aim to provide a comprehensive explanation of our data practices, including how information submitted to artificial intelligence systems may be processed by our technology providers and, where separately authorized, used for AI model evaluation, training, research, and improvement.

Please read this Privacy Policy carefully. It should be read together with our Terms of Service, Cookie Policy, and any additional notices presented when you use specific features.

1. Data Controller and Contact Information

Unless otherwise stated for a particular service or processing activity, the entity responsible for processing personal data is:

VATINIUS LLC
8206 Louisiana Blvd NE
STE A #10139
Albuquerque, NM 87113
United States of America

Website: https://SayCover.com
Privacy contact: No official electronic contact has been supplied. Privacy requests may be sent to VATINIUS LLC at the postal address above; an official electronic contact still needs to be designated
General contact: No official electronic contact has been supplied. Privacy requests may be sent to VATINIUS LLC at the postal address above; an official electronic contact still needs to be designated

Where applicable under Article 27 of the General Data Protection Regulation (GDPR), our designated representative in the European Union is:

EU Representative: No EU representative has been designated by the operator. Applicability and appointment must be assessed before offering the service to people in the EU.

Where applicable, our Data Protection Officer can be contacted at:

Data Protection Officer: No Data Protection Officer has been designated. Whether an appointment is legally required must be assessed.

For privacy requests, please use the designated privacy contact above and include enough information for us to identify your account and respond to your request.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal data processed through or in connection with:

SayCover.com and its associated web pages.
User registration, authentication, and account management.
AI-powered tools, assistants, content-generation features, and other automated functionality made available through SayCover.
Text prompts, instructions, messages, files, images, documents, and other materials submitted by users.
AI-generated responses, results, recommendations, and other outputs.
Subscriptions, billing, payment administration, and customer support.
Communications between users and VATINIUS LLC.
Website analytics, security measures, diagnostic information, and permitted marketing activities.
Other products or services that expressly refer to this Privacy Policy.

Certain business customers may submit personal data relating to their own customers, employees, contractors, or other individuals. Where applicable, the relevant business customer may act as the controller of that data and VATINIUS LLC may act as a processor on the customer's documented instructions under a separate data processing agreement.

Where VATINIUS LLC determines the purposes and means of processing independently, VATINIUS LLC acts as the data controller for that processing.

3. Definitions

For purposes of this Privacy Policy:

Personal data means any information relating to an identified or identifiable natural person.

User content means prompts, messages, documents, files, images, text, audio, video, instructions, references, and other materials submitted to SayCover.

AI output means text, images, recommendations, summaries, classifications, or other results generated in response to user instructions or other inputs.

Usage data means information about interactions with our website, applications, features, and services.

Service providers means third parties engaged to support the operation, security, hosting, payment processing, analytics, communications, AI processing, or other functions of our services.

AI model improvement includes model evaluation, testing, research, training, fine-tuning, safety assessments, quality measurement, and other activities intended to develop or improve AI systems.

4. Categories of Personal Data We May Collect

Depending on how you use SayCover, we may collect and process the following categories of information.

4.1 Account and Identification Data

This may include:

Name, username, or display name.
Email address.
Account identifier and internal user ID.
Authentication information and account security records.
Account preferences and configuration settings.
Subscription plan and account status.
Information you voluntarily provide in your profile.
Organization, team, or business information where relevant.

Passwords, where used, should be stored using appropriate security protections rather than in readable plaintext form.

4.2 User Content and AI Inputs

When you use AI-powered features, we may process the information you submit, including:

Text prompts and instructions.
Questions, messages, and conversation history.
Documents, text files, spreadsheets, presentations, and other uploaded files.
Images, graphics, screenshots, and other visual materials.
Audio recordings, voice input, or transcripts where supported.
URLs, references, and other source material supplied by you.
Context or additional information provided to generate a requested result.
Content you paste, upload, import, or otherwise make available through the service.
Information included in prompts accidentally or intentionally, including personal information about you or third parties.

The content you submit may contain personal data, confidential information, or proprietary material. You should only submit information that you are authorized to provide and that you are comfortable having processed for the feature you are using.

