Privacy Policy

• Account details — your email address and, if you provide it, your name.
• Your projects — the goals you enter, the workflows generated, results you choose to save, feedback and preferences (such as your display currency).
• Billing — if you subscribe, our payment processor handles your card details; we store only a customer reference and your plan status, never card numbers.
• Basic technical data — the minimum needed to run the service securely (for example, to rate-limit abuse).
• Messages you send us — if you use the contact form, we keep your message and email address so we can reply.
• Product analytics— we use Google Analytics to understand which features are used so we can improve Saryu. It sets analytics cookies and records anonymised usage; IP addresses are anonymised and we don't use it for advertising. If your browser sends a "Do Not Track" or Global Privacy Control signal, we don't load it at all. We do not sell your data.

Besides analytics (above), Saryu sets only an essential session cookie that keeps you signed in. There are no advertising cookies.

To provide the service: create your account, generate and store your workflows, show your costs in your chosen currency, process subscriptions, and keep the service secure. We use it to operate and improve Saryu — not to profile you for advertising.

We send service emails only — account verification, password resets, receipts and subscription notices. We will not send you marketing email without your consent.

Saryu's core planning is deterministic and runs on our servers without sending your goal text to any AI provider. Some optional, clearly-labelled features can send a limited, minimised version of your project to an AI provider to improve quality — only when you opt in, and internal step identifiers are never shared. You can avoid these features entirely and Saryu still works.

Only the service providers we need to run Saryu: our cloud host and database (Google Firebase), our payment processor (Stripe), our email delivery provider, and — for opt-in AI features — the specific AI provider involved. Each processes data only to provide their part of the service. We may disclose information if required by law.

Your data is stored in Google's Australian region. Some of our providers (such as Stripe, Google Analytics and AI providers) may process data outside Australia, including in the United States, under their own safeguards.

You can edit or delete your projects at any time. From your account page you can download an export of your data (profile, subscriptions and projects) and delete your account yourself — deletion removes your projects and personal data from our systems. You can also ask us to access, correct, export or delete your data at any time using the contacts below. Some records may be retained where the law requires it (for example, billing records).

Data is stored with a reputable cloud provider and accessed over encrypted connections. No system is perfectly secure, but we design Saryu to hold the minimum data needed and to keep sensitive operations on the server side. If a data breach occurs that is likely to cause you serious harm, we will notify you and the relevant regulator as required by law.

Questions, or want your data deleted? Use our contact form or email hello@saryu.ai. If you are unhappy with how we handle your personal information and we cannot resolve it, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au) or your local data protection authority.