Privacy Policy

Overview

SarraS ("we," "our," or "us") operates sarras.ai and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our API services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services.

Information We Collect

We may collect information about you in the following ways:

• Information you provide directly: When you request API access, sign up for our newsletter, or contact us, we collect your name, email address, company name, and the nature of your use case.
• Usage data: When you use our API, we collect information about your queries, API call volumes, endpoint usage patterns, and error rates. This data is used to operate and improve the service.
• Log data: Our servers automatically record information including your IP address, browser type, pages visited, and timestamps when you access our website.
• Cookies and tracking: We use cookies and similar tracking technologies to improve user experience and analyze site traffic. You may disable cookies in your browser settings.

How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain our website and API services
• To process API access requests and manage customer accounts
• To send transactional communications including access confirmations and service updates
• To send our newsletter and research publications, if you have opted in
• To analyze usage patterns and improve our data pipeline, scoring models, and API performance
• To detect and prevent fraud, abuse, and security incidents
• To comply with legal obligations

Sharing of Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:

• Service providers: We may share information with trusted third-party vendors who assist in operating our website and services, subject to confidentiality obligations.
• Legal requirements: We may disclose your information if required to do so by law or in response to valid legal process.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• Protection of rights: We may disclose information where we believe it is necessary to protect the rights, property, or safety of SarraS, our customers, or others.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our API infrastructure is designed to TLP (Traffic Light Protocol) compliance standards, with access controls enforced at the API key layer.

No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy, unless a longer retention period is required by law. API usage logs are retained for a minimum of 90 days for security and audit purposes.

Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• The right to access the personal information we hold about you
• The right to request correction of inaccurate information
• The right to request deletion of your personal information
• The right to opt out of marketing communications at any time
• The right to data portability where technically feasible

To exercise any of these rights, please contact us at the address below.

Third-Party Links

Our website may contain links to third-party websites. We have no control over the content, privacy policies, or practices of those sites and assume no responsibility for them. We encourage you to review the privacy policy of any third-party site you visit.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated effective date. Your continued use of our services after any changes constitutes your acceptance of the updated policy.