Contents
UseSaved is a personal link library that lets you save, organise, and rediscover web content using plain natural language. It is operated by HuCo, registered at ON, Canada
Privacy queries: privacy@usesaved.com
We collect your email address and a bcrypt hash of your password.
Basis: Contractual necessity. We never store your password in plaintext.
We store the URLs you choose to save.
Basis: Contractual necessity. URLs are stored unencrypted. Page content is not.
We temporarily handle the text content of the web page at the time of saving in order to generate AI tags and a search embedding.
Basis: Legitimate interest.
Raw page text is held in server memory temporarily during AI processing, then permanently discarded. It is NEVER written to our database. What is stored: URL, AI-generated tags, and a numerical embedding vector.
Any text you attach to a saved link is optional and collected on the basis of your consent.
Notes are encrypted using AES-256-GCM before storage. We cannot read them. Note content is never sent to any third-party API.
We log the text of your search queries and which results you clicked.
Basis: Legitimate interest. You can opt out at any time in Settings.
Search logs are pseudonymised and auto-deleted after 30 days. They are never shared with third parties.
We record whether you opted in for beta access and product updates.
Basis: Consent. You can withdraw consent at any time.
We record your consent state, the date and time of consent, and the policy version you accepted.
When you join the waitlist we invisibly collect: country, city, timezone, device type, referrer URL, and UTM parameters (source, medium, campaign).
Basis: Legitimate interest. This data is used solely to understand demand geography and product-market fit. It is never used for advertising and never sold.
Our database contains your URL, tags, a numerical vector, and optionally an encrypted note. The page content is never in our database.
Every API call to Anthropic and OpenAI includes your internal user UUID — not your email address. This allows providers to detect abuse patterns without being able to identify you by name.
Anthropic Claude — generates tags and summaries from page content. Under Anthropic's paid API, inputs are not used to train models and are not retained beyond the response. Privacy policy
OpenAI — generates embedding vectors for saves and search queries. Under OpenAI's paid API, inputs are not used to train models. Privacy policy
Supabase — database and authentication infrastructure. Privacy policy
Vercel — frontend hosting. Privacy policy
Render — backend hosting. Privacy policy
| Data | Retained | Discarded |
|---|---|---|
| Email address | Until account deletion | On deletion |
| Password hash (bcrypt) | Until account deletion | On deletion |
| URLs you saved | Until save or account deletion | On deletion |
| AI-generated tags | Until save or account deletion | On deletion |
| Embedding vectors | Until save or account deletion | On deletion |
| Encrypted notes | Until note or account deletion | On deletion |
| Raw page content | Never stored in database | After AI processing in server memory |
| Search logs | 30 days pseudonymised (or never if opted out) | Auto after 30 days |
| Usage and technical logs | 90 days | Auto after 90 days |
| Beta consent record | Until account deletion | On deletion |
| Waitlist GTM signals | Until deletion request | On request to privacy@usesaved.com |
Notes are encrypted with AES-256-GCM before being written to the database. Raw page content is never stored.
All data in transit between your device, our servers, and third-party APIs is protected by TLS.
Passwords are hashed with bcrypt — an irreversible, salted algorithm. We cannot recover your password from what we store.
Database access is restricted to authorised engineers. No member of staff can read your encrypted notes; the encryption key is derived from your credentials.
In the event of a data breach, we will notify affected users and the relevant authorities within 72 hours, in accordance with GDPR and the India Digital Personal Data Protection Act 2023.
All users have the right to:
GDPR users (EEA and UK) additionally have the right to object to processing, restrict processing, and lodge a complaint with your local data protection authority.
India DPDP Act 2023 users have the right to access, correct, and erase personal data, the right to nominate a representative, and the right to lodge a grievance with the Data Protection Board of India.
To exercise any right, contact privacy@usesaved.com. We will respond within 30 days.
UseSaved is not intended for children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has registered, please contact privacy@usesaved.com with a valid proof, and we will delete the account promptly.
We will give you at least 14 days' notice by email before any material changes take effect. Where required by law, we will ask for your re-consent before changes apply to your existing data.
privacy@usesaved.com — privacy queries
security@usesaved.com — security concerns
HuCo, ON, Canada