Privacy statement · Sayvanta

1. Who is responsible

Sayvanta is a trade name of a Dutch sole proprietorship (eenmanszaak). This business is the controller for the personal data described here.

KvK number: 91344751
VAT number: NL004884285B65
Address: Mondriaanstraat 34, 6374 PH Landgraaf, the Netherlands (not a visiting address: please contact us by email)
Email: hello@sayvanta.com

Sayvanta has no data protection officer; it is not required to appoint one. Write to hello@sayvanta.com with any privacy question.

2. The app: your speech and text stay on your Mac

Speech recognition and the optional AI clean-up run on your Mac. Recordings, transcripts and the text Sayvanta writes are not sent to Sayvanta or to any cloud service. The app has no analytics, telemetry or crash reporting.
History, retained audio, your dictionary, snippets, learning data and settings are stored only on your Mac, under the settings you choose. By default history is kept for 30 days, audio is not kept, and text that could not be inserted is kept for up to 7 days so you can recover it. Incognito saves nothing to disk: text it could not insert stays in memory only, until you dismiss it. Sayvanta cannot see or access any of it.
Context is read only for the categories you allow: the name of the app you dictate into (the only one on by default), its window title, the website domain open in your browser, selected text and the clipboard. It is used on your Mac and never uploaded.
Because this data never leaves your device, Sayvanta does not process it as a controller. You can delete it in the app at any time. Sayvanta does not encrypt it itself, so your Mac’s disk encryption, login and backups protect it; text that Sayvanta copies to the clipboard can also be read by other apps and clipboard managers.

3. License activation and checks

What is sent. When you activate Sayvanta, and from time to time afterwards, the app sends sayvanta.com your license key, a random installation ID created on your Mac, the platform (macOS) and the app version. It sends no audio, text, name, email address, hardware identifier or device name. Like every internet request, the request also shows your IP address.

What Sayvanta stores. A keyed hash of your license key and its first characters (such as SV-AB12), never the key itself, with the plan, status and update end date. For each activated device: the installation ID, platform, app version and the dates of activation, last check and deactivation. To stop key guessing, Sayvanta counts requests per IP address and per key in one-minute windows, stored only as keyed hashes and deleted within a day.

Why. To provide the license you bought or received (contract), and to protect the license service against abuse (legitimate interest).

On your Mac the license key and the signed license are stored encrypted in Sayvanta’s data folder. The encryption key and the installation ID are kept in the macOS Keychain, on that Mac only.

4. Purchases, renewals and billing

Link sells your license. Purchases and update renewals are made through Stripe Managed Payments. Link (Sold through Link, LLC) is the merchant of record: it runs checkout, collects your payment, billing and tax details, and sends your invoices and receipts. Link and Stripe process that data as independent controllers under their own privacy policies. Sayvanta never receives your full card details.

What Link shares with Sayvanta. Your name, email address, billing address and country, any tax ID, what you bought, the price and the payment status. Sayvanta sees them in its Stripe account and uses them to answer your questions, handle refunds and disputes, keep its accounts, and email you about your purchase, for example about a price change. Sayvanta does not copy them elsewhere, except in its bookkeeping records.

What Sayvanta stores itself. The Stripe identifiers of your purchase (customer, checkout, payment or subscription), what you bought, its price and currency, its status and payment date, and the license it issued or renewed. It also keeps a keyed hash of the email address used at checkout, not the address itself, so that support can find your purchase from the address you write from.

Key delivery. After payment, your license key is shown on the purchase page in the browser where you checked out. The key is stored there encrypted until you mark it as saved, for at most seven days. An essential cookie (HttpOnly and Secure) proves that this browser started the purchase or renewal; it lasts up to 30 days. No consent is needed for it, because delivery cannot work without it.

Renewals. To renew updates, you enter your license key on sayvanta.com/renew. Sayvanta uses it only to find your license. The key is not stored with the renewal and is not sent to Stripe.

Why. To sell and deliver your license and answer your questions (contract), and to keep the records bookkeeping law requires (legal obligation).

5. This website

Hosting. Vercel serves sayvanta.com and runs its server code in Frankfurt; the license database is hosted by Neon in Frankfurt. Serving a page processes your IP address and request details, which Vercel keeps in runtime logs for 1 day. To stop abuse, Vercel’s firewall may challenge a browser and set its own cookie.
Your browser. Your theme, language and analytics choice are kept in your browser’s local storage. They are never sent to Sayvanta.
Google Analytics, only if you allow it. The site asks first. Until you choose Allow, no Google script loads and nothing is sent to Google. If you allow it, Google Analytics sets cookies and receives the pages you view, your browser, device type and approximate location, so Sayvanta can see how the site is used. Advertising features and Google signals are off. Purchase result pages, the renewal page and the withdrawal form never load it. You can change your choice at any time under “Cookie settings” at the bottom of every page; declining removes Google’s cookies. Legal basis: your consent.
No other trackers. The site has no advertising scripts, social media plugins or fingerprinting, and its fonts are served from sayvanta.com itself.

