Privacy Policy

Effective 20 October 2026

This policy explains how Sahaab ("we") handles personal data when you visit our website, buy a subscription or use the Sahaab software. We are the controller of this data. Questions: [email protected].

The most important point: Sahaab runs on your own servers. The websites, email, databases and personal data of your hosting customers stay there; we do not receive them. For that data, you are the controller.

Data we collect

Your customer account

Name, email address, company name and country you give us when you sign up, a hash of your password (never the password itself), and your licenses, plans and invoices.

Payments

Payments are handled by Stripe. We receive the payment status, the last four digits and expiry date of your card, and the billing details needed for invoices. We never receive or store full card numbers. Stripe's handling of your data is described in Stripe's privacy policy.

Information sent by the software

License checks (daily): license key, a fingerprint derived from the server's machine ID, host name, IP address, software version and number of hosting accounts.
Update checks: the server's IP address in our download server's logs.
Error reports (can be switched off in Server Settings): which part of the software failed and how. Domains, email and IP addresses, account names, paths and secrets are removed on your server before anything is sent.
AI assistant with Sahaab credit (only if you choose it): the question passes through our servers to the AI provider you selected (Anthropic or OpenAI). We do not store the question or the answer — only its size and cost, to charge your credit. If you use your own API key, the question goes directly from your server to the provider and not through us.

Website visits and messages

Our web servers record technical logs (IP address, browser, pages requested) for security and troubleshooting. If you write to us or use the contact form, we keep your message and email address to answer you.

Why we use it

To provide the service and your licenses, process payments and send invoices (performance of our contract).
To keep the service secure, prevent license abuse and fix errors (our legitimate interests).
To meet tax and accounting obligations (legal obligation).
To tell you about important changes to the service or your subscription. We send marketing email only if you agree, and you can unsubscribe at any time.

Cookies

We use only a session cookie needed to keep you signed in and to protect forms. We do not use advertising or tracking cookies, and no third-party analytics run on our website.

Who receives it

We do not sell personal data. We share it only with providers who process it for us: Stripe (payments), the data-center provider hosting our servers, our email provider, and — only for the AI assistant with Sahaab credit — the AI provider you select. Some of them may process data outside your country; where required, they are bound by appropriate safeguards such as standard contractual clauses.

How long we keep it

Account and license data: while you are a customer, and up to 2 years after, unless you ask us to delete it sooner.
Invoices and payment records: as long as tax law requires (usually up to 10 years).
Error reports and server logs: up to 90 days.
Messages to us: up to 2 years after the conversation ends.

Your rights

You can ask us for a copy of your personal data, to correct or delete it, to restrict or object to its use, and to receive it in a portable format. Write to [email protected]; we answer within one month. You may also complain to your data protection authority.

Security

Data is sent over encrypted connections, passwords are stored only as hashes, and access to our systems is limited to the people who need it.

Changes

We will post changes on this page and tell you by email if they are significant.