DRAFT — not yet reviewed by the owner or a lawyer. Not in effect. Items marked [OWNER] need a decision.
Privacy
Last updated: [OWNER: date]. The short version: your script is never stored on our servers. It goes from your phone to your TV and lives only on those two screens.
Your script
- When you tap Send to TV, your phone sends the text over an encrypted connection, through our server, straight to the TV. Our server passes it along and keeps no copy of it. We don't write it to a database or to our logs.
- The TV holds it in memory while the page is open. Reloading or closing the TV page, or tapping Release on your phone, clears it.
- On the free plan, the draft in the text box on your phone is kept only in that browser tab, so a reload doesn't lose it. Closing the tab clears it.
What we do keep, and for how long
| What | Where | How long |
|---|---|---|
| Session details: the 6-letter code, whether a phone is connected, timers for the free limit, and scrambled (hashed) versions of the secret keys that prove which TV and phone own the session | Our server | Until the session ends. At most 24 hours, usually minutes after the TV page closes. Then it's deleted. |
| Short activity records: "a phone connected", "the free time ran out", "the session ended", with the session code, the time and the plan (free or Pro). Never script text or secret keys. | Our hosting provider's logs | [OWNER: confirm Cloudflare Workers Logs retention for our plan] |
| Your IP address, as part of delivering the website and limiting abuse (for example, too many new sessions from one place) | Our hosting provider (Cloudflare) | Per Cloudflare's own policy [OWNER: link] |
What stays on your own devices
- TV: your display settings (text size, rotation, mirror, and so on), so a vertical TV stays vertical next week.
- Phone: a secret key for the current session, so your phone can reconnect if it locks; your clicker button choices; and, for the open tab only, your draft script.
These live in your browser's own storage. Clearing your browser data removes them.
What we don't do
- No account is needed to use SayImpromptu.
- No advertising, and no advertising or tracking cookies. We don't sell or share your data.
- We don't use cookies or your IP address to count your free sessions.
- [OWNER: confirm whether any website analytics will be added before launch; if so, name it here.]
When Pro launches (planned — not available yet)
Pro features need a little more, and only if you choose them:
- Account: your email address, so you can sign in. A sign-in cookie on sayimpromptu.com.
- Payment: handled by Stripe. We receive your subscription status and a customer ID, never your full card number.
- Saved scripts: if you save a script to your library, we store it so it's on all your devices. You can delete it at any time. Unsaved scripts are still never stored.
- "Format for speaking": when you use it, the script text is sent to our AI provider [OWNER: confirm provider, e.g. Anthropic] to reformat it, and the result comes back to your phone. We don't store it unless you save it. [OWNER: confirm the provider's data-retention terms and summarise them here.]
Children
[OWNER: decide wording. SayImpromptu doesn't ask for personal information to use the free product.]
Your choices and questions
Because we don't keep your scripts or need an account, there's usually nothing of yours for us to delete. For any privacy question or request, contact [OWNER: contact email]. [OWNER: legal entity name and address.]
If this policy changes, we'll update the date at the top. Big changes will be announced on the home page.