Saydone Privacy Policy
Version 2026-10-20. Saydone is a product of Msassi Design+Code Ltd., 1045 Woodhaven Drive, Kingston, Ontario K7P 0H7, Canada.
This policy says what personal information Saydone collects, why, who it goes to, how long it's kept, and your rights. It follows Canada's privacy law (PIPEDA) and Québec's privacy law (Law 25).
Privacy officer: Mohamed Sassi, privacy@saydone.ca. Write to this address for any question, request or complaint.
Who this covers
- Owners: the business owners who use Saydone.
- Clients: the people an owner quotes, books, invoices or messages through Saydone. For clients' information, the owner decides what is collected and why, and Saydone processes it for the owner. Clients can contact the owner or us.
What we collect
About owners
- Account: name, email, sign-in method (email, Apple or Google), language.
- Business: business name, phone, address, province, trade, logo, tax numbers, booking and message settings.
- Plan: plan status, store, renewal dates. Card details for web plans go to Stripe, not to us.
- Devices: phone or browser type, app version, push notification token, which permissions are on.
- Use: actions taken in the app, so it can sync across devices; error reports with no client details.
About clients (entered by the owner or the client)
- Name, phone, email, address, language and message choice.
- Quotes, visits, invoices, payments, messages and the client's answers on Saydone pages (such as accepting a quote, with the typed name, time and IP address).
- Photos the owner or the client adds.
- Recordings of a site visit, when the owner uses Talk your quote, and their written transcript.
About visitors to saydone.ca
- Cloudflare Web Analytics counts page views: the page, the referring site, the country, and the browser and device type. It sets no cookies and doesn't identify you.
What we don't collect
- Card numbers: card payments go through the owner's own Stripe account.
- Location: "On my way" works out an arrival time on the owner's phone and sends only the time.
- The full text of bank emails: with optional e-Transfer matching, we keep only the amount, sender name, bank, message and reference.
- We don't sell personal information, show ads, or track people across other sites.
Why we use it
- To run Saydone: save and sync the owner's work, send quotes, invoices and messages, take card payments, book visits and send reminders.
- To write draft quotes from recordings, when the owner uses Talk your quote.
- To keep accounts safe, stop abuse and fix problems.
- To bill the Saydone plan and meet tax and legal duties.
Who we share it with
We share personal information only with the service providers that run Saydone, and only what each one needs:
| Provider | What it does | Where |
|---|---|---|
| Cloudflare | Hosting, database, file storage, email sending; backup speech-to-text (Talk your quote) | Canada and the United States |
| Stripe | Owners' card payments and our web plan billing | Canada and the United States |
| Superwall | Plan purchases across Apple, Google and the web | United States |
| Apple and Google | Sign-in, app stores, push notifications | United States |
| AssemblyAI | Turns recordings into text (Talk your quote) | United States |
| Anthropic | Writes the draft quote from the text (Talk your quote) | United States |
| Telnyx | Sends texts to clients | Canada and the United States |
Information stored or processed outside Québec or Canada is protected by contracts with these providers and by the privacy assessment we did before using them. It may be accessible to authorities under the laws of those countries.
We don't let these providers use the information for their own purposes. AssemblyAI, Cloudflare and Anthropic don't use Saydone recordings or text to train their models.
We may also share information when the law requires it, or to protect someone's safety.
Recordings and AI
Before the first recording, Saydone asks the owner for explicit permission and names AssemblyAI and Anthropic (Cloudflare turns speech into text only if AssemblyAI is down). Nothing is sent to them before that. Recordings are deleted after the period the owner picks (7, 30 or 90 days). The transcript and the quote stay with the owner's records. The owner can delete any recording, or all of them, at any time.
How long we keep it
- The owner's records stay while the account is open.
- Deleted items are kept 30 days so every device hears about it, then removed.
- When an owner deletes their account, it is removed after 30 days.
- Recordings: 7, 30 or 90 days, as the owner chooses.
- Staff access records: 2 years.
- Records of events from our providers (payments, plan changes, text delivery): 30 days.
Your rights
You can ask to see the personal information we hold about you, correct it, get a copy in a usable format, or have it deleted. Owners can do most of this in the app: edit, export, or delete the account. Clients can ask the owner, or write to privacy@saydone.ca. We answer within 30 days.
You can also complain to the Office of the Privacy Commissioner of Canada, or, in Québec, to the Commission d'accès à l'information.
Security
Data is encrypted in transit and at rest. Sign-in links, codes and session tokens are stored only as keyed fingerprints. Each business's data is kept apart. Files are never public. Our logs don't contain client names, amounts, transcripts or audio. If a breach puts people at real risk, we tell them and the regulators as the law requires.
Children
Saydone is for businesses. It isn't meant for anyone under 18.
Changes
We show changes to this policy in the app and on this page, with the new version date.
Contact
Privacy officer: Mohamed Sassi, privacy@saydone.ca, Msassi Design+Code Ltd., 1045 Woodhaven Drive, Kingston, Ontario K7P 0H7.