Privacy Policy

Effective January 1, 2026

This policy explains how DoSaveIt, operated by an individual developer based in Kerala, India ("we", "us"), handles personal data when you use the DoSaveIt app, web app and this website. Contact: [email protected]. Our postal address is available on request at [email protected].

1. Data we collect

  • Account data: email address, sign-in identifiers (for example from Google sign-in), and your plan.
  • Content you save: links, captions, transcripts, screenshots, text or files you share with the app, and the results generated from them, plus your edits, tags and settings. Chat messages are stored if you use chat with your library.
  • Extraction and processing metadata: for each save we record the platform, type of content, which extraction method was used, language, duration, hashtags, the author handle and public engagement counts (such as like counts) when they are publicly available, how confident we are about the content type, which AI models were used, token counts, processing cost and time, and the number of retries. We use this to run the service, control costs and improve quality.
  • Uploaded files: screenshots, images, PDFs and audio or video files you upload. We keep derived notes, not raw media: uploads are deleted automatically after processing plus a short grace period (7 days by default) and when you delete your account, unless you choose to keep the file.
  • Feedback: the type, message and optional rating you send, with the app version, screen and platform, and your email only if you ask us to contact you.
  • Support messages: your email, topic, subject and message through the contact form or email, plus any link you include.
  • Product events: server-side events about how features are used (for example that a save was created or an action was used). They contain no free text and no links. They are used for product analysis and are not sold.
  • API tokens (Max plan): stored only as a hash; the token itself is shown once.
  • Usage and device data: app version, device type, OS, approximate region derived from IP address, feature use, and error and crash reports.
  • Purchase data: subscription status and store receipts via RevenueCat. We never receive your full payment card details; the store handles payment.
  • Waitlist and website data: your email, the page you signed up on, and how you found us (campaign parameters such as utm_source and the referring site). Analytics and attribution cookies are only used if you accept them. See the Cookie Policy.
  • Login-state hint: after you sign in to the web app it sets a strictly necessary cookie, dsi_auth (value "1", no personal data), so this website can show a "Dashboard" button instead of "Log in". It is removed when you sign out. It is only a hint and is never used to authenticate you or to track you.
  • Support messages you send us.

2. How we use data

  • To provide the service: process saved content and generate your results, sync your library, send notifications you enable.
  • To manage accounts, subscriptions and support requests.
  • To keep the service secure, prevent abuse and fix errors.
  • To understand which marketing pages and features work, and improve the product (with consent where required).
  • To email you about launch or product updates if you opted in. You can unsubscribe at any time.

Legal bases (where GDPR or UK GDPR applies): performance of a contract, our legitimate interests (security, product improvement), consent (analytics cookies, marketing emails) and legal obligations.

3. AI processing of your saved content

To turn a link or content into a result, we send the relevant text, transcript, images or link metadata to AI providers that act as our processors, currently OpenAI. They process it only to return a result to us. We do not use your saved content to train our own or third-party AI models, and we instruct our providers not to train on it.AI output can be wrong; check important details before relying on them.

4. Service providers (processors)

ProviderPurposeRegion
OpenAIAI analysis of the links and content you saveUS
SupabaseDatabase, authentication and file storageUS / EU (project region)
CloudflareHosting, CDN, API gateway, bot protection (Turnstile)Global
RevenueCatSubscription and entitlement managementUS
PostHogProduct analytics (only with your consent on this website)US or EU (project host)
SentryError and crash reportingUS

We do not sell personal data, and we do not share it for cross-context behavioural advertising.

5. Retention

  • Account and saved content: kept while your account is active and deleted within 30 days of an account deletion request (backups within a further 30 days).
  • Billing records: kept as required for tax and accounting law.
  • Uploaded files: removed automatically after processing plus a grace period (7 days by default) and on account deletion.
  • Feedback and support messages: kept for as long as needed to respond and to improve the product, and deleted with your account unless we must keep a record to meet a legal duty.
  • Error logs: up to 90 days. Analytics and product events: up to 24 months.
  • Waitlist emails: until launch plus 12 months, or until you unsubscribe or ask us to delete them.

6. Your rights

Depending on where you live (including the EEA, UK and California), you may have the right to access, correct, delete or export your data, to object to or restrict processing, to withdraw consent, and to complain to your data protection authority. California residents may also request disclosure of categories of data collected and opt out of "sale" or "sharing"; we do neither. We will not discriminate against you for exercising these rights. Email[email protected]; we respond within 30 days. You can delete your account yourself using the steps on this page.

7. International transfers

We operate from India and our providers are mainly in the United States, so your data is transferred to and processed in those countries. Where required, we rely on safeguards such as Standard Contractual Clauses and our providers' data processing agreements.

8. Children

DoSaveIt is not for children under 13. We do not knowingly collect data from them. If you believe a child has given us data, contact us and we will delete it. Users under the age of majority in their country should use the service with a parent or guardian's permission.

9. Security

We use encryption in transit, access controls and row-level data isolation. No system is perfectly secure; report concerns to [email protected].

10. Changes

We will post updates here and change the effective date. For material changes we will notify you in the app or by email.