Effective Date: September 1st, 2026

This Privacy Policy explains how Sphere Min Inc., a Delaware corporation (“Sphere Min,” “Saynsight,” “we,” “us,” or “our”), collects, uses, stores, discloses, and protects information in connection with Saynsight.

This Policy applies to our websites, business dashboard, hosted campaign pages, voice response pages, QR code experiences, embedded experiences, reports, and related Saynsight services (collectively, the “Services”).

Saynsight allows organizations to collect voice feedback and convert responses into transcripts, summaries, themes, analytics, and other insights.

Respondents generally do not need to create an account, log in, provide a name, an email address, or their date of birth to submit a response.

1. Who This Policy Applies To

This Policy applies to:

Business Users, meaning individuals who access Saynsight on behalf of a company, organization, venue, brand, or other customer.

Respondents, meaning individuals who provide feedback through a Saynsight campaign.

Website Visitors, meaning individuals who visit or interact with Saynsight websites or related online services.

A company or organization that creates a Saynsight campaign is called a Campaign Owner.

2. Our Role in Processing Information

The role Sphere Min plays may depend on the information and purpose involved.

Campaign Owners generally determine why a campaign is created, what questions are asked, and how Campaign Results will be used.

Sphere Min processes information to provide the campaign infrastructure, transcription, analysis, dashboard, reporting, security, and related Services.

Sphere Min also independently determines certain purposes relating to account administration, billing, security, legal compliance, operation and improvement of Saynsight, and the creation and use of Deidentified Data described in this Policy.

3. Information We Collect

3.1 Business User Information

Business Users may provide:

  1. Email address.

  2. Account authentication information or system generated account identifiers.

  3. Campaign settings and configuration.

  4. Communications with Saynsight support.

  5. Information voluntarily provided while using the dashboard.

We do not require more personal information than reasonably necessary to create and operate a Business User account.

3.2 Voice Responses

When a Respondent chooses to submit a voice response, we may collect and process:

  1. The original voice recording.

  2. A speech to text transcript.

  3. The question or campaign associated with the response.

  4. Response time and campaign metadata.

  5. Themes and categories derived from the response.

  6. Summaries.

  7. Sentiment or other contextual analysis.

  8. Language or speech related characteristics necessary for processing.

  9. Embeddings, features, classifications, and other derived analytical data.

  10. Other Campaign Results generated from the response.

Respondents may voluntarily speak personal information during a recording.

Saynsight does not require Respondents to include names, addresses, telephone numbers, or other personal identifiers in their voice responses.

Respondents should avoid including sensitive information that is not necessary to answer the campaign question.

3.3 Optional Email for Rewards or Follow Up

Saynsight does not generally require a Respondent to provide an email address.

Some Campaign Owners may offer a reward, incentive, product, prize, or follow up opportunity.

In those situations, a Respondent may voluntarily provide an email address to receive the stated benefit.

Providing an email address for this purpose is optional unless the particular campaign clearly states otherwise.

We may use the email address to:

  1. Deliver or facilitate the stated reward.

  2. Communicate regarding the specific campaign or reward.

  3. Facilitate an agreed follow up opportunity.

  4. Provide the email address to the Campaign Owner when that disclosure was communicated to the Respondent or the Respondent otherwise agrees.

We do not use a reward email address for unrelated marketing unless the Respondent has been provided an appropriate notice and has given any legally required consent.

3.4 Payment and Subscription Information

Paid Saynsight services are processed through Stripe.

When a Business Customer purchases a paid plan, we may receive or maintain information such as:

  1. Stripe customer identifier.

  2. Subscription plan.

  3. Subscription status.

  4. Payment status.

  5. Invoice information.

  6. Renewal information.

  7. Cancellation or refund status.

Stripe processes payment card information.

Sphere Min does not receive or store the complete payment card number used to pay for Saynsight.

3.5 Technical and Usage Information

When the Services are accessed, our systems or service providers may automatically receive technical information such as:

  1. IP address.

  2. Browser type.

  3. Device type.

  4. Operating system.

  5. Access time.

  6. Pages or features used.

  7. Referring information.

  8. Security events.

  9. Error and diagnostic information.

  10. Session and authentication information.

We may derive an approximate location from an IP address for security, fraud prevention, localization, or operational purposes.

