Privacy Policy

1. Who we are

SavedThat is a service operated by OakAI FZ-LLC, a Free Zone Limited Liability Company registered in Ras Al Khaimah, United Arab Emirates, with registered office at VUNE1678, Compass Building - Al Hulaila, Al Hulaila Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates. References to "we", "us", and "our" in this policy mean OakAI FZ-LLC trading as SavedThat. The service is available at savedthat.app and as a mobile application. This policy describes how we handle your data when you use our services.

2. What we collect

We collect the minimum data necessary to provide our service:

Account information — email address, name (optional), and avatar (optional) provided during registration via email or OAuth (Google, Apple).

Video data — URLs you save, video titles, thumbnails, and transcripts generated from public video content. We do not download or store the video files themselves.

Search data — your search queries and result counts, used to improve search quality and provide your analytics dashboard.

Usage data — privacy-focused product analytics (PostHog) such as feature usage and pageviews, and error logs (Sentry). In the EEA, UK, and Switzerland, analytics is enabled only after you consent via the analytics banner; declining does not affect the service. We do not sell your data, and we do not use advertising pixels without consent where consent is required.

Payment information — handled entirely by Stripe. We never see or store your card details. We store your Stripe customer ID to manage your subscription.

3. How we use your data

We use your data to: provide and maintain the service (saving videos, transcription, semantic search), communicate with you about your account or service changes, monitor and fix technical issues via error tracking (Sentry), and process payments via Stripe.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Third-party services

We use the following services to operate:

Supabase — database and authentication (hosted in US-West). OpenAI — text embeddings for semantic search (your search queries and video transcripts are sent for embedding generation). Stripe — payment processing. Sentry — error monitoring (may receive technical error details, never personal content). Vercel — hosting. PostHog — product analytics (consent-gated in the EEA/UK/Switzerland).

These third-party services act as independent data processors under GDPR Article 28. They are not affiliated or related entities of OakAI FZ-LLC. Data Processing Agreements (DPAs) are in place with each processor handling personal data.

Connecting AI assistants (MCP) — you may connect a third-party AI client (such as Claude or ChatGPT) to SavedThat using OAuth ("Sign in with SavedThat"). When you do, you explicitly authorise that client to read your saved videos and their transcripts on your behalf so you can search them inside that assistant. Any prompts, results, or transcript excerpts you then use are processed by that assistant's own provider under their privacy policy — not ours. Access is read-only, granted only after a consent screen, and you can revoke any connected app at any time from Settings → Connected apps.

5. Data retention

Your data is retained as long as your account is active. When you delete your account, all your personal data (profile, saved videos, search history) is permanently deleted within 30 days. Shared video content (transcripts, embeddings) may be retained if other users have also saved the same video.

6. Your rights

You can: access and export your data at any time, correct your profile information in Settings, delete your account and all associated data from Settings (GDPR-compliant cascade deletion), and opt out of non-essential communications.

To exercise any rights not available through the app, contact us at the address below.

SavedThat is operated from the United Arab Emirates and processes personal data in accordance with the UAE Personal Data Protection Law (Federal Decree-Law No. 45/2021). If you are in the EU/EEA or the UK, we process your personal data in accordance with the GDPR / UK GDPR: in addition to the rights above, you may object to or restrict processing, request data portability, and lodge a complaint with your local supervisory authority.

Video creators: public transcript pages may include publicly available information about the creator of a video (such as the channel or account name). If you are a creator and want your transcript or associated information removed, see our DMCA & Content Removal page — we honor removal requests.

7. Security

We use industry-standard security measures including encrypted connections (TLS), row-level security policies on our database, secure API authentication with tokens, and no storage of payment credentials. However, no system is 100% secure — use the service at your own discretion.

8. Children

SavedThat is not intended for children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. If we make significant changes, we will notify you via email or an in-app notice. Continued use after changes constitutes acceptance of the updated policy.

10. Contact

Questions about this policy or your data? Reach us at support@savedthat.app