Privacy

Last updated 8 October 2026. Sauror AI is operated by Marc Hemat, sole trader, SIREN 942946419. Contact: contact@sauror.com

What we store about you. Your email address and name, because an account needs both. A password, stored only as a hash by our authentication provider, which we never see. The workspaces you create, the site addresses you track, the questions you ask us to track, and the answers the assistants gave. If you pay, a customer reference from our payment processor; we never see or store your card.

What we store about a site you track. Pages we fetch from it, the way any search engine would, and what the assistants said about it. We do not fetch pages behind a login, and we honour robots.txt for our own crawler.

Why. To run the product you asked for: to ask your questions, to keep the answers so you can see them change, to bill you, and to answer you when you write to us. The legal basis is the contract between us, except for analytics, which is consent, and for the security records below, which is our legitimate interest in keeping accounts from being broken into.

Emails we send you. Two kinds. The ones the service needs: confirming your address, resetting a password, your trial, your subscription, its cancellation and the end of your access. They are part of the contract and you cannot turn them off. And a few optional ones: help getting started while you are on trial, a reminder if you stopped setting up, and at most two messages after your access ends, thirty and a hundred and twenty days later, then nothing. The legal basis for those is our legitimate interest in helping people who signed up use what they signed up for, and in telling former customers about the same service. Each carries a link to unsubscribe, and Settings has a switch. We send at most one such email a week. We keep a record of what we sent you and when, and your opt-out, for as long as your account exists; if you delete your account, the record goes with it and only your address is kept on a list of addresses we must not write to.

Who processes it for us. Supabase, for the database and authentication. Vercel, for hosting. Stripe, for payments. Resend, for the emails the product sends. OpenRouter, Anthropic, Google and Mistral, for the models that read a site and write questions. DataForSEO, for search results. Bloow and Google Analytics, for analytics, and only if you accept them. Each is a processor acting on our instructions, and we do not sell anything about you to anybody.

What we send to a model. A page's public text, the questions you chose, and the name of your company. Never your email, your password, your card, or anything belonging to another client.

How long. Your account and its data for as long as the account exists. After you delete it, thirty days, which is the time a backup takes to roll off. Billing records for ten years, because tax law says so. Analytics, thirteen months.

Your rights. Access, correction, deletion, a copy in a portable form, objection, and the right to complain to the CNIL. Settings has a button that deletes the account and everything in it. Anything else, write to contact@sauror.com and we answer within thirty days.

How we measure. Measurement is automatic: nothing to install. We ask the questions you chose on the assistants your workspace tracks, three times each, every two weeks, and we keep the answers, the sources they cite, and who they name. We do not read your other browsing, and we never receive your passwords.

Where. Our providers may process data outside the European Union. Where they do, the transfer rests on the European Commission's standard contractual clauses.

Changes. If this page changes in a way that matters, the date above changes and we email you before it takes effect.