We do not require precise GPS location in order to submit an ordinary Saynsight response.

4. Voice Storage and Processing

Voice recordings submitted through Saynsight may be stored using Google Cloud infrastructure, including Google Cloud Storage.

We process voice recordings to provide functions such as:

  1. Speech to text transcription.

  2. Response organization.

  3. Theme extraction.

  4. Summarization.

  5. Sentiment and contextual analysis.

  6. Pattern detection.

  7. Campaign reporting.

  8. Quality assurance.

  9. Security and abuse prevention.

  10. Creation of Deidentified Data.

Automated systems, including artificial intelligence and machine learning technologies, may be used to perform some of these functions.

Automated outputs may be inaccurate, incomplete, or contextually incorrect.

Saynsight does not use ordinary voice recordings to authenticate a Respondent or create a voiceprint for the purpose of identifying a specific person unless we separately disclose that use and obtain any consent required by law.

5. How We Use Information

We may use information to:

  1. Provide and operate Saynsight.

  2. Create and administer Business User accounts.

  3. Create and operate campaigns.

  4. Receive and store voice responses.

  5. Transcribe responses.

  6. Generate Campaign Results.

  7. Provide dashboards and reports.

  8. Provide audio access when included in the applicable plan.

  9. Process subscriptions and billing.

  10. Facilitate rewards and follow up communications.

  11. Respond to support requests.

  12. Detect fraud, misuse, abuse, and security incidents.

  13. Debug and maintain the Services.

  14. Comply with legal obligations.

  15. Enforce our Terms of Service.

  16. Improve the reliability, quality, and functionality of Saynsight.

  17. Create and use Deidentified Data as described below.

6. Information Available to Campaign Owners

Campaign Owners generally receive access to transcripts and Campaign Results associated with their campaigns.

Depending on the applicable plan and configuration, a Campaign Owner may also receive access to the original voice recording.

A Campaign Owner does not automatically receive a Respondent's email address merely because the Respondent provided an email to Saynsight.

Where a Respondent provides an email address for a reward, incentive, or follow up opportunity, we may provide that address to the Campaign Owner if:

  1. The intended disclosure was communicated when the email was collected.

  2. The Respondent subsequently agrees to the disclosure.

  3. The disclosure is otherwise permitted or required by applicable law.

Campaign Owners are responsible for their own use of information they receive from Saynsight.

7. Deidentified Data

Saynsight may create Deidentified Data from Response Content and other information.

For purposes of this Policy, “Deidentified Data” means information that cannot reasonably be used to infer information about, or otherwise be linked to, an identified or identifiable individual or a device associated with that individual.

Simply removing a name, email address, or another direct identifier is not necessarily sufficient to make information deidentified.

Our deidentification process may include, where appropriate:

  1. Removing direct identifiers.

  2. Separating contact information from response information.

  3. Detecting or removing identifying information contained in transcripts.

  4. Excluding content that presents an unreasonable risk of reidentification.

  5. Transforming or reducing metadata.

  6. Aggregating information.

  7. Applying technical and organizational controls designed to prevent reidentification.

  8. Applying additional processing to audio or derived information where reasonably necessary to meet our deidentification standard.

Sphere Min takes reasonable measures designed to ensure that Deidentified Data cannot be associated with an identifiable individual.

Sphere Min publicly commits to maintaining Deidentified Data in deidentified form and not attempting to reidentify it.

When Sphere Min provides Deidentified Data to a recipient, we require contractual restrictions intended to maintain the information in deidentified form and prohibit attempts to reidentify individuals.

8. How We Use Deidentified Data

Deidentified Data may be retained and used separately from identifiable campaign information.

We may use Deidentified Data for:

  1. Research.

  2. Product development.

  3. Technology development.

  4. Speech technology development.

  5. Analytics and benchmarking.

  6. Dataset development.

  7. Development, training, testing, evaluation, and improvement of artificial intelligence and machine learning technologies.

