Privacy policy

SaysAI Merchant redirects (/go) may record de-identified visit information such as time, referring page, and browser summary for analytics and troubleshooting. This is not sold to third parties.

Account services use usernames, password hashes, sessions, and voluntarily linked email addresses. Admission applications record business identity, contacts, supply evidence, and commitments, visible only to the merchant and admins, with version and review history retained.

To understand which public pages help users find services, we use a first-party attribution identifier valid for 30 days. It records the entry path, search referral domain, or campaign tags and links subsequent request publication and merchant quote statistics after sign-in. It does not store full referring URLs, search terms, IP addresses, email addresses, or request content. Only administrators can view aggregates; the data is not used to identify people externally or disclose their search sources to merchants. Analytics records are retained for at most 180 days and periodically deleted during site visits. Business and fulfillment records are stored separately.

When the browser sends Do Not Track (DNT) or Global Privacy Control (GPC), this site stops attribution tracking for that visit and clears the attribution identifier. Clearing this site's cookies also removes the browser identifier. Imported Google Search Console data analyzes overall site search performance and is not linked to individual accounts.

Registration, sign-in, and anonymous email requests use Cloudflare Turnstile. It processes browser information needed for human verification; server checks send the verification token and visitor IP to Cloudflare. Rate limits use keyed hashes. Plaintext codes and secrets are not written to application audit logs.