Privacy Policy

Last updated: November 3, 2025

1. Data Controller

Sitten Kun Oy (Business ID: 3233135-7) is the controller of personal data processed through Sanota. We are committed to protecting your privacy and processing your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable data protection laws.

2. What personal data we collect

We collect and process the following personal data:

• Account information: Name, email address and profile picture from your authentication provider (Google, Microsoft or Replit)
• Audio recordings: Voice recordings you create in the service
• Generated content: AI-produced transcriptions and stories from your recordings
• User-created content: Stories, titles, notes and other content you create or edit
• Payment information: Payment details processed via Stripe (we do not store credit card information)

3. How we use your data

We process your personal data for the following purposes:

• Providing and maintaining the service, including transcription and story generation
• Processing payments and managing subscriptions via Stripe
• Sending service-related emails (account notifications, subscription updates) via Resend.com
• Improving the service using AI (your data is sent to OpenAI, xAI, Anthropic and ElevenLabs for processing)

4. Third-party services

We use the following third-party services that may process your personal data:

• OpenAI (Whisper API, GPT models): For audio transcription
• xAI (Grok-4): For AI-powered story generation
• Anthropic (Claude): For story generation
• ElevenLabs: For transcription
• Stripe: For payment processing
• Resend.com: For sending transactional emails

5. Data retention

We retain your personal data for as long as your account is active or as long as we need it to provide the service. If you delete your account, your data will be permanently deleted within 30 days, unless we are required to retain it for legal reasons.

6. Your rights

Under GDPR, you have the following rights:

• Right of access: You can request a copy of your personal data
• Right to rectification: You can request correction of inaccurate data
• Right to erasure: You can request deletion of your personal data
• Right to data portability: You can request your data in a structured, machine-readable format
• Right to withdraw consent: You can withdraw your consent at any time

7. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. All data is encrypted in transit and at rest.

Contact

Sitten Kun Oy
Business ID: 3233135-7
Email: info@sanota.fi