Privacy Policy

Saaya is an AI chief-of-staff product operated by Arshdeep Dhanoa, doing business as Milni (a sole proprietorship based in the United States). If you have any questions about this policy or how your data is handled, email us at privacy@milni.com.

We collect only what we need to run Saaya for you:

• Account information — your name, email address, password (stored hashed), and basic profile details you provide at signup.
• Business context you share with Saaya — messages, briefs, documents, calendar items, and other content you send into the product so Saaya and her specialist agents can do work for you.
• Connected accounts — when you connect a third-party account (e.g. Instagram, Facebook Page, Google, email, calendar), we store the access tokens and the minimum profile and content data required to perform the actions you ask for. See "Meta platform data" below for specifics.
• Usage and device data — log data, IP address, browser type, pages visited, and feature usage, used for security, debugging, and improving the product.
• Billing data — handled by our payments processor; we receive the metadata needed for subscription management but never your full card number.

• To provide and operate the Saaya product and her AI agents.
• To send AI prompts and necessary context to our model providers (e.g. OpenAI, Google) so we can generate responses, briefings, and drafts.
• To publish, schedule, or read content on your behalf on connected platforms — only the specific actions you authorize.
• To meter AI usage, bill you correctly, and prevent abuse.
• To send you product, security, and billing communications.
• To improve product quality, reliability, and safety.

We do not sell your personal information, and we do not use your private business content to train third-party foundation models.

When you connect an Instagram or Facebook account through Meta Login, we request only the permissions needed for the features you enable — for example, reading your Facebook Pages, reading basic Instagram Business account info, and publishing posts you approve.

• We store your Meta access token, page IDs, Instagram Business account ID, and metadata about content we publish on your behalf.
• We do not post anything without explicit instruction or approval from you inside Saaya.
• You can disconnect your Meta accounts at any time from Settings → Connections. When you disconnect, we revoke and delete the stored tokens and stop accessing your Meta data.
• You can also revoke Saaya's access directly from your Facebook account under Settings & privacy → Settings → Apps and Websites.

Data we receive from Meta (Pages content, Instagram content, insights, and comments) is used solely to perform the actions you authorize inside Saaya. We do not share Meta-derived data with third parties except with AI model providers strictly to fulfill the task you requested, and never for advertising, resale, or model training.

Our use of information received from Meta APIs follows Meta's Platform Terms and Developer Policies.

We share data only with:

• Service providers who help us run the product — hosting, database, email delivery, payments, error monitoring, and AI model providers — under contractual privacy obligations.
• Platforms you connect (e.g. Meta) when performing the actions you've authorized.
• Legal authorities when required by law, court order, or to protect rights and safety.

We never sell personal data.

We keep your data for as long as your account is active. If you delete your account, we delete your personal data and connected-account tokens within 30 days, except where we're required to keep certain records (e.g. tax and billing records) for longer.

You can request full deletion of your data at any time by emailing privacy@milni.com with the subject line "Data deletion request" from the email address associated with your account.

When you request deletion, we remove:

• Your account and profile information
• Business context, briefs, messages, and documents you've shared with Saaya
• All connected-account tokens and metadata (Meta / Facebook / Instagram, Google, email, calendar, and any others)
• AI conversation history associated with your account

Deletion is completed within 30 daysof receiving your request. Disconnecting an account from Settings → Connections inside Saaya immediately revokes and deletes the stored tokens for that specific connection, without affecting the rest of your account.

Some records (e.g. tax, billing, and fraud-prevention logs) may be retained for the period required by law.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise most of these rights directly in the app, or by emailing privacy@milni.com.

We use industry-standard safeguards — encryption in transit, encryption at rest for sensitive fields, scoped access tokens, and row-level security on our database — to protect your data. No system is perfectly secure, but we treat your data as if it were our own.

We use a small number of cookies and similar technologies to keep you signed in, remember your preferences, and understand product usage in aggregate. We don't use cookies for cross-site advertising.

Saaya is built for adults running a business or side-project. It is not intended for, and we do not knowingly collect data from, anyone under 16.

Saaya is operated from and primarily hosted in the United States. If you access Saaya from another country, your data may be transferred to and processed in the US and other countries where our service providers operate.

We'll update this page when our practices change. If the changes are material, we'll give you notice by email or in the app before they take effect.

Questions, requests, or concerns? Email privacy@milni.com.