6. Updates, speech models and support

Updates. Sayvanta for Mac checks for updates when you choose Check for Updates, or about once a day if you turn on automatic checks. It downloads a release list from GitHub, which also hosts the app and its updates. GitHub sees your IP address and the app’s name and version. No license or account data is sent.
Speech models. When you choose a speech or clean-up model, the app downloads it from Hugging Face, which sees your IP address and the app’s version. Models are never downloaded without your request.
Support email. If you email hello@sayvanta.com, Sayvanta uses your message and email address to answer you and, where needed, to find your purchase. The mailbox is hosted by Strato in Germany.
Withdrawal form. If you withdraw from a purchase with the form on sayvanta.com, Sayvanta uses the name, email address and purchase details you enter to confirm your withdrawal by email and to refund your purchase. The confirmation is sent from the Strato mailbox, which keeps a copy like a support email. To stop misuse of the form, Sayvanta counts its use per IP address and per email address, stored only as keyed hashes and deleted within a day. Legal basis: legal obligation.

7. Who receives data

Sayvanta does not sell personal data or share it for advertising. These providers process it:

Link and Stripe (independent controllers): checkout, payments, tax, invoices, refunds and disputes; they share your order details with Sayvanta. United States and EEA.
Vercel (processor): website hosting and server code. Server code in Frankfurt; company in the United States.
Neon (processor): the license and purchase database. Frankfurt; company in the United States.
Google (processor, only after your consent): website analytics. United States and EU.
Strato (processor): the support mailbox and withdrawal confirmations. Germany.
Cloudflare (DNS provider): name lookups for sayvanta.com; it does not carry the site’s traffic. Worldwide.
GitHub (independent provider, contacted by your Mac or browser): app downloads and update checks. United States.
Hugging Face (independent provider, contacted by your Mac): speech and clean-up model downloads. United States and EU.

Transfers outside the EEA. Vercel, Neon, Google and Stripe/Link are companies based in the United States. Where data can be reached from outside the EEA, Sayvanta relies on the EU–US Data Privacy Framework for companies certified under it, and otherwise on the European Commission’s standard contractual clauses in the provider’s data processing terms. GitHub and Hugging Face receive requests directly from your device, under their own privacy policies.

8. How long data is kept

License record (key hash and prefix, plan, status, update end date), with its device activations and the keyed hash of the checkout email: while the license exists, then 2 years after it ends.
Purchase records (Stripe identifiers, product, price, status, payment date): 7 years after the year of purchase, the Dutch bookkeeping period, and never less than the license they paid for.
Order details in Sayvanta’s Stripe account: under Stripe’s own retention; Sayvanta’s bookkeeping copies for 7 years.
Encrypted key on the purchase page: until you mark it saved, at most 7 days.
Purchase cookie in your browser: up to 30 days.
Rate-limit counters: less than a day.
Vercel runtime logs: 1 day.
Google Analytics data: 2 months.
Support emails and withdrawal confirmations: 2 years after the last message.
Database backups: only within the database host’s restore window, after which they are overwritten.

Data on your Mac stays until you delete it in the app or remove the app’s data.

9. Your rights

You can ask Sayvanta to see, correct or delete your personal data, to restrict or object to its use, or to receive it in a portable form. Where you gave consent, such as for Google Analytics, you can withdraw it at any time; “Cookie settings” at the bottom of every page does this in one click. Send your request to hello@sayvanta.com. Sayvanta answers within one month and may ask for your license key prefix or purchase reference to find your data. For payment data, Link also takes requests through Link support.

If you are not satisfied, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority where you live.

Sayvanta makes no decisions about you by automated means alone. You need a license key to use Sayvanta, and Link needs your payment details to sell it; without them you cannot buy or activate it. Sayvanta and this website are not aimed at children under 16.

10. Security

License keys and checkout email addresses are stored only as keyed hashes, and keys awaiting delivery are encrypted. On your Mac the license is stored encrypted, with its key in the Keychain. Connections use HTTPS, the database is reached only over verified encrypted connections, and the website’s database login can read and write only its own tables. More on the security page.

11. Changes and contact

Sayvanta may update this statement; the date at the top shows the current version. Material changes are announced on sayvanta.com before they apply. Questions: hello@sayvanta.com. The terms cover buying and using Sayvanta.