4.3 AI Outputs and Interaction History

We may process and store, where needed for the selected feature:

AI-generated responses and results.
Conversation histories and generated content.
Saved projects, drafts, and workspaces.
User instructions and revisions.
Ratings, evaluations, comments, and feedback about results.
Error reports and information needed to reproduce technical problems.
Records of whether outputs were accepted, edited, exported, or otherwise used, where these records are collected.

The availability and retention of histories or saved content depend on the features you use and the settings available in SayCover.

4.4 Subscription, Transaction, and Billing Data

Where SayCover offers paid services, we may process:

Subscription plan and billing status.
Payment transaction identifiers.
Billing name and address.
Invoice details and transaction dates.
Amounts paid, taxes, refunds, and chargeback information.
Subscription renewal, cancellation, and entitlement information.
Limited payment-status information received from payment providers.

Payment card numbers and other sensitive payment credentials may be collected and processed directly by a payment service provider. We do not intend to store complete payment-card credentials on our own systems where the payment provider can process them securely.

Actual payment providers and their privacy notices should be identified on the website when their services are integrated.

4.5 Technical, Device, and Log Data

When you visit or use SayCover, we and our service providers may process technical information such as:

IP address.
Browser type and version.
Operating system and device type.
Language, time zone, and regional settings.
Referring website or source.
Pages and features accessed.
Dates, times, and duration of interactions.
Session identifiers and authentication events.
Error logs, diagnostics, and performance information.
Security events, suspected abuse, and suspicious activity.
Basic network and application metadata required to deliver the service.

We use this information for service delivery, troubleshooting, performance monitoring, security, fraud prevention, and other purposes described in this Privacy Policy.

4.6 Communications and Support Data

If you contact us, we may process:

Your name and contact details.
The contents of your messages.
Attachments and supporting materials.
Customer support tickets.
Relevant account and transaction information.
Our responses and the history of the support request.

Where permitted and necessary, support interactions may be reviewed to resolve requests, investigate abuse, maintain quality, and protect the service.

4.7 Marketing and Preference Data

Where we conduct permitted marketing activities, we may process:

Your communication preferences.
Newsletter subscription and unsubscribe records.
Records of marketing consent.
Information about interactions with our marketing communications.
Broad preferences inferred from your use of optional features, where the relevant processing is lawful.

We will obtain consent where required for electronic marketing, tracking technologies, or other activities that legally require consent.

4.8 Information Obtained from Third Parties

We may receive information from:

Payment and subscription providers.
Authentication providers.
Hosting and infrastructure providers.
Security and fraud-prevention providers.
Customer support and communication platforms.
Other users who refer to you or submit material containing your information.
Publicly available sources, where relevant and lawful.
Other providers you authorize to connect with SayCover.

We process information obtained from third parties in accordance with the purposes, legal bases, and transparency obligations applicable to the relevant processing.

4.9 Sensitive Personal Information

We do not ask users to submit sensitive personal information unless a particular feature expressly requires it and we have an appropriate legal basis and safeguards.

Sensitive information can include health data, biometric data used for identification, political opinions, religious beliefs, sexual orientation, and other categories protected by applicable law.

Please do not submit sensitive, confidential, or highly personal information to AI features unless you have verified that the feature is appropriate for that information and that you have the necessary rights and authorization.

If sensitive information is submitted incidentally, it may be processed to deliver the specific feature you requested or to address a security or legal issue, as permitted by law. This does not create a general authorization to process sensitive information for unrelated purposes or AI training.

5. How We Collect Information

We collect information through several channels:

Directly from you. For example, when you create an account, enter a prompt, upload a file, subscribe, contact support, or change your settings.

Automatically. For example, through server logs, session management, security systems, and permitted analytics technologies.

From service providers. For example, when a payment provider confirms a transaction or an authentication provider verifies a login.

From integrations you authorize. Where a feature connects to an external account or service, information may be received from that service in accordance with the permissions you grant.

From other users or third parties. For example, where an uploaded document contains information about another person.

