privacy policy

our commitment

privacy is at the core of sakura. we built this product because we believe teams should be able to use ai-powered tools without sacrificing the confidentiality of their data. this policy explains exactly what we collect, why, and what we never do.

what we collect

account information: name, email address, and password (hashed, never stored in plain text).

usage data: feature usage (which pages you visit, searches performed), for the purpose of improving the product. never the content of your documents.

payment information: processed by stripe. we never see or store your full credit card number.

what we never do

• never train ai models on your data. your documents are yours. period.
• never sell your data to third parties, advertisers, or data brokers.
• never read your documents. your content is encrypted and accessible only to your team.
• never share your data unless required by law (and we'll notify you if possible).

data storage

cloud-hosted plans: your data is stored on encrypted servers in the united states (AWS). backups are encrypted and retained for 30 days.

self-hosted plans: your data never touches our servers. it lives entirely on your infrastructure. we have zero access.

ai processing

when you use the chat feature, your query and relevant document snippets are sent to an ai model to generate a response. for cloud plans, this uses our hosted model infrastructure. your queries are not logged or used for training. for self-hosted plans, all processing happens on your machines.

data deletion

you can delete your account and all associated data at any time. upon deletion:

• all documents are permanently removed within 24 hours
• account information is deleted within 7 days
• backups containing your data expire within 30 days

cookies

we use essential cookies for authentication (keeping you logged in). we do not use tracking cookies, advertising cookies, or third-party analytics that track individual users. we use privacy-friendly analytics (plausible) that collects no personal data.

third-party services

• stripe — payment processing
• plausible — privacy-friendly website analytics (no cookies, no personal data)
• aws — infrastructure (cloud-hosted plans only)

your rights

you have the right to:

• access all data we hold about you
• export your documents at any time
• correct inaccurate personal information
• delete your account and all data
• object to processing of your data

contact

for privacy-related questions or requests, contact us at privacy@sakura.dev.