Effective September 4, 2026

Privacy without the fine-print fog.

What reaches this service

When you choose the microphone, the browser sends short audio segments for transcription. Uploaded clips are also sent for transcription. Supported replay URLs may be sent to our transcript provider; the extension listens to Facebook videos through the playing tab's audio instead of requiring a platform transcript. The extension may read the selected tab's URL, title, video presence, live status, playback position, and text you intentionally highlight to label and route your requested check. Highlighted text is sent only after you click the extension. Audio capture sends independent audio-only segments from the chosen tab; it does not upload screen video, camera, or microphone tracks. The server may first try to pipe public YouTube Live or Facebook Live audio without involving the playing device. Android requires system capture confirmation for each native playback-audio session. Transcript text and claims are sent for source research. Notes and transcript text are sent to the configured AI providers only when you press Build smart notes. None of this happens until you take the related action.

What is and is not stored

Say It. Check It. does not write uploaded audio, microphone audio, or live audio to this server's disk. The server never creates a full live-stream recording, and we do not use recordings or results to build advertising profiles. To protect work from a call, browser interruption, or device restart, the current Notes Studio title, written notes, completed transcript text, and smart-note digest are stored as one compressed draft under the pseudonymous signed-in account as well as on the current device. Completed fact-check reports are stored in a compressed, content-addressed form for your analysis history. Public-media transcripts and fact-check responses may be cached so another request for the same canonical link can reuse the completed work without another provider charge. Private microphone, pasted-text, and uploaded-clip results are scoped to the pseudonymous signed-in account and are never returned as another user's same-link result.

Storage on your device

The installable web app may cache its public interface files so it opens reliably; API, sign-in, audio, transcript, notes, and fact-check responses are excluded from that interface cache. Notes Studio automatically saves the title, your notes, completed transcript segments, and current smart-note digest in this browser's local storage after changes and when the app is interrupted or backgrounded. It also backs up that draft to the signed-in account; the newer device or account copy is recovered when the app opens. The draft remains until you press Clear saved draft, delete the account, or clear local browser data for the device copy. The browser extension stores the current source title, URL, listening state, and a signed Say It. Check It. access credential in Chrome's extension storage. The credential expires no later than the signed website session, contains no OpenAI or Supadata key, and can only be used as the signed-in Say It. Check It. account. The Android companion keeps its short-lived live token and audio buffers in memory and does not create an audio or video file. Download, print, share, and clipboard actions create copies under your control.

Public share links

When you explicitly share one fact-check or a full session, Say It. Check It. stores a small evidence receipt containing the selected claim, quote, finding, confidence, explanation, context, source links, source-media URL, and timing label. For YouTube sources, the public preview may display YouTube's thumbnail for that video so recipients can recognize what was checked. When you choose Instagram or another device app, your browser may create a branded share picture in memory from that preview; the generated picture is handed to the device share menu and is not saved on this server. It does not include raw audio, your Notes Studio draft, or the full transcript. Anyone who receives the unguessable link can open, copy, or reshare it without signing in, so do not create a link for private or identifying material. Shared receipts currently remain available until the operator removes them or the service ends; an automatic expiration period is not yet enabled.

Account, history, and usage data

Public beta access uses Google sign-in. We receive your verified Google account identifier, email address, and display name to sign you in. The service stores a one-way pseudonymous account key plus plan and usage counters. Your analysis-history index is stored under that pseudonymous key and is not exposed to other accounts. It keeps at most 200 entries and points to compressed reports so identical work is stored only once. Email and display name stay inside a signed browser session and are not written to the usage ledger or history files.

Browser-extension limited use

Browser tab information and Google account information are used only to provide and improve the user-facing Say It. Check It. features you request, including identifying the selected source, loading the correct subscription and history, producing checks, and returning receipts. We do not sell this data, use it for personalized advertising, transfer it for credit or lending decisions, or permit people to read it except when required for security, support, legal compliance, or operation of the service with your consent. Use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements.

Subscription billing

Stripe processes paid subscriptions, payment methods, invoices, taxes when enabled, and cancellations. Say It. Check It. sends Stripe your signed-in email, display name, selected plan, and a pseudonymous account reference. This service stores Stripe customer and subscription identifiers, plan status, billing-period dates, and processed webhook identifiers so access changes are idempotent and monthly allowances reset correctly. Card and bank details are entered only on Stripe-hosted pages and are not stored by Say It. Check It.

Service providers

OpenAI is the first-choice provider for transcription, evidence research, and smart-note organization. If it is unavailable or reaches its usage limits, transcript text and notes may be processed by DeepSeek, then Google Gemini. Audio transcription can fall back to Gemini; audio is not sent to DeepSeek. Evidence research uses the selected provider's web-search tools and source links. Supadata receives supported replay URLs to retrieve or generate transcripts. YouTube or Facebook may receive ordinary media requests when the server attempts a direct live connection. Google also handles sign-in. Each provider processes data under its own terms and privacy practices; retention, processing locations, and model-improvement practices can differ by provider and account tier. Gemini unpaid services may use submitted content to improve products. Do not submit sensitive or confidential recordings without appropriate authorization. Say It. Check It. requests OpenAI and DeepSeek Responses with storage disabled, but provider retention rules may still apply.

Operational logs

Server logs contain a random request ID, route, response status, and timing. They do not contain audio, transcript text, claims, fact-check results, passwords, API keys, or Google email addresses.

Recording consent

Do not use Say It. Check It. for secret recording. Before the microphone starts, the product requires you to affirm that everyone present knows and agrees. Recording laws differ by location and situation; you are responsible for obtaining legally sufficient permission.

Deletion and retention

Signing out clears the signed browser session. Account deletion removes the pseudonymous usage record, current account-backed Notes Studio draft, private history index, account-scoped fact-check cache, and any saved report that is no longer referenced by another authorized history or public-media index. Clear saved draft removes the account copy and the current browser copy. Public-media transcript and fact-check caches are compressed, capped as a group, and pruned oldest-first as the cache fills. Shared evidence receipts remain public by their unguessable link and require operator removal during the beta. A daily local recovery archive can retain deleted account content for up to 30 days before automatic expiration; recovery archives are restricted to server operations and are not used for analytics. Infrastructure logs follow the server operator's security-retention schedule.

Children and sensitive use

The service is not directed to children under 13. Do not submit highly sensitive personal information, private medical discussions, privileged legal communications, financial-account details, or anything you do not have permission to process.