Where applicable law requires it, we will provide additional information when collecting personal data indirectly.

6. Purposes for Which We Process Information

Depending on the feature and applicable legal requirements, we may process information for the following purposes.

6.1 Providing and Operating SayCover

We process information to:

Create and maintain user accounts.
Authenticate users and maintain sessions.
Deliver the features and functionality requested by users.
Process prompts and provide AI-generated responses.
Store projects, preferences, and content where the feature supports saving.
Manage subscriptions and entitlements.
Process payments, refunds, and invoices.
Provide customer support.
Maintain service availability and performance.

6.2 AI Processing and Response Generation

We process relevant prompts, uploaded content, settings, and other necessary information to:

Understand and execute user instructions.
Generate requested outputs.
Maintain the context of a conversation or task.
Apply user-selected options and preferences.
Produce relevant transformations, summaries, analyses, or other results.
Detect invalid requests and enforce applicable usage restrictions.
Troubleshoot errors and improve the reliability of the requested operation.

AI features may involve sending the relevant inputs and outputs to third-party AI providers, including OpenAI, as explained in Section 8.

6.3 Service Development and Quality Assurance

Where permitted by applicable law and supported by an appropriate legal basis, we may use information to:

Diagnose and correct bugs.
Improve application performance and reliability.
Evaluate feature usage.
Develop new functionality.
Test updates and compatibility.
Measure the quality and usefulness of AI-generated results.
Improve user experience, interface design, and accessibility.
Detect recurring issues and prevent failures.

Where practical and appropriate, we may use aggregated, statistical, or de-identified information for these purposes.

The use of identifiable user content for a separate purpose, such as AI model training, is addressed separately in Section 9 and may require a distinct opt-in.

6.4 Security, Abuse Prevention, and Fraud Detection

We may process technical data, usage data, and relevant content to:

Protect user accounts and the service infrastructure.
Detect fraudulent transactions and suspicious activity.
Investigate unauthorized access.
Prevent spam, harmful activity, or misuse.
Enforce our Terms of Service.
Protect users, our business, and third parties.
Investigate security incidents and comply with lawful requests.

Where possible, security monitoring is designed to be proportionate to the risk and the purpose concerned.

6.5 Billing and Business Administration

We may process account, transaction, and billing information to:

Manage subscription payments and renewals.
Issue invoices and process refunds.
Maintain accounting and business records.
Resolve payment disputes.
Prevent fraud.
Comply with applicable legal and tax obligations.

6.6 Communications and Marketing

We may use contact information to:

Respond to requests.
Send service and security notices.
Notify you of material changes.
Provide information relevant to an active subscription.
Send marketing communications where permitted by law.
Manage newsletter subscriptions and communication preferences.

Marketing communications will be subject to applicable consent and opt-out requirements.

6.7 Legal Compliance and Claims

We may process and retain information where reasonably necessary to:

Comply with applicable laws and regulations.
Respond to valid legal demands.
Establish, exercise, or defend legal claims.
Enforce contractual rights.
Maintain required records.
Protect our legal rights and legitimate business interests.

6.8 Aggregated and De-Identified Analytics

We may derive statistical information from usage patterns to understand how the service performs, which features are used, and where improvements are required.

Where information is genuinely anonymized so that individuals can no longer be identified by reasonably available means, it may be used for statistical, analytical, research, and business-planning purposes without being treated as personal data, subject to applicable law.

Pseudonymized data that can still be linked to an individual remains personal data under the GDPR.

7. Legal Bases for Processing

Where the GDPR applies, we rely on the legal basis appropriate to each processing activity. Depending on the circumstances, this may include:

Performance of a contract – Article 6(1)(b) GDPR. Processing necessary to create and manage your account, provide requested features, process a subscription, or fulfill other contractual commitments.

Consent – Article 6(1)(a) GDPR. Processing based on a valid, specific, informed, freely given, and unambiguous indication of your wishes. This may apply to optional AI model-improvement sharing, certain marketing activities, and non-essential cookies or similar technologies where consent is required.