  8. Development and evaluation of models, algorithms, and analytical systems.

  9. Academic and commercial research.

  10. Quality evaluation.

  11. Other lawful technology and business development purposes.

We may license Deidentified Data to research institutions, technology companies, and other research or technology partners.

We may receive monetary or other consideration for such licenses.

We do not include a Respondent's identifiable email address in a Deidentified Data license.

A notice displayed to Respondents may state:

Your deidentified response may be used to improve and develop technology and may be licensed to research and technology partners.

9. How We Disclose Information

We may disclose information in the following circumstances.

9.1 Campaign Owners

We provide Campaign Owners with Campaign Results and, where permitted by the applicable plan, original audio.

Optional Respondent contact information may be provided as described in Section 6.

9.2 Service Providers

We may use service providers that support functions such as:

  1. Cloud hosting and storage.

  2. Speech processing.

  3. Artificial intelligence processing.

  4. Data analytics.

  5. Security.

  6. Email and communications.

  7. Customer support.

  8. Payment processing.

Service providers may process information only as permitted by their agreements with us and applicable law.

9.3 Research and Technology Partners

We may disclose or license Deidentified Data to research and technology partners as described in this Policy.

Recipients are contractually required to maintain applicable Deidentified Data protections, including restrictions against reidentification.

9.4 Legal and Safety Requirements

We may disclose information where reasonably necessary to:

  1. Comply with applicable law, regulation, subpoena, court order, or other valid legal process.

  2. Protect the rights, property, or safety of Sphere Min, our users, or others.

  3. Investigate fraud, abuse, security incidents, or unlawful activity.

  4. Enforce our Terms of Service.

9.5 Business Transactions

Information may be transferred as part of a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar corporate transaction, subject to applicable law.

10. Sale and Sharing of Personal Information

Sphere Min does not sell identifiable Respondent contact information or personal information for monetary consideration.

Sphere Min does not share personal information for cross context behavioral advertising.

As explained above, Sphere Min may license information after it has been processed into Deidentified Data under our deidentification standards.

If our practices change in a way that creates a right to opt out under applicable privacy law, we will provide the legally required notice and method to exercise that right.

11. Cookies and Similar Technologies

Saynsight may use cookies, local storage, and similar technologies where necessary to:

  1. Maintain sessions.

  2. Authenticate Business Users.

  3. Remember preferences.

  4. Protect the security of the Services.

  5. Diagnose technical problems.

  6. Understand basic service usage.

Respondents are not required to create an account simply to submit an ordinary voice response.

If we introduce advertising or analytics technologies that require additional notice or consent, we will provide that notice or consent mechanism where required.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, taking into account the nature of the information, the purpose of processing, our relationship with the Business Customer or Respondent, security requirements, legal obligations, and potential disputes.

Business Account Information

Business User email addresses and account information may be maintained while the account remains active and for a reasonable period afterward where needed for administration, security, dispute resolution, or legal compliance.

Voice Responses and Campaign Data

Original voice recordings, transcripts, and related Campaign Data may be retained as reasonably necessary to provide the Services, maintain Campaign Results, comply with customer arrangements, protect the Services, resolve disputes, and create Deidentified Data as permitted by this Policy.

Optional Reward Email Addresses

Email addresses voluntarily provided for a reward or follow up may be retained for the period reasonably necessary to administer the stated reward or follow up and for any additional period required for fraud prevention, dispute resolution, or legal compliance.

Billing Information

Subscription, invoice, and transaction records may be retained for periods required by tax, accounting, financial, or other applicable law.

Deidentified Data

Once information has been properly deidentified so that it can no longer reasonably be linked to an identifiable individual, Sphere Min may retain the Deidentified Data without a fixed retention period and use it for the purposes described in this Policy.

Because Deidentified Data is not maintained in a manner that allows us to reasonably identify a particular individual, we may not be able to locate or delete a specific individual's contribution from a deidentified dataset.

13. Your Privacy Rights

Depending on where you live, applicable law may provide rights concerning your personal information.

These rights may include the right to:

  1. Confirm whether we process personal information about you.

  2. Access personal information.

  3. Correct inaccurate personal information.

  4. Request deletion.

  5. Obtain a portable copy of certain information.

  6. Opt out