Privacy policy

Last updated 20 October 2026.

Who we are

Say It Again is operated by Apolonis Social Media Management Services - FZCO (registration number 80188), IFZA Properties, Premises DSO-IFZA, Dubai Silicon Oasis, Dubai, United Arab Emirates. We decide how the information described here is used, and we are responsible for it.

To report a security flaw in Say It Again, write to security@sayitagain.ai.

What we hold

Your account. Your email address, your password stored only as a hash if you set one, the team your account belongs to, and where the visit that made your account came from: a site's name or a tag such as tiktok, the campaign its link named, and the page of our site it first opened.

Your store. The address you give us, what we read from its public pages, and the product names, prices, descriptions and photographs on them.

What you make. The advertisements, the words written for them, and a record of what was made and when.

Your balance. Credits added, spent and refunded, and what each was for.

Ordinary technical records. A cookie that keeps you signed in, and server records of requests, which include an IP address. Our web server's records also hold the address of each page asked for, and are kept 14 days. We keep the address an account was created from, so that one person making many accounts can be told from many people.

Your card. An account opened without an invitation puts a card on file with Stripe, and a card you pay with can be kept there too. Stripe holds it. We never see or store the number. We keep Stripe's own reference for the card, which cannot be turned back into a number, so that the free trial is given once for each card. When you add a card, you choose the plan your free trial turns into. We keep that plan, and the time you agreed to it.

API keys and connected apps. If your team creates an API key or connects an app such as Claude or ChatGPT, we keep a keyed hash of each key and of each app's sign-in, with the name of each key or app, who created or connected it, a key's last 4 characters, an app's return addresses, and when each was created or connected, last used, and revoked or disconnected. We never keep the key or the sign-in itself. Your team's owner can revoke a key or disconnect an app at any time in Settings, under API.

If you are a partner. What you told us when you applied, how you asked to be paid, each share your link earned, and every payout we sent.

What we do with it

We use it to read your store, make the advertisements you ask for, show them back to you in your library, keep your balance right, take your payments, send you the emails the service needs, count how many accounts each site or link brings, and answer you when you write to us. We do not sell it, and we do not use your photographs or your ads to advertise anyone else.

We also send a few reminder emails while your free trial is waiting to start or running. Each has a link to stop them, and you can turn them back on in Settings.

We send news and offers only to people who ask for them. Every optional email has a link to stop it, and you can also stop it in Settings.

Who else processes it

Parts of the service are run by others, and the material they need passes through them.

Amazon Web Services: hosting, and storage of the files we make for you.
Stripe: card payments, and keeping the card you put on file.
Resend: sending the emails we send you.
Zoho: our help desk, for the messages you send us and our replies, with your account's details and your browser's name when you write to us signed in.
Anthropic: reading your store's pages and the ads you upload, and writing scripts, headlines, emails, posts and translations.
Google: generating video, images and voices, and signing you in if you choose to sign in with Google, which gives us your email address and nothing else.
BytePlus: generating video, with a code that stands for your account and not your name or email.
fal.ai: generating video and images.
ElevenLabs: generating voices.
Deepgram: reading the speech in a video, to time its captions, and in an ad you bring to the UGC builder, to follow how it is built.
ScrapeCreators: reading the public advertisement library.
Shopify: if you use our Shopify app, your store's details, its products and its plan, and the billing for it.
A fetch relay: when a website's firewall turns our server away, the relay fetches its public pages and photos for us from another internet address: your store's, or a page you gave us to write a post from. It is given the addresses of those pages and photos, and nothing about you or your account.

The companies that make your videos may keep what we send them for a time under their own terms; we delete our copies when your account is erased.

If you connect Google Search Console, you are connecting your own account and you can disconnect it at any time.

Payments

Stripe takes every payment. When you open an account without an invitation, you put a card on file with Stripe, and nothing is charged to it then. A card is charged when you buy a plan or a top-up on Stripe's own page. That page shows the amount before you confirm. A card is also charged when your free trial turns into the plan you chose when you added the card. That happens after the last day of the free trial, which was shown when you added the card. It does not happen if you cancel the free trial before then. A plan renews until you cancel it. A card put on file without agreeing to these free trial terms, as every card put on file before 7 October 2026 was, is charged only when you buy a plan or a top-up. Stripe holds your card and we never see or store its number. A store that uses our Shopify app pays on its Shopify bill. Shopify takes those payments and holds the payment details.

We pay a partner in USDT or USDC. A crypto payout is written on a public blockchain: its sum, its date and the wallet it went to can be read by anybody and cannot be erased.

Cookies

This is everything we keep in your browser. The necessary items are always on; the others are off until you allow them, and you can change that at any time in Cookie settings. No advertising cookies, and nothing that follows you to other sites.

Necessary, always on.

sia_session (30 days). Keeps you signed in.
sia_anon (1 day). Keeps a store read you started before you had an account.
sia_gauth (10 minutes). Checks that a Google sign-in was started in this browser.
sia_code (10 minutes). Holds a sign-in while it waits for the code from your authenticator app.
sia_fresh (10 minutes). Shows that you just signed in with Google or opened the link we emailed, before you turn on two-factor authentication.
sia_stop (10 minutes). Holds a sign-in while you choose to stop the deletion of your account.
sia_hl (1 year). Remembers the interface language you chose.
sia_consent (6 months). Remembers your cookie choices.
sia-spend-keep (until the tab is closed, kept in the tab rather than as a cookie). Keeps what you typed in a form while you buy a plan or a top-up.