Legal obligation – Article 6(1)(c) GDPR. Processing necessary to meet applicable legal obligations, including recordkeeping obligations where relevant.

Legitimate interests – Article 6(1)(f) GDPR. Processing necessary for legitimate interests, where those interests are not overridden by your rights and freedoms. These interests may include maintaining security, preventing fraud, defending legal claims, maintaining the reliability of our services, and improving service performance in ways that do not improperly override your rights.

Vital interests or other statutory grounds. These may apply in exceptional situations where the relevant legal conditions are met.

Where processing relies on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. Where processing relies on legitimate interests, you may have a right to object under applicable law.

Where we request information necessary to enter into or perform a contract, failure to provide that information may prevent us from providing the relevant feature or service.

8. Use of Artificial Intelligence and Third-Party AI Providers

SayCover may use third-party artificial intelligence services to provide selected features. These services may include OpenAI models accessed through OpenAI's API or other AI technologies integrated into our systems.

The precise data flow depends on the feature you use and the technical configuration in place at the time.

8.1 Information That May Be Sent to an AI Provider

To process a request, we may send relevant information to the applicable AI provider, such as:

The prompt or instructions submitted by you.
Relevant portions of a conversation.
Text, documents, images, or other files needed to perform the task.
Relevant contextual information or settings.
Prior messages, where necessary to maintain context.
Information required for tools or features specifically requested by you.
Relevant output, rating, or feedback data where the applicable feature requires it.

We seek to limit the information sent to what is reasonably necessary for the relevant functionality. However, where a user includes personal or confidential information in a prompt or file, that information may form part of the content transmitted to the AI provider.

8.2 OpenAI's Role

Where SayCover uses OpenAI's API to provide AI functionality, OpenAI processes the information transmitted to its services under the terms, technical configuration, and data-handling arrangements applicable to our integration.

The processing may involve receiving, handling, temporarily storing, filtering, generating, returning, and securing inputs and outputs.

OpenAI's applicable data-handling documentation is available at:

The use of OpenAI for AI generation does not, by itself, mean that the relevant data is automatically used to train OpenAI's models. Training and model-improvement use is addressed separately below.

8.3 AI-Generated Content

AI-generated outputs may contain inaccuracies, incomplete information, or unexpected results. We may process and store outputs where required to provide the relevant feature, maintain an interaction history, comply with user settings, address support requests, or protect the service.

Please review AI-generated content before relying on it or using it in consequential situations.

8.4 Do Not Submit Content You Are Not Authorized to Share

You are responsible for ensuring that you have the necessary rights and permissions to submit material through SayCover.

Unless a feature expressly supports the relevant use and appropriate safeguards are in place, do not submit:

Confidential information belonging to an employer, client, or another person.
Personal data that you have no lawful basis to disclose.
Sensitive personal information.
Trade secrets or proprietary material that you are not authorized to upload.
Passwords, access credentials, payment-card details, or other secrets.

Where you submit information about another person, you are responsible for ensuring that the disclosure and requested processing are lawful, unless applicable law provides otherwise.

9. AI Model Training and Improvement

AI processing needed to deliver the features you request (transcription, notes, answers) is based on performance of the contract (Art. 6(1)(b) GDPR) and does not require consent. Use of your recordings, transcripts, own notes, uploaded materials, prompts and outputs for AI model evaluation, improvement and training takes place only with your separate, voluntary consent (Art. 6(1)(a) GDPR), which you can give or withdraw at any time under Settings → Privacy. The switch is off by default. Refusing or withdrawing consent has no effect on your access to SayCover. Withdrawal applies for the future; the time of consent is recorded with your account. Where reasonably possible, data is pseudonymised before training use. Where third parties appear in recordings, the user must have a legal basis for sharing their data; training use is limited to content for which you can lawfully authorise it.

OpenAI states that API inputs and outputs are not used to train its models by default. The operator’s actual organization-level data-sharing settings and provider agreements still require verification; this notice is not certification of those settings. Provider abuse-monitoring and endpoint-specific retention are separate from training.

