Privacy Policy

Introduction

AskSayso, Inc. ("Sayso," "we," "us," or "our") values your privacy. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and how we protect it when you visit www.asksayso.com or use our related applications, browser extensions, integrations, and services (collectively, the "Service").

By using the Service, you agree to this Privacy Policy. If you do not agree, you should stop using the Service.

This Policy applies to users who are at least 18 years old. We do not knowingly collect information from anyone under the age of 18.

Information We Collect

We collect two types of information:

• Personal Information: Information that identifies you or can reasonably be linked to you, such as name, email address, phone number, billing details, or account credentials.
• Non-Personal Information: Information that does not identify you directly, such as browser type, device information, and aggregated usage data.

Information You Provide Voluntarily

• Account Registration: Name, email address, password, and other details to set up and manage your account.
• Communications: Contact details and message content when you email us, fill out a form, or chat with support.
• Billing & Transactions: Payment information (processed by secure third-party providers), billing address, and purchase history.
• Events & Webinars: Registration details if you attend a Sayso-hosted event.
• Feedback & Contributions: Information you choose to share when giving feedback or using community features.

Information Collected Automatically

• Usage Data: Pages visited, features used, time spent, and referring URLs.
• Device Data: IP address, browser type, operating system, and device identifiers.
• Cookies & Tracking: Small data files stored on your device to enable functionality, improve performance, and analyze usage. We use tools like Google Analytics to better understand user behavior. You can adjust cookie settings in your browser.
• Advertising Measurement: We use advertising tools, such as the Meta pixel, that collect information about your visit and share it with advertising partners to measure and target our advertising. Some state laws treat this as "sharing" personal information, and you can opt out as described in "Your Rights & Choices" below.
• Visitor Identification: We use a visitor identification service that may associate your visit with business contact information, such as a name, company, or business email, to help us understand who is interested in Sayso.

When you use Sayso during calls, we also collect and store conversation data. Because this is central to how the Service works, we describe it in its own section below.

Conversation Data

When you use Sayso during a call, the Service processes the conversation in real time to surface live cues and capture notes. To provide these features and your session history, we create and store a record of each session in your account. A session record may include:

• Transcripts: A written, speaker-labeled transcript of the conversation, with timestamps.
• Cues & Insights: The live cues Sayso surfaced during the call and the conversation signals that triggered them.
• Signal Activity: A log of which conversation signals were screened and detected during the call, and when.
• Interaction & Reaction Data: The cues and signals Sayso shows during a call, whether they were used, and how call participants responded, including timing, sentiment, and shifts in conversation signals after a cue. We use this to learn which prompts change conversations.
• Notes & Summaries: Notes Sayso captured during the conversation and a short summary of the call.
• Session Details: Date, duration, conversation stages, features used, and, if you connect your CRM, the lead the session was linked to.
• Outcome Data: Whether an appointment was booked, held, signed, or closed, and, where your CRM is connected, transaction and commission values plus lead name and record identifiers. We link Outcome Data to session records to learn which cues worked.
• Market Context: Local market statistics for areas discussed during the conversation.

Automated Processing

Sayso uses automated processing to analyze, in real time, how you and the people you speak with respond to prompts and cues, and to score conversation signals. We use this to guide the agent and improve our models. This processing does not make legal or similarly significant decisions about you.

How We Use Conversation Data

• To provide the Service, including live cues, captured notes, and session history
• To review, test, and improve how Sayso's signals and cues perform
• To train, tune, evaluate, and improve Sayso's own proprietary signal, cue, and coaching models, using conversation, interaction, reaction, and outcome data
• To create de-identified and aggregated data, as described in "De-identified & Aggregated Data" below

What We Do Not Do

• We do not sell your identifiable personal information or raw transcripts
• We do not use your conversations to train third-party or general-purpose foundation models
• We do not share your transcripts, notes, or session records with anyone outside Sayso, except the service providers that help us operate the Service (such as hosting and AI processing) under confidentiality and data protection obligations, except de-identified and aggregated derivatives as described in "De-identified & Aggregated Data" below, or when required by law

De-identified & Aggregated Data

We may create, own, license, sell, and disclose de-identified and aggregated data and derivatives of conversation, interaction, reaction, and outcome data, including cue-and-reaction patterns, benchmarks, and market intelligence, and including in industries beyond real estate. We de-identify this data so it can no longer reasonably be used to identify you or the people you speak with, and we contractually prohibit recipients from attempting to re-identify it.

People You Speak With

Transcripts include what the people you speak with say during a conversation. We protect that information under this Policy the same way we protect yours.

By using Sayso, you agree to provide any notice and obtain any consent required by applicable law before using Sayso on a call. This covers both the recording or transcription of the conversation and the analysis and commercial use of conversation data described in this Policy, including in states that require all parties to consent. A simple verbal disclosure at the start of a call works, for example: "Just so you know, I use software that transcribes and analyzes our conversation so I can serve you better. Is that okay with you?"

If you spoke with a Sayso user and would like to know what information we hold about that conversation, or would like it corrected or deleted, email support@asksayso.com. We will handle your request under this Policy whether or not you have a Sayso account.

