Say & Sway Privacy Policy
Last updated: 28 October 2026
Marta Teresa Pin (ABN 61 791 251 003), who operates Say & Sway ("we", "us"), respects your privacy. This policy explains what we collect, why, who helps us process it, how long we keep it, and your choices.
1. What we collect
Things you give us
- AI twin: your training video, consent recording and voice sample.
- Free taster: your quiz answers, the ideas we create from them, your name and email, and whether you agreed to tips and launch news.
- Account details: your name, email address, password (stored securely, never readable by us) and profile choices. Profile choices include your business type, goals, platforms and brand colours.
- Brand Brain answers: what you type or speak in interviews, and the documents created from them.
- Content you create or upload:
- videos, audio and voice recordings
- transcripts, scripts, captions and ideas
- brand files you upload, such as brand guides, logos and screenshots
- Research inputs: the public social media accounts and websites you ask us to look at.
- Messages to us: emails, feedback and survey answers.
- Founding waitlist: your first name, email and, if you share it, your type of business, when you join the founding 50.
Things we collect automatically
- Usage data: which features you use, how much you use them (for example, videos exported and research runs), and errors.
- Device and log data: browser, device type, IP address and approximate location from your IP address, plus the essential cookies that keep you signed in.
Things from others
- Public social media data: when you run research, we collect public posts and their public numbers (for example views and likes) from the accounts you choose. We use them only to produce insights for you.
- Payment details: these are handled by Paddle, our reseller. We see your plan, payment status, country and the last digits of your card. We never see your full card details.
2. How we use it
- To run Say & Sway for you: build your Brand Brain, write ideas and scripts, transcribe and edit your videos, run your research and save your work.
- To manage your account, plan, limits and billing.
- To run the founding waitlist: hold your spot and email you when founding spots open.
- To keep the service safe and fair, for example to prevent abuse and fraud and enforce plan limits.
- To fix problems and improve Say & Sway. We use usage data in aggregated form wherever possible.
- To send you service emails, such as your account, receipts, "your video is ready" and important changes.
- To send you tips and offers, only if you've agreed. You can unsubscribe anytime.
We don't sell your personal information, and we don't use your content to train AI models.
3. Who helps us
We use trusted providers that process data on our behalf, under their business terms, only to deliver Say & Sway:
| Provider | What they do | Where data may be processed |
|---|---|---|
| Lovable (Lovable Cloud) | App hosting, database, file storage, connection to AI models | Outside Australia, mainly the US or EU |
| Anthropic (Claude), via Lovable | Writing, interviews, research summaries, edit decisions | US |
| ElevenLabs | Speech-to-text (your spoken answers and videos), reading questions aloud | Outside Australia, mainly the US or EU |
| Creatomate | Rendering your finished videos | Outside Australia, mainly the US or EU |
| HeyGen | Creating your AI twin and twin videos · stores your training video, consent video and voice sample | Outside Australia, mainly the US or EU |
| Apify | Collecting public social media posts for research | Outside Australia, mainly the US or EU |
| Upload-Post | Posting to the social accounts you connect, and reading your posts' stats (views, reach, saves, shares) for your reports | Outside Australia, mainly the US or EU |
| Firecrawl | Reading public websites, e.g. to extract your brand colours | Outside Australia, mainly the US or EU |
| Paddle | Payments, tax and invoices (merchant of record) | UK/EU/US |
| Our email provider (via Lovable) | Sending emails | Outside Australia, mainly the US or EU |
| Our error-tracking provider | Error tracking | Outside Australia, mainly the US or EU |
| Our partner-tracking tool (once we use one) | Tracking referrals for our partner program | Outside Australia, mainly the US or EU |
We may also share information if the law requires it, to protect people's safety or rights, or as part of a business sale. In a sale, we'd let you know first.
4. Legal bases (UK and EU users)
We process your data:
- to perform our contract with you (running the service)
- for our legitimate interests (security, preventing abuse, improving the service, research insights based on public data)
- with your consent (marketing emails, optional cookies)
- to meet legal obligations (for example tax records, kept through Paddle)
5. How long we keep it
| What | How long |
|---|---|
| Raw video uploads and recordings | 30 days, then deleted automatically. Finished videos are kept. |
| AI twin training video, consent recording and voice sample | Until you delete your twin or close your account, including removal from HeyGen |
| Finished videos, documents, scripts and captions | Until you delete them or close your account |
| Free accounts with no activity | Videos deleted after 60 days of inactivity (you get notice first) |
| Research data | Until you delete the report or close your account |
| Backups | Up to 30 days after deletion |
| Billing records | As required by law (held by Paddle) |
| Free taster leads who never sign up | 12 months, then deleted automatically |
| Founding waitlist details | Until the founding offer closes, then deleted unless you've become a member. You can ask us to remove them anytime. |
When you close your account through Settings → "Delete my account and videos", we delete your personal information and content. The only exceptions are copies we have to keep by law and backups, which expire within 30 days.
6. Sending data overseas
Our providers may store or process data outside your country, for example in the US or the EU. We choose providers that protect data appropriately and use recognised safeguards where the law requires them, such as standard contractual clauses.
7. Security
We use encryption in transit, access controls, private storage for your videos and limited staff access. No system is perfectly secure. If a data breach is likely to cause you serious harm, we'll tell you and the regulator as the law requires.
8. Your rights and choices
Depending on where you live, you can ask to:
- access your personal information or get a copy
- correct it
- delete it
- object to how we use it, or limit it
- withdraw consent (for example to marketing)
- take a copy of your content (download it from your Brand Vault)
To do any of these, email hello@sayandsway.com. We'll reply within 30 days. If you're not happy with our answer, you can complain to your regulator:
- the OAIC (Australia)
- the ICO (UK)
- your local EU data protection authority
9. Cookies
We use essential cookies to keep you signed in and keep the app secure.
10. People in your videos and other people's data
- People in your videos: if your videos include other people, make sure they're happy to appear.
- Research data: research uses only public information from accounts you choose, and only to give you insights. If you believe we hold your public posts through someone's research and want them removed, email us.
11. Children
Say & Sway is not for anyone under 18. We don't knowingly collect children's information.
12. Changes
We'll update this policy as Say & Sway changes. If a change is important, we'll tell you by email or in the app.
13. Contact
Marta Teresa Pin (operator of Say & Sway), 3/72 Curlewis Street, Bondi Beach NSW 2026, Australia Privacy contact: hello@sayandsway.com