Privacy Policy
Effective date: June 23, 2026
Sasa ("Sasa", "we", "our", or "us") respects your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our website, applications, and related services (the "Services").
This Policy applies to all Sasa surfaces, including the usesasa.xyz web app and dashboard, the Sasa Chrome extension, and the Sasa Telegram bot.
By using Sasa, you agree to the practices described in this Privacy Policy.
1. Information We Collect
Information you provide
- Account details (your name and email, provided through Google sign in).
- Resumes, cover letters, and other application materials you upload.
- Job preferences, work history, and answers you enter into forms.
- If you apply to become a mentor: your resume, LinkedIn profile, and any links you submit.
Information we collect automatically
- Device information (operating system, browser, IP address).
- Usage data (features used, clicks, application activity).
- Log data for security and troubleshooting.
Browser extension data
When you use the Sasa Chrome extension on a job application page, it reads the content of that page (the application form fields, and the role and company) so it can fill the form from the profile you saved. It acts only on the page you are actively viewing, and only when you engage the widget.
- It reads the job application page you open, not your browsing history or your other tabs.
- It uses your signed in Sasa session, stored locally on your device, to load your profile and save applications to your tracker.
- It never submits an application without your review and approval.
- It does not run in the background across other websites, and does not sell or share this data.
Email integration data
If you connect your Gmail account, you grant read only access. We process a limited set of recent messages for two purposes only: to detect and autofill the one time passwords (OTPs) and verification links that job sites send during an application, and to match recruiter replies to the right application so your tracker stays current.
- We do not read, permanently store, or analyze the full contents of your mailbox.
- Access is limited to the messages needed for those two purposes, and is processed securely.
- You can revoke this access at any time from your settings.
- We use Google user data only to provide these features. We never sell it, never use it for advertising, and never use it to train artificial intelligence or machine learning models. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
AI generated content
When you request AI assistance (for example, tailoring your CV or drafting answers to application questions), we process your input and return AI generated output.
Payment information
Payments are handled by our payment processor. We do not collect or store your card details.
2. How We Use Information
We use your information to:
- Provide and improve the Services.
- Tailor your CV and cover letter to a job description, on request.
- Draft answers to application questions, on request.
- Find roles that fit your profile and submit applications you approve.
- Detect and autofill OTPs and verification links, and match recruiter replies to the right application, when you connect Gmail.
- Run interview prep: when you book a session, we share the context the assigned mentor needs to run and score it.
- Send you updates, feature news, and support messages.
- Monitor usage and keep the Services secure.
We do not sell your personal information to third parties.
4. AI Usage
- Our AI features process your resume, the job description, and application questions to generate tailored output.
- You are responsible for reviewing AI generated content before you submit it to an employer.
- Sasa rewrites your real experience to match a role and does not invent facts, unless you explicitly turn on an option that lets it add job relevant skills.
- We do not use Google user data, including Gmail content, to develop, improve, or train generalized artificial intelligence or machine learning models, and we do not use it for any purpose other than the features you ask for.
- Inputs and outputs are processed by our AI provider (Anthropic) under its own privacy and data processing terms, and are not used to train its models.
5. Data Retention
- We keep your data while your account is active.
- You can delete your account at any time, which removes your personal information from our active systems.
- Some limited data may be kept where required by law or for legitimate business needs, such as preventing fraud or resolving disputes.
6. Security
We use reasonable administrative, technical, and physical safeguards to protect your information.
For email integration, we use secure read only access limited to detecting OTPs and verification links, and we do not keep full copies of your emails.
If you believe you have found a security issue affecting Sasa, please report it to founders@usesasa.xyz. We investigate every report in good faith and ask that you give us a reasonable chance to fix it before public disclosure.
7. Your Rights
General
- Access, edit, or delete your account information in your settings.
- Opt out of non essential messages.
- Delete your account, after which we remove your personal data from active systems within a reasonable period.
- Revoke Gmail access at any time in your settings.
For users in the EU and EEA (GDPR)
- Access the data we hold about you.
- Request correction or deletion.
- Restrict or object to processing.
- Data portability.
- Withdraw consent for email integration.
For California residents (CCPA and CPRA)
- Know what categories of personal information we collect, where it comes from, why we use it, and who we share it with.
- Access a copy of the personal information we hold.
- Request deletion of your personal information.
- Correct inaccurate personal information.
- Limit the use of sensitive personal information.
- Opt out of the sale or sharing of your personal information. We do not sell your personal information and do not share it for cross context behavioral advertising.
- Be free from discrimination for exercising these rights.
To exercise any of these rights, email founders@usesasa.xyz. We verify your request using your account login and respond within the time required by law.
9. Children's Privacy
Sasa is not directed to children under the age of 13 (or under 16 in the EU and EEA), and we do not knowingly collect their personal information. If you believe we have collected information from a child below the applicable age, please email founders@usesasa.xyz and we will delete it promptly.
10. Contact
If you have any questions about this Privacy Policy, contact us at founders@usesasa.xyz.