How we handle your data
We never train AI models on your business data
We do not train AI models on your business data.
- Your data is used only to answer your questions and run features you enable.
- AI guidance is generated per-request and not retained for model training.
- You can export or delete your data at any time.
- High-stakes legal/tax/compliance guidance is informational and not a substitute for a licensed professional.
- Mailbox ingest (email sync) requires explicit tenant consent and is skipped when consent is unset or revoked.
- Meeting transcript ingest (Teams calendar sync) and team chat ingest (Slack/Teams channel history) each require their own explicit tenant consent and are skipped when that consent is unset or revoked.
- Ingested communications are tenant-scoped (isolated by tenant_id and row-level security).
Last updated September 23, 2026
Found a security problem?
Report it to security@hellosaasy.ai. A human acknowledges every report within 3 business days. Our vulnerability disclosure policy sets out what is in scope and the safe harbour you are testing under.