Privacy Policy

1. Introduction

Sanaf AI Solutions ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and what rights you have over your data. It applies to all visitors and users of our websites and services.

2. Information We Collect

We collect the following categories of information:

• Account information: name, email address, and password (hashed) when you create an account; optionally your phone number.
• Billing information: payment method details processed securely by Stripe. We do not store full card numbers.
• Usage data: log data, IP addresses, browser type, pages visited, and feature usage within the platform.
• Content you provide: website URLs, documents, and other content you upload to our products for AI processing.
• Communications: messages you send us via email or support channels.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Services
• Process payments and manage subscriptions
• Send transactional emails (account verification, password reset, billing receipts)
• Respond to support requests
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Send product updates and marketing communications (you can opt out at any time)

4. Cookies and Tracking

We use cookies and similar technologies to maintain your session, remember your preferences, and understand how the Services are used. Session cookies are essential for authentication and expire when you close your browser. Persistent cookies may be used for preference storage and analytics.

We use privacy-respecting analytics tools. We do not sell data to advertisers or use cross-site tracking for advertising purposes.

5. Third-Party Services

We share data with the following third-party providers as necessary to operate the Services:

• Stripe — payment processing
• OpenAI — AI processing for product features (content you submit may be sent to OpenAI)
• Resend — transactional email delivery
• Neon / Cloudflare — database hosting and storage infrastructure
• Vercel — application hosting
• Sentry — error monitoring

Each provider is bound by their own privacy policy and data processing agreements where applicable.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Services. After account deletion, we retain certain data for up to 90 days for fraud prevention and legal compliance purposes, after which it is permanently deleted.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the data we hold about you
• Correction: request correction of inaccurate data
• Deletion: request deletion of your account and associated data
• Portability: receive your data in a machine-readable format
• Objection: object to processing for direct marketing purposes
• Restriction: request that we limit processing in certain circumstances

To exercise any of these rights, contact us at privacy@sanaf.io. We will respond within 30 days.

8. Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage for sensitive fields, and access controls. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but we take reasonable precautions to protect your data.

9. Children's Privacy

The Services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice within the platform. The "Last updated" date at the top of this page reflects the most recent revision.