Referrals, only if you allow them.

sia_via (90 days). Remembers whose link brought you here. If you sign up and pay, they get a share of what you buy.

How long we keep it

What you make stays in your library while your account is open. Moving an ad to the bin takes it out of your library and turns off its share link, and keeps its files, so that it can be put back. Putting it back does not share it again.

To delete an ad for good, open the bin in your library and press Delete for good on it, or Empty the bin for everything in it. The ad is deleted at once: its files on our server and in our file storage, the words written for it, and its share link. The copies in our backups and our file storage are gone within 30 days, as below. Your credit history keeps the credits it cost. The copies of its pictures we store for the companies that make your videos are deleted with your account.

Everything you made is deleted when your account is erased, as below. Account information is kept while the account is open. Our server's own records are kept 30 days.

Deleting your account

You can delete your account in Settings, under Account: type your email address to confirm, and press Delete account.

When you press it, you are signed out everywhere. A plan you pay for is cancelled at once, and the rest of the period you paid for is not refunded. Seven days later the account is erased. Until then you can stop it by signing in and pressing Stop the deletion, or by writing to support@sayitagain.ai from the address on the account. A plan it cancelled stays cancelled.

When it is erased, we delete your stores and what we read from them; your ads, the words written for them and everything you uploaded, from our server and from our file storage, with the copies of your pictures we store for the companies that make your videos; your credits and your credit history; your link, the posts you sent us for a reward and the credits your link earned; and your account itself, with your email address and the address it was created from. If you connected Google Search Console, we withdraw that permission at Google. Stripe deletes the customer record it holds for you, with the cards saved on it, and keeps its invoices and payments, which the law requires.

If you were a partner, your application and how you are paid are deleted. Our record of each payout stays for our accounts: its sum, its date, how it was sent and the transfer's reference.

What we owe you as a partner when you ask to delete your account is sent before it is erased, as long as you had told us how to be paid and do not change it afterwards. A share still waiting its 30 days, or on hold, is not paid.

What we keep is a record with no email address in it: the account's number, when it was erased, your Stripe customer number, and, for each email address the account had the free trial on, a one-way code made from that address, so that the free trial is given once for each inbox. Stripe's reference for your card stays too, so that it is given once for each card. Our record of what you paid, with the dates, the credits bought and Stripe's reference for each payment, stays for our accounts. If you came through somebody's link, the credits or the money it earned them from your payments stay on their record, which names your account by its number only. Ratings and messages you sent us through the help page keep your email address, and messages keep the address they were sent from. Our help desk keeps the messages you sent us, by email or from the help page, with our replies and the account details sent with them. Our own notes of unusual activity name your account by its number; the emails those notes sent us keep your email address. Write to us and we delete them too.

If you are a member of someone else's team, only your own account goes: what you made belongs to the team and stays with it. If your account owns a team, the team's stores, ads and credits go with it, and each member keeps their own account.

Our backups hold copies until they roll off. The server keeps its five most recent copies, and a copy kept away from the server keeps each one for 30 days. Our file storage keeps a deleted file for 28 days, then removes it. So what was erased is gone from every copy within 30 days.

Our Shopify app

If you install Say It Again from the Shopify App Store, Shopify gives us your store's name, its myshopify.com address, its own domain and its Shopify number, and the email address of the store's owner. For each product you choose, it gives us the product's title, description, price, photos, options and variants. We keep the key that lets the app read your products, sealed on our server. Shopify also tells us which of our plans the store is on and when that changed. Your payment details stay with Shopify, and we never see them.

We use this as we use everything else on this page: to make what you ask for, to keep your balance right, and to give the free videos once for each store and once for each owner's email address. The photos go to the companies that make the videos, as they do for any account.

When you uninstall the app, Shopify asks us, 48 hours later, to erase your store's data, and we erase it then. If that request does not reach us, we erase it 7 days after you uninstall, once Shopify confirms the app is no longer on your store. Either way, the erasure covers the store's record and its key, the store's team, everything the team made and uploaded (on our server and in our file storage), and its credits and credit history.

What we keep after that contains no name, address or email address:

the team's number, and when it was erased;
a one-way code made from the store's myshopify.com address, with whether the store was given its free videos, and one made from its owner's email address, so that the free videos, and a month the store has already been given, are not given again if the app is installed again;
if the store left owing credits after a change of plan, that number of credits beside the store's code. It is taken from what the store is given if it comes back;
for each month or year the store paid for, its start and end dates, the plan, how much of it the store was given and when the store left it, with one-way codes made from Shopify's numbers for the store's plans, beside the store's code, so that what was paid for once is not given twice;
for a development store, a one-way code made from its owner's email address for each calendar month, beside the store's code, so that a month's videos go to one of the owner's development stores, deleted after the month that follows.

Our own notes of unusual activity name the team's number and nothing else. Our backups hold copies until they roll off, as above.

Where it is processed

We are in the United Arab Emirates. The companies above operate in the United States, in Europe and in Asia, so your information is processed outside the UAE.

Your rights

You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Write to support@sayitagain.ai from the address on the account and we answer within 30 days.

Children

This is a tool for businesses. It is not for anyone under 18.

Changes

If this policy changes in a way that matters, we will say so in the product or by email before it takes effect.

How to reach us

support@sayitagain.ai
Apolonis Social Media Management Services - FZCO
IFZA Properties, Premises DSO-IFZA, Dubai Silicon Oasis, Dubai, United Arab Emirates
Registration number 80188