10. Disclosure of Information to Third Parties

We may disclose personal data to third parties only as appropriate for the purposes described in this Privacy Policy and subject to applicable law.

Depending on the services actually integrated into SayCover, recipients may include:

10.1 AI and Machine-Learning Providers

OpenAI receives the audio or text needed for requested AI functions. Training use takes place only on the basis of the consent described in Section 9.

10.2 Hosting and Infrastructure Providers

Hosting, cloud-storage, database, content-delivery, and infrastructure providers may process data to store information, operate the application, deliver content, and maintain service availability.

10.3 Authentication and Account Providers

Authentication providers may process identifiers and technical information to verify user identity and maintain secure login functionality.

10.4 Payment and Subscription Providers

Payment providers may receive relevant billing, transaction, and account information to process payments, renewals, refunds, fraud checks, and disputes.

10.5 Email, Communication, and Support Providers

Email delivery, communication, and customer-support platforms may process the information necessary to send service messages, respond to requests, and maintain support records.

10.6 Analytics, Performance, and Security Providers

Where lawfully configured, analytics and monitoring providers may process technical or usage data to help us understand service performance, diagnose issues, and maintain security.

Non-essential cookies and similar tracking technologies will be used subject to applicable consent requirements.

10.7 Professional Advisers

We may disclose relevant information to lawyers, accountants, auditors, insurers, and other professional advisers where reasonably necessary for business administration, compliance, risk management, or legal claims.

10.8 Authorities and Legal Recipients

We may disclose information where required by law, pursuant to a valid legal process, or where reasonably necessary to establish, exercise, or defend legal claims or protect the rights, safety, and security of users, VATINIUS LLC, or others.

10.9 Corporate Transactions

If VATINIUS LLC is involved in a merger, acquisition, reorganization, financing, asset sale, or similar corporate transaction, relevant information may be disclosed to prospective or actual transaction participants and their advisers, subject to applicable confidentiality and data-protection requirements.

10.10 Other Authorized Recipients

We may disclose information to another recipient where you direct or authorize that disclosure, where it is necessary to provide a feature you request, or where another lawful basis applies.

We do not treat this list as a general authorization to disclose personal data to any third party for any unrelated purpose. Disclosure remains subject to the purposes and legal bases described in this Privacy Policy.

11. International Data Transfers

VATINIUS LLC is located in the United States. Our service providers, including AI and infrastructure providers, may also process information in the United States or other countries.

Consequently, personal data originating in the European Economic Area (EEA), the United Kingdom, or other jurisdictions may be transferred internationally where necessary for the services described in this Privacy Policy.

Where applicable data-protection law requires a specific transfer mechanism, we will rely on an appropriate mechanism, such as:

An applicable adequacy decision.
Standard Contractual Clauses approved by the European Commission.
Other lawful safeguards or transfer mechanisms available under applicable law.

Where required, we will assess whether supplementary measures are necessary to protect transferred data.

Further information about the relevant safeguards may be requested through our privacy contact, subject to applicable law and the protection of confidential information.

International transfers will not be treated as permission to disregard applicable restrictions on purpose, access, retention, or disclosure.

12. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, subject to legal requirements and applicable rights.

The retention period depends on the type of information, the feature involved, whether an account remains active, the user's settings, and whether the information must be retained for legal, security, or dispute-related reasons.

12.1 Account Information

Account information may be retained while an account remains active and for an additional period reasonably necessary to process account closure, deal with disputes, prevent fraud, and meet applicable legal obligations.

12.2 User Content and AI Histories

Prompts, files, generated outputs, and histories may be retained while needed to provide the relevant feature, maintain saved work, or comply with user-selected settings.

Where users can delete saved content or their accounts, we will process the deletion request subject to technical limitations and applicable retention obligations.

12.3 Billing and Transaction Records

Transaction and billing records may be retained for the periods required by applicable tax, accounting, financial, and other legal obligations.

12.4 Technical and Security Logs

Technical and security logs may be retained for a limited period appropriate to troubleshooting, abuse prevention, incident investigation, and system security. Longer retention may be necessary for a documented incident or legal obligation.

