Privacy Policy

Data We Process

We process account profile data, workspace membership data, monitor configuration, incident records, alert delivery records, status-page subscriber records, audit logs, support messages, and operational telemetry needed to run saysOK.

Connected Services

When you connect a service to a workspace, saysOK receives the information that service sends about your deploys: what was deployed, by whom, to which environment, when, and a link to it.

GitHub and Vercel: saysOK keeps access that can read your repositories' or projects' deployments, and for GitHub post check runs where you turned them on. It keeps that access until you remove the integration in saysOK or in the service.
Netlify and GitLab: these services only give apps access to your whole account. saysOK uses that access once, to add the deploy notification or webhook you chose. It then deletes the access within 15 minutes of your sign-in, and revokes it at GitLab. saysOK keeps no access to these accounts afterwards.

The same applies to services you connect for alerts, such as Slack or PagerDuty: saysOK keeps the access needed to send alerts to them until you remove them.

Access that saysOK keeps is stored encrypted, used only for the purpose above, and never shared.

Payments

Paddle is a subprocessor and merchant of record for paid-plan payment processing. Paddle may process checkout, invoice, billing-contact, refund, dispute, and tax-related information under Paddle's own legal terms and privacy notices.

Cookies and Analytics

Necessary cookies support sign-in, security, workspace selection, and consent preferences. Analytics cookies are optional and only load after consent where required.

saysOK counts page views on saysok.com and in the saysOK app with WhoStayed, which sets no cookies. For each page view WhoStayed records the page's path, the site and page you came from, any campaign tags in the page's address (utm_source, utm_medium, utm_campaign, ref or source), the browser, operating system and type of device, and the country, region and city, which it works out from the IP address without keeping the address. It also records two moments the same way: when saysOK shows you, during setup, the first ping from a scheduled job you added, and when you return to saysOK from a completed checkout. Visitors who are not signed in are counted with an identifier that changes every day, so their visits cannot be linked to visits on another day. When you are signed in, saysOK also gives WhoStayed your account's ID and email address, and WhoStayed links that day's page views from the same browser to your account, so we can see which accounts keep using saysOK and where they first came from. We do this for our legitimate interest in understanding how people find and use saysOK. WhoStayed stores this data in the EU (Germany) and keeps it for up to 25 months. Status pages that saysOK hosts for its customers are not counted.

Sharing

We share data with subprocessors only as needed to provide, secure, monitor, support, and bill for the service. We do not sell personal information.

Your Rights

Workspace owners can request a data export or the workspace's deletion in Settings → Data & privacy (or through saysOK's GDPR request APIs). Exports can be downloaded by workspace owners for 7 days; a deleted workspace is purged 14 days after the request unless an owner restores it. End users of customer status pages may contact the relevant workspace owner or saysOK support for routing.

Contact

Privacy questions can be sent to privacy@saysok.com.

Plain-language summary