Privacy policy
Last updated on 8 November 2026
This explains what personal data Said Of Us holds, why, who sees it and what you can do about it. We use the UK GDPR as our standard.
Who we are
Said Of Us is run by Craig Addyman, who is the controller of your personal data. For anything in this policy, email hello@saidofus.com.
What we collect
- Waiting list: if you joined it before sign-up opened, your name, your email and when you joined.
- Your account: your name, your email, a scrambled version of your password, your workspace and your role in it.
- Your work in Said Of Us: brands, competitors, prompts, the AI answers they bring back, and the decisions and suggestions made from them. If a name appears in an AI answer or a prompt, it's stored with the rest.
- Your provider keys: your DataForSEO and TypeSafe keys, stored encrypted.
- Emails you send us: your address and whatever you write.
- Technical data: your IP address and browser details, in Cloudflare's short-lived request and error logs.
Why we use it
- To provide the service you've asked for. This covers your account, running your prompts and sending emails such as password resets. Our lawful basis is our contract with you, or the steps you've asked us to take before one.
- To contact people on the waiting list. If you joined it before sign-up opened, we may email you once to say you can now create an account. Our lawful basis is our legitimate interest in replying to your request.
- To keep the service safe and working. This covers security, backups and fixing faults. Our lawful basis is our legitimate interest in doing so.
- To meet legal duties, such as keeping records once we charge for the service.
We don't sell your data, show ads or use it for automated decisions about you. We won't send you marketing emails unless you've agreed to them.
Who we share it with
These suppliers handle data for us, and only for the purposes shown:
| Supplier | What it does |
|---|---|
| Cloudflare | Runs the website, sends our emails and forwards email sent to us |
| Hetzner | Hosts the main database, in Virginia, USA |
| Backblaze | Stores encrypted backups |
| Holds the mailbox that receives your emails to us, and our notes of waiting list sign-ups | |
| DataForSEO | Sends your prompts and locations to the AI engines, using your own key |
| TypeSafe | Reads each AI answer against your brand details, using your own key |
| TinyFish | Reads your website when you ask us to draft a brand, and checks Google rankings for the searches behind your answers |
| Anthropic | Writes that draft from your website pages and any notes you add |
Your DataForSEO and TypeSafe accounts are your own, so their terms and privacy policies also apply to them. If you join someone else's workspace, its owner and admins can see your name, your email and your work there. We may also share data if the law requires it.
Where your data goes
Our main database is in the USA and Cloudflare works worldwide, so your data is handled outside the UK and EU. Where the law requires it, we rely on safeguards such as the UK-US data bridge or standard contractual clauses.
How long we keep it
- Waiting list: until you ask us to remove you or we no longer need your details to manage access.
- Your account and work: until you delete them. Deleting your account in Settings removes it straight away, along with your workspace and everything in it if you own that workspace.
- Login sessions: up to 30 days. Password reset links: up to an hour.
- Backups: deleted data can stay in encrypted backups for up to about a year, until those backups expire.
Cookies and browser storage
We set one cookie, tracker_session, which keeps you logged in for up to 30 days. Your browser also stores your theme and the brand you last had open. Both are needed for the features you use, so we don't ask for consent. We don't use analytics or advertising cookies.
How we protect it
Data is encrypted in transit, passwords are stored only as salted hashes, provider keys are encrypted, and backups are encrypted. No system is perfectly secure, and if a breach puts you at high risk we'll tell you.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, limit how we use it or send it to you in a portable format. You can also object to uses based on our legitimate interests. Email hello@saidofus.com and we'll reply within one month.
If you're unhappy with how we've handled your data, please tell us first. You can also complain to the UK's Information Commissioner's Office at ico.org.uk.
Changes to this policy
We'll update the date above when this changes, and we'll email account holders about significant changes.