Retention & Deletion

We retain session records while your account is active. After account closure, we delete raw identifiable records within 30 days, except de-identified interaction, reaction, signal, and outcome records, and any data already incorporated into trained models or aggregates, which we retain. You can request a copy of your conversation data, or ask us to delete it, by emailing support@asksayso.com. See "Your Rights & Choices" below for details.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Generate live cues, notes, and session history when you use Sayso on calls
• Process transactions and manage your account
• Respond to inquiries and provide support
• Send service updates, security alerts, and relevant product communications
• Detect, prevent, and address fraud or security threats
• Comply with legal obligations

For how we handle data from your conversations, including de-identified and aggregated data, see the "Conversation Data" section above.

When We Share Information

We may share your information in the following situations:

• Vendors & Service Providers: With trusted third parties who perform services for us (e.g., hosting, analytics, payment processing) under contractual confidentiality and data protection obligations.
• Analytics & Advertising Partners: With analytics and advertising partners, such as Google and Meta, who collect information about your visit through cookies and similar technologies to help us analyze site usage and measure and target advertising. You can opt out of this sharing as described in "Your Rights & Choices" below.
• Legal Requirements: When required by law, regulation, or valid legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.
• To Prevent Harm: When we believe disclosure is necessary to prevent fraud, security issues, or potential harm.

Your Rights & Choices

Depending on your location, you may have rights under laws such as the California Consumer Privacy Act (CCPA) or the EU General Data Protection Regulation (GDPR). These may include:

• Accessing, correcting, or deleting your personal information
• Requesting a copy of your data
• Opting out of certain processing activities
• Withdrawing consent where applicable

You can exercise these rights by emailing support@asksayso.com. We may need to verify your identity before processing requests. You can also opt out of marketing emails by clicking "unsubscribe" in the email footer.

If you live in a state that gives you the right to opt out of the sale or sharing of personal information and you would like to opt out, email your request to support@asksayso.com with the subject line "Opt Out Request."

You have the right to request that we delete personal data we've collected from you.

If you'd like to submit a data deletion request, you can contact us at support@asksayso.com with the subject line "Data Deletion Request." Please include your name, email address, and a brief description of your request so we can verify your identity and locate your data.

Once verified, we'll delete your data from our active systems and confirm completion within 30 days, unless we're required to retain certain information for legal, security, or contractual reasons (for example, to comply with financial recordkeeping laws or resolve disputes).

Please note that deleting your data may limit or disable your access to certain Sayso products or services that rely on that data.

You can withdraw your consent at any time by closing your account. Because recording, transcription, and analysis are core to how Sayso works, withdrawing consent means we can no longer provide the Service to you.

We will respond to access and correction requests within 30 days, at little or no cost to you. If we need more time or cannot fully honor a request, we will explain why.

Children's Privacy

We do not knowingly collect personal information from individuals under 18. If we learn we have collected such information without parental consent, we will delete it.

Security Measures

We maintain a security program designed to protect your personal information, including:

• Authentication: Supabase Authentication with email/password and row-level security
• Encryption: TLS 1.2+ in transit, AES-256 at rest
• Access Controls: Role-based permissions for all data access
• Vendor Oversight: Security requirements for third-party providers
• Incident Response: Procedures to investigate and respond to suspected security incidents

While we take reasonable measures to protect your information, no system can be completely secure.

If a breach of our security safeguards creates a real risk of significant harm to you, we will notify you and, where required, the Office of the Privacy Commissioner of Canada as soon as feasible, and no later than 72 hours after we determine the breach has occurred. We will keep records of the breach as required by law.

International Data Transfers

If you access the Service from outside the United States, your information may be transferred to and processed in the U.S. By using the Service, you consent to this transfer in accordance with applicable laws.

If you are located in Canada, your personal information is stored and processed in the United States. This means it is subject to U.S. law and may be accessible to U.S. courts, law enforcement, and government authorities. By using Sayso, you consent to this transfer and processing.

Canada

If you are in Canada, you have the right to access and correct your personal information, and to know how it is used and disclosed. To exercise these rights or raise a privacy concern, contact our Privacy Officer at support@asksayso.com. If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated version on this page and update the "Last updated" date. Your continued use of the Service after changes means you accept the revised Policy.

SMS/Text Messaging

From time to time, Sayso may send SMS/text messages to users who have provided consent. These messages may include appointment and demo confirmations, scheduling reminders, account and service updates, event and webinar reminders, and promotional offers.

Message frequency varies. Message and data rates may apply.

You may opt out at any time by replying STOP to any message. Reply HELP for assistance or contact us at support@asksayso.com.

Carriers are not liable for delayed or undelivered messages.

We do not share SMS opt-in consent data or mobile phone numbers with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, excluding aggregators and providers of the Text Message services.

Contact Us

Sayso is accountable for the personal information under its control. Our Privacy Officer is responsible for our compliance with this Policy and with applicable privacy laws, and can be reached at support@asksayso.com.