Effective September 6, 2026
This policy explains what SAUCEPAD LLC ("we") collects when you use SAUCEPAD (the "Service"), why we collect it, who else sees it, and what you can ask us to do with it. It applies to the Service only. It is written to be read, not to be survived.
We collect what we need to run your account and your workspace, and nothing for advertising. We do not train AI models on your content, and we do not sell or rent your personal information to anyone. You can export or delete your data by asking us. There are no advertising trackers anywhere, and no analytics tracker inside the Service. Google Analytics runs on our public pages only, meaning the homepage and the login and signup screen, and switches itself off the moment you go past them.
We do not use cookies for advertising. The Service sets one signed session cookie so you stay logged in, and, on a shared canvas, one cookie identifying you as a commenter. That is all it sets. Our public pages are the one exception. The homepage and the login and signup screen load Google Analytics, which sets its own first-party measurement cookies and reports aggregate visits, referrers and approximate location to Google. That tag is scoped to those pages, is not loaded on any screen inside the Service, and is disabled the moment you go past them.
We do not send Google the web address you actually arrived on. Sign-in links carry things that identify you: a password reset token, an invitation id, sometimes your email address. Before anything is reported we rebuild the address from a short list of things that identify nobody, being whether you came to sign in or to sign up, whether a Google sign-in failed, and whether you arrived from a verification email. Everything else in the address is dropped, and anything we add to those pages in future is dropped too unless we deliberately add it to that list. Reading an analytics account you have connected is a different thing entirely, and section 4 covers it.
To generate strategies, copy, images and analysis, we send the relevant parts of your workspace content to AI providers acting as our processors. Today those are Anthropic, OpenAI and ElevenLabs.
Your content is not used to train any AI model, ours or a provider's. Our agreements with these providers are configured so your data is excluded from their model training. Providers may retain data briefly for abuse monitoring under their own terms.
AI output can be wrong. See the Terms for what that means for how you should use it.
If you connect a Google account, we access Google user data through the Google APIs, using only the scopes you approve on Google's own consent screen. Today those are read-only Google Analytics data (analytics.readonly) and read-only Search Console data (webmasters.readonly). We ask for no write access and for no other scopes.
We use that data for one purpose: to show you performance readings inside your workspace, and to produce the analysis and recommendations you ask for. It is stored in your workspace alongside the rest of your content and is visible only to you and to the people you have invited. Relevant figures may be sent to the AI providers named in section 3, acting as our processors, solely to generate the analysis you asked for.
We do not sell or transfer Google user data to anyone, we do not use it for advertising of any kind, and we do not use it to train AI models — ours or a provider's.
The access and refresh tokens Google issues are encrypted at rest with AES-256-GCM and are never returned to your browser. Disconnect the account on the Channels page and those tokens are deleted; you can also revoke our access directly at myaccount.google.com/permissions. Readings we already fetched stay on your canvas, so work you have built on them does not change under you, until you delete them: press Delete data on the connector's Manage panel, or email jeremy@saucepad.ai and we will delete them for you.
SAUCEPAD's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We keep this list short on purpose. Each of these acts on our instructions, for the purpose named, and for nothing else:
We do not sell, rent, or share your personal information for anyone else's marketing. If the business is ever acquired or merged, your data may transfer as part of it, and this policy travels with it until you are told otherwise.
Data is stored on servers in the United States. If you are outside the US, using the Service means your data is transferred there.
We keep your workspace for as long as your account exists. Delete something and it is removed from the live Service; routine backups may hold a copy for a short period before aging out. Usage and billing records are kept as long as we need them for accounting and tax obligations. Ask us to delete your account and we will remove your personal data and your workspace, keeping only what the law requires us to keep.
Wherever you live, you can ask us to show you the personal data we hold about you, correct it, delete it, or send you a copy in a portable form. Email jeremy@saucepad.ai and we will respond within 30 days.
If you are in the EEA or UK, our lawful bases are: performing our contract with you (to run your account and workspace), our legitimate interests (keeping the Service secure and working), and consent where we ask for it. You may object to processing based on legitimate interests, and you may complain to your local data protection authority.
If you are in California, you have the right to know, delete, correct, and opt out of "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined, so there is nothing to opt out of, and we will never charge you differently for exercising any right.
Passwords are hashed with scrypt. Session cookies are signed, HTTP-only, and expire. Traffic is served over TLS. Access to production data is limited to people who need it to operate the Service. No system is perfectly secure, and we will not pretend otherwise; if a breach affects your personal data we will tell you and the relevant authority as required by law.
The Service is for people aged 18 and over and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us data, email jeremy@saucepad.ai and we will delete it.
If we change this policy in a way that materially affects you, we will update the effective date above and tell you in the Service or by email before it takes effect.
SAUCEPAD LLC is the controller of your personal data. Questions, requests, or complaints: jeremy@saucepad.ai. This policy is governed by the laws of the State of New York.