Data Security

Data Collection and Use

We collect and process personal data solely for legitimate business purposes, such as providing our services, managing our relationship, and complying with legal obligations. The types of data we collect include:

• Customer names and emails for profile data
• Customer billing information
• Files and folders uploaded or permitted by the user for our application

Security Measures

To protect your data, we have implemented robust security measures, including:

• Encryption: All data is encrypted both in transit and at rest. SSL/TLS ensures encryption in transit. Our third-party data storage partners handle encryption at rest:
  • Ory (ISO 27001, SOC 2 Type 2, GDPR) and Azure Cosmos DB (covered under all audit scopes in Azure's compliance offerings) for customer email and profile information
  • Stripe (PCI DSS v4.0, SOC 1,2,3) for customer billing information
  • AstraDB Datastax (PCI DSS 3.2.1) for files and folders uploaded by the customer
• Access Controls: Access to personal data is restricted to authorised personnel only, based on their job responsibilities.
• Regular Audits: We conduct security audits and assessments to identify and mitigate potential vulnerabilities.

Data Sharing and Disclosure

We do not share your personal data with third parties except as necessary to provide our services or as required by law. When we engage third-party service providers, we ensure they adhere to strict data protection standards.

Data Retention

Your personal data is retained only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable laws and regulations.

Your Rights

In compliance with GDPR, you have the right to access, correct, or delete your personal data. If you wish to exercise these rights or have any questions about how we handle your data, please get in touch with us at support@samey.ai.

Additionally, please find our Privacy Policy for your reference.