12.5 Support and Communication Records

Support records may be retained for as long as reasonably necessary to resolve the relevant inquiry, maintain a service history, prevent repeated abuse, or address potential disputes.

12.6 AI Provider Retention

Third-party AI providers may maintain inputs, outputs, application state, safety records, or abuse-monitoring logs under their applicable terms and technical configurations.

OpenAI's standard API data controls describe abuse-monitoring retention of up to 30 days by default, subject to exceptions, while retention of application state can vary by endpoint and feature. We will not promise a shorter provider retention period unless the actual integration and settings support that promise.

12.7 Deletion and Backup Systems

When data is deleted from active systems, residual copies may remain temporarily in backups, disaster-recovery systems, security records, or other protected archives until they are overwritten or removed in accordance with the applicable retention process.

Where applicable law requires deletion, we will take reasonable and appropriate steps to comply.

13. Cookies and Similar Technologies

SayCover may use cookies, local storage, pixels, SDKs, and similar technologies to operate its website and applications.

These technologies may be used for:

Essential website and application functionality.
Authentication and session management.
Security and fraud prevention.
Remembering user preferences.
Measuring service performance.
Understanding website usage.
Marketing measurement or advertising, where implemented and legally permitted.

Where applicable law requires consent before non-essential cookies or similar technologies are stored or accessed, we will request consent before activating them.

You may be able to change your preferences through the available cookie settings or your browser settings. Disabling essential technologies may impair website functionality.

Cookie settings: SayCover currently has no optional cookie preference tool. Browser settings can remove local data but are not an opt-in mechanism for optional tracking.

Cookie Policy: Cookies and local storage

The actual technologies used should be disclosed in a cookie inventory and configured consistently with applicable law.

14. Marketing Communications

We may send service-related communications that are necessary to administer your account, provide the requested service, communicate security issues, or inform you of relevant contractual changes.

Where permitted by applicable law, we may also send marketing communications about SayCover and its services.

Where consent is required, we will ask for it separately. You may opt out of marketing emails by using the unsubscribe mechanism provided in the message or by contacting us.

Opting out of marketing will not prevent the delivery of essential account, billing, security, or legally required service communications.

15. Data Security

We use reasonable technical and organizational measures designed to protect personal data against accidental loss, unauthorized access, alteration, disclosure, or destruction.

Depending on the systems in use, measures may include:

Access controls and role-based permissions.
Authentication and account protection.
Encryption in transit and, where appropriate, at rest.
Security monitoring and logging.
Backups and recovery procedures.
Software updates and vulnerability management.
Confidentiality obligations for authorized personnel and service providers.
Incident response and access review procedures.

No website, transmission method, or storage system can be guaranteed to be completely secure. We therefore cannot guarantee absolute security, but we seek to maintain safeguards appropriate to the risks associated with the services and information processed.

Users are responsible for keeping their credentials secure and notifying us if they suspect unauthorized access to their accounts.

16. Automated Processing and AI Decisions

SayCover may use automated systems, including AI models, to generate content, summarize material, classify information, or provide other requested outputs.

These outputs may be based on statistical patterns and may be inaccurate or incomplete. AI-generated content should not automatically be regarded as factually correct or as professional advice.

Unless expressly disclosed for a particular feature, SayCover is not intended to make decisions based solely on automated processing that produce legal effects or similarly significant effects on individuals.

If we introduce a feature involving such decisions, we will provide additional information and implement the safeguards required by applicable law, including any applicable rights to human intervention, to express a point of view, and to contest a decision.

17. Your Privacy Rights

Depending on your location and the applicable law, you may have some or all of the following rights regarding your personal data.

17.1 Right of Access

You may request confirmation of whether we process your personal data and request access to that information, subject to applicable limitations.

17.2 Right to Rectification

You may ask us to correct inaccurate personal data or complete incomplete information.

17.3 Right to Erasure

You may request deletion of personal data where the applicable legal conditions are met.

17.4 Right to Restrict Processing

You may request that processing be restricted in the circumstances provided by law.

