GDPR Notice
Effective Date: June 22nd, 2026
This GDPR Notice explains how Sayak AI (“Sayak,” “we,” “our,” or “us”), operated by Sayak Labs LLC, processes the personal data of individuals in the European Economic Area (EEA), the United Kingdom, and Switzerland, and the rights you have under the EU General Data Protection Regulation (GDPR) and the UK GDPR. It supplements our Privacy Policy; where this notice is silent, the Privacy Policy applies.
Provided for transparency. This notice is not legal advice.
1. Data Controller
Sayak Labs LLC is the data controller responsible for the personal data described in this notice. For any data-protection question or request, contact us at privacy@sayak-ai.com.
2. Personal Data We Process
- Account information — name or username and email address.
- User content — documents you upload, text inputs and prompts, and AI-generated outputs.
- Voice data — when you use Ava, our voice tutor (see our Voice Data Policy).
- Usage data — features used, session duration, and device and browser information.
- Technical data — IP address and log data.
3. Legal Bases for Processing
We rely on the following legal bases under Article 6 of the GDPR:
- Performance of a contract — to provide and operate the service you sign up for.
- Consent — for optional features such as voice capture (Ava) and certain communications. You may withdraw consent at any time.
- Legitimate interests — to secure the service, prevent misuse, and improve performance, balanced against your rights and freedoms.
- Legal obligation — where we must process data to comply with applicable law.
4. How We Use Your Data
- Provide and operate the service.
- Generate AI-powered study materials from your content.
- Improve performance and the user experience.
- Ensure security and prevent misuse.
- Communicate with you about your account and the service.
We do not use your content to train AI models by default, and we do not sell your personal data.
5. Sharing and Sub-Processors
We share personal data with service providers acting on our behalf — cloud hosting, AI processing providers, and analytics tools — under data-processing agreements that require them to protect your data and process it only on our instructions.
6. International Transfers
Your data may be processed in the United States and other countries. Where we transfer personal data outside the EEA, the UK, or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
7. Data Retention
We retain personal data while your account is active and as long as needed to provide the service or to comply with our legal obligations. You may request deletion at any time (see your rights below).
8. Your Rights Under the GDPR
Subject to applicable law, you have the right to:
- Access — obtain a copy of the personal data we hold about you.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request deletion of your data (the “right to be forgotten”).
- Restriction — limit how we process your data in certain circumstances.
- Portability — receive your data in a structured, commonly used, machine-readable format.
- Objection — object to processing based on our legitimate interests.
- Withdraw consent — where processing is based on consent, withdraw it at any time without affecting processing carried out beforehand.
- Avoid solely automated decisions that produce legal or similarly significant effects on you.
9. How to Exercise Your Rights
To exercise any of these rights, contact us at privacy@sayak-ai.com. We will respond within one month, as required by Article 12 of the GDPR. For complex or numerous requests we may extend this by up to two further months and will let you know if we do.
10. Right to Lodge a Complaint
If you believe we have not handled your personal data lawfully, you have the right to lodge a complaint with your local supervisory authority (your national Data Protection Authority). We would, however, appreciate the chance to address your concerns first.
11. Children
Sayak is intended for users 13 years and older. We do not knowingly process the personal data of children below the applicable age of digital consent without verifiable parental or guardian consent.
12. Changes to This Notice
We may update this notice from time to time. Material changes will be posted here with a new effective date.
13. Contact
Sayak Labs LLC — Privacy Officer
privacy@sayak-ai.com