How Say It Once handles your data.

Say It Once turns material you already have, spoken or written, into written content in your voice. To do that it processes what you bring in and what you generate. Your content trains only your own voice profile, never a shared model. We do not sell data, we do not run advertising trackers, and you can delete everything yourself at any time.

Account: your name, email address, and sign-in credentials. Authentication is handled by Clerk; Say It Once never stores passwords.

Source material: whatever you choose to bring in. Transcripts from your own public YouTube channel, text you paste, documents you upload, audio files you upload, podcast episodes by link or RSS, articles you link, and your own social posts. You control entirely what you feed the system.

Voice recordings: if you record a spoken note inside Say It Once, the audio is sent for transcription and the transcript is kept as source material.

Generated content: the drafts Say It Once produces, your ratings and edits of them, and the reason you give when you tell us a draft does not sound like you.

Profile: brand colors, fonts, language preference, and voice-profile settings, including any personal guardrails you set.

Payments: handled entirely by Stripe. Say It Once stores your subscription status and plan, never card numbers.

Usage and diagnostics: generation counts, what each generation cost us at each vendor, feature settings, standard server logs, and error records. Error records say what failed, for which account, and when. They do not record what you wrote.

We do not ask for or process special-category data by design. You control what content you feed the system.

Account, content, and payment processing happen because the service cannot function without them (performance of contract). Your ratings and edits are used to improve your own voice profile, and we keep error records and per-generation cost records so that faults are visible and the service stays affordable to run (legitimate interest). Where an optional feature needs consent, such as connecting a third-party account, we ask for it.

Your data lives with a small set of processors, each doing one job:

• Supabase: database and storage, hosted in the EU (Ireland, eu-west-1).
• Vercel: application hosting.
• Clerk: sign-in and accounts (US-based, EU transfers under Standard Contractual Clauses).
• Anthropic: AI generation (US-based). Your source material is sent to generate your drafts. Per Anthropic's commercial policy, API inputs and outputs are deleted within 30 days and are not used to train Anthropic's models.
• OpenAI: speech transcription (US-based). Audio you record or upload is sent to be turned into text. Under OpenAI's API terms, API data is not used to train their models.
• Resend: service email, EU region. Handles the address we send to and what the message says.
• Brandfetch: if you ask Say It Once to pull your brand colours from a website, the address of that site is sent to Brandfetch. Nothing else is.
• Supadata: fetches transcripts for public YouTube videos.
• Stripe: payments (US-based).

Where a processor is US-based, transfers rely on Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. The full processor list and data processing agreements are available on request.

Say It Once uses essential cookies only, the ones that keep you signed in. There are no advertising or marketing trackers on this site and no analytics product of any kind.

You can delete your account and everything in it at any time, yourself, from Settings, no email to us and no waiting. Deletion removes your profile, your sources and transcripts, every piece you generated, your voice profile, your plan calendar, your uploaded images and your login, and it stops any subscription so you are not charged again.

Three things survive, and we would rather say so than imply otherwise: encrypted backups, which are deleted on their own schedule within seven days; payment records at Stripe, which Swedish bookkeeping law requires us to keep for seven years; and server logs, which record requests rather than content and are deleted after 30 days. Records of technical errors are kept with your identity detached from them.

You can also download everything you have made at any time from Settings, every piece and every source, either as a readable document or as structured data to take into another tool. That is data portability, and you do not have to ask us for it.

You also have the right to access, correction, to object to processing, and to complain to your supervisory authority (in Sweden: IMY). For anything other than deletion and export, write to us at the address below.

The data controller today is Caroline Ravn AB, Stockholm, Sweden. Say It Once is being transferred to a new Swedish company wholly owned by the same founder. The processors, the hosting regions and the retention described on this page do not change with it, and account holders will be told before the transfer takes effect.

Caroline Ravn AB, Stockholm, Sweden.
hello@sayitonce.app