TermsPrivacyRefunds

Privacy Policy

Effective September 21, 2026

This policy explains what personal data SayaSite (operated by ZZ.BUSINESS) collects, why, who we share it with and what you can do about it. It covers our website, the dashboard, and the websites we host for our customers.

1. Data about you, the account owner

WhatWhy
Email, name, password (stored only as a salted scrypt hash)To create your account and let you sign in
What you tell us about your business, your site content, the photos you upload, your messages to the AI editorTo build and change your website — this is the Service
Voice messagesConverted to text so the editor can act on them. The audio is not stored after transcription; the text is saved in your editor history.
Billing detailsHandled by our payment partner. We do not see or store your full card number.
A session cookie (zzs)Keeps you signed in for up to 30 days. We use no advertising cookies in the dashboard.

2. Data about visitors to our customers’ websites

For each website we host we collect, on behalf of the site owner:

For this data the site owner decides why it is collected (they are the controller) and we process it for them. Visitors who want their request deleted can contact the business directly or write to us.

3. Service providers who process data for us

ProviderPurpose
Anthropic (Claude API)Designing and editing websites from your text and photos
Google (Gemini API)Generating illustrative photos; backup text generation
GroqConverting voice messages to text
Google FontsServing fonts used on the dashboard and websites
CloudflareDNS and email routing for zz.business
Payment partner (merchant of record)Taking payments, taxes and invoices

These providers receive only what they need for their task. We use these providers through their business API services, not consumer apps.

We do not sell personal data and do not share it for advertising. We may disclose data if required by law or to protect the Service and its users from fraud or abuse.

4. Where data is stored

Our servers are located in Ukraine. Service providers above may process data in the United States and other countries. By using the Service you understand your data may be transferred internationally; where the law requires, we rely on appropriate safeguards offered by those providers.

5. How long we keep it

6. Security

All traffic uses HTTPS. Passwords are hashed, sessions use random tokens in HttpOnly secure cookies, and each account can only access its own sites. No system is perfectly secure; if we learn of a breach affecting you we will tell you without undue delay.

7. Your rights

You can see and change your data in the dashboard, export your CRM as CSV, and delete sites or your account yourself. You can also ask us to access, correct, delete or export your personal data, or object to how we use it, by emailing zz@zz.business. Depending on where you live (for example the EU, UK or California) you may have additional rights, including complaining to your data protection authority. We will not treat you differently for using them.

8. Children

The Service is for businesses and is not directed at children under 16. We do not knowingly collect their data.

9. Changes

We will post any changes here and update the date above. If a change is significant we will also email account owners.

10. Contact

ZZ.BUSINESS · zz@zz.business