17.5 Right to Data Portability

Where applicable, you may request a copy of certain personal data in a structured, commonly used, machine-readable format and request that it be transmitted to another controller where the statutory requirements are met.

17.6 Right to Object

Where processing is based on legitimate interests, you may have the right to object on grounds relating to your particular situation. You have an absolute right to object to the processing of personal data for direct marketing purposes under the GDPR.

17.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

17.8 Rights Concerning Automated Decisions

Where applicable, you may have rights relating to decisions based solely on automated processing that produce legal effects or similarly significant effects.

17.9 Right to Lodge a Complaint

If the GDPR applies, you may lodge a complaint with a competent data-protection supervisory authority, particularly in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement.

17.10 How to Exercise Your Rights

To exercise a privacy right, contact us at:

Email: No official electronic contact has been supplied. Privacy requests may be sent to VATINIUS LLC at the postal address above; an official electronic contact still needs to be designated

Please identify the right you wish to exercise and provide sufficient information for us to locate the relevant data and respond securely.

We may request additional information where reasonably necessary to verify your identity and protect against unauthorized disclosure.

We will respond within the period required by applicable law. Some requests may be limited or refused where a valid legal exception applies, including where information must be retained to comply with legal obligations, protect another person's rights, or establish, exercise, or defend legal claims.

18. Account Closure and Data Deletion

If SayCover offers an account-deletion function, you may use it to request closure of your account and deletion of associated data.

You may also contact our privacy team to request deletion.

Following an account-deletion request, we will take the steps required by applicable law to delete or anonymize personal data that is no longer necessary, subject to lawful retention requirements, security records, legal claims, and technical backup procedures.

Deleting an account does not automatically delete information that must lawfully be retained or information held independently by third-party providers under their own applicable obligations and policies.

Where optional sharing for AI training has been enabled, account deletion or consent withdrawal will stop future sharing where required and technically applicable. It may not be technically possible to reverse all influence of data already incorporated into a trained AI model. We will assess any applicable legal deletion request in accordance with the law.

19. Children's Privacy

SayCover is not intended for use by children below the minimum age required under applicable law to use the service or provide consent to relevant data processing.

We do not knowingly collect personal data from children in circumstances where doing so would be unlawful.

If you believe that a child has provided personal data in violation of applicable requirements, contact us using the privacy contact details above. We will investigate and take appropriate steps in accordance with applicable law.

If the service is made available to minors in the future, the relevant age limits, parental-consent requirements, and safeguards will be addressed before the feature is offered.

20. Third-Party Websites and Integrations

SayCover may link to third-party websites or allow users to connect external services.

Those third parties may collect and process information under their own privacy policies and terms. We do not control the independent data practices of third-party websites.

Before connecting an external service, review its permissions and privacy information and only authorize access that you are comfortable granting.

21. U.S. State Privacy Rights

Depending on your state of residence and whether applicable legal thresholds are met, U.S. state privacy laws may provide additional rights, including the right to:

Know or access categories and specific items of personal information.
Request correction or deletion.
Obtain a portable copy of certain information.
Opt out of certain targeted advertising, sale, or sharing of personal information where those activities are covered by applicable law.
Appeal certain decisions concerning a privacy request.
Exercise statutory rights without unlawful discrimination.

The terminology and scope of these rights vary by state.

To submit a request, contact No official electronic contact has been supplied. Privacy requests may be sent to VATINIUS LLC at the postal address above; an official electronic contact still needs to be designated. We will verify and respond to the request as required by the law applicable to your residence.

Where a particular statutory right or disclosure requirement does not apply to VATINIUS LLC, the reference to it in this section does not create a right beyond what applicable law provides.

22. Business Customers and Third-Party Data

If you use SayCover on behalf of a business or organization, you must ensure that your use of the service and any information you submit comply with applicable law, relevant contractual obligations, and your organization's policies.

Where a customer uses SayCover to process personal data on behalf of another controller, the customer may need a separate data processing agreement with VATINIUS LLC.

The parties' respective responsibilities, instructions, security requirements, subprocessors, international transfer terms, and deletion obligations should be documented separately where required by applicable data-protection law.

