Privacy

Two things. First, what you type into an enquiry form: your name, an email address or phone number, optionally your company, and your message, along with the page you submitted from.

Second, first-party visitor analytics: the pages you view, the domain that linked you here, your browser and operating system, and your approximate location derived from your IP address. This is recorded on our own servers and shared with no advertising network. See the cookie page for how to opt out.

There is no advertising or social media tracking on this site, and fonts are self-hosted rather than loaded from a third party.

An enquiry becomes a lead record in Sayl, is matched against contacts we already hold so that a repeat enquiry does not create a duplicate, and is assigned to a member of our team to respond to.

We use it to reply to you and to follow up on that conversation. We do not sell it, and we do not pass it to third parties for their own marketing.

If you are a Sayl customer, the contacts, leads, messages and documents in your workspace are yours. We process them to provide the service you have asked for.

For your own account data — your login, workspace settings, billing details — Sayl is the controller: we decide why that data is processed, which is to run the account you hold with us under the agreement formed when you sign up.

For the contacts, leads and messages inside your workspace, which usually describe your own customers rather than you, your organisation is the controller and Sayl is the processor: we hold and process that data only on your instructions, to provide the service, and do not use it for our own purposes.

Workspace data is retained for as long as your account is active. If an account is closed, its data is deleted or anonymised within 90 days unless you ask us to do this sooner, except where a longer period is required by law — invoices and billing records, for example, are kept for 8 years to meet Indian GST record-keeping requirements.

If you use Sayl Mail's migration tool to bring messages in from an existing Gmail, Google Workspace or Microsoft 365 account, you authorise that access directly with Google or Microsoft, on their own sign-in page rather than ours. We never see or store that account's password.

The access requested is read-only and scoped to mail only — messages, attachments, folder or label structure, and read/starred state — so they can be copied into your Sayl mailbox. We cannot send mail from that account, delete anything in it, or see its contacts, calendar or files through this connection.

What we store is the OAuth token issued for that one migration job, encrypted at rest the same way other integration credentials are (see the security page). It is deleted once the migration finishes, is cancelled, or fails, and you can revoke it at any time from your Google Account or Microsoft account security settings — doing so stops any further reads immediately.

Once imported, that mail is treated exactly like any other mail in your workspace — see "Data you hold in the product" above.

Records of the migration job itself — which folders were mapped, how many messages were imported, and any errors — are kept for 12 months after the job finishes, to support you if something needs investigating, then deleted. The OAuth token is deleted immediately on completion, as described above, not kept for that 12 months.

Sayl's own infrastructure is hosted internationally (currently in Malaysia), and Google's and Microsoft's servers are not in India either. Reading your mail from Gmail or Microsoft 365 and writing it into your Sayl mailbox necessarily passes it through that infrastructure. This happens only because you chose to connect that account and start a migration, and only for the mail you asked us to bring in.

Delivering the product requires a small number of third parties, each processing only what their own role needs. They are:

We'll update this list, and the "Last updated" date at the top of this page, whenever it changes. We don't yet have a separate notification process for existing customers beyond that — if you'd like to be told directly when it changes, email [email protected] and ask to be added to that list.

You can ask us what we hold about you, ask for it to be corrected, or ask for it to be deleted. Email [email protected] and we will act on it.

Under India's Digital Personal Data Protection Act, 2023, you specifically have the right to: a clear summary of what we hold about you and who we've shared it with; correction and completion of inaccurate or outdated data; erasure of data we no longer need to keep; and the right to nominate someone to exercise these rights on your behalf if you die or become incapacitated. You can also withdraw any consent you've given us, as easily as you gave it.

We aim to respond within 30 days. We may ask you to verify your identity first, using the email address or account the request relates to, so we don't act on a request from someone impersonating you. If you're unsatisfied with how we've handled a request, you can take it to the Data Protection Board of India.

Questions about this policy, and grievances under the Digital Personal Data Protection Act, 2023, go to [email protected] — that address is our Grievance Officer contact point.

Sayl is operated by Sayl Technologies (Udyam Registration No. UDYAM-TN-02-0466089), registered at 25A, North Saraswathi Nagar, Neelangarai Block A, Pandiyan Salai, Chennai, Tamil Nadu 600115, India.