Business customers must not submit another person's data for AI training or other optional purposes unless the relevant authorization and legal basis exist.

23. Do Not Track and Browser Signals

Some browsers offer privacy preferences or signals relating to tracking technologies.

Because these signals are not implemented uniformly across browsers and services, SayCover may not respond to every signal in the same way.

Where applicable law requires us to recognize a particular privacy signal, we will handle it as required by law.

You can also use our cookie settings, where available, to manage non-essential technologies.

24. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, data practices, legal obligations, or business operations.

When we update the policy, we will revise the “Last updated” date at the top of this page.

Where required by law, we will provide additional notice or obtain consent before introducing a new processing purpose that requires it.

Your continued use of SayCover after a policy update does not replace any consent that must be obtained separately under applicable law.

25. Contact Us

For questions, requests, or complaints relating to this Privacy Policy or the handling of personal data, please contact:

VATINIUS LLC
8206 Louisiana Blvd NE
STE A #10139
Albuquerque, NM 87113
United States of America

Privacy email: No official electronic contact has been supplied. Privacy requests may be sent to VATINIUS LLC at the postal address above; an official electronic contact still needs to be designated
Website: https://SayCover.com

Please include “Privacy Request” in the subject line of your communication and provide sufficient details for us to understand and respond to your request.

End of Privacy Policy

26. SayCover-specific storage and integrations

This section clarifies the general categories above for the currently implemented SayCover application.

Local workspace: Lectures, imported transcripts, notes, uploaded lecture materials, learning content, lecture chat histories and preferences are saved in your browser. Storage is separate per browser and domain. Clearing browser data may permanently remove these local copies; export important materials first.
Background recordings: Audio sections are uploaded to private cloud storage during recording. Processing jobs, audio sections and completed transcript segments are stored server-side so transcription can finish after the browser is closed. Importing a completed lecture or clearing local data is not equivalent to deleting these server-side copies. No automatic audio-deletion period is currently documented; the operator must define and implement one rather than promise immediate erasure.
Accounts and social features: Lovable Cloud provides hosted account, database and storage functions. Profiles, friendships, timetable entries, shared study items, transcript requests, quiz battles and subscription records are stored server-side as needed for those features. Sharing with friends discloses the selected content to the intended recipient; only share material you are authorized to disclose.
AI: Requested audio/text and necessary lecture or chat context are processed server-side and sent to OpenAI through its API for transcription, refinement, summaries, notes, questions and learning tasks. Do not upload secret, special-category or third-party confidential content without an appropriate legal basis and safeguards. See OpenAI data controls.
Payments: Stripe processes checkout, billing and customer-portal information. SayCover stores subscription/customer identifiers and status, not complete card numbers. Stripe’s independent processing is described in its Privacy Policy.
Connected services: Connecting Notion authorizes transfer of selected lectures to your workspace, including automatic transfers where enabled. Connection credentials are stored encrypted server-side and processed through the Lovable connector service. Disconnecting does not delete pages already sent to Notion. See Notion privacy.
Sign-in and external resources: Google sign-in is optional and handled through the Lovable sign-in integration. Google Fonts styles and font files are requested from Google when these pages load; Google receives your IP address and request metadata. Logo and other hosted assets use a content-delivery service. External-resource requests are not covered by a local-storage deletion action. See Google privacy.
Diagnostics: Hosting and error-reporting services may process request metadata and error information. No advertising-cookie preference interface is currently implemented. Actual hosted analytics/tracking settings and all subprocessors must be inventoried before making a no-tracking claim.
Deletion requests: The Settings action for local deletion clears this device’s local workspace/preferences; it does not close the hosted account, erase recording jobs/storage, cancel Stripe subscriptions or delete copies in Notion or another user’s account. Server-side deletion requests must be handled by the operator subject to applicable rights and retention obligations.

Outstanding operational review: Official privacy contact, EU representation where required, provider agreements, transfer mechanisms, server-side retention/deletion and external-font/tracking compliance require verification. This text alone does not implement those safeguards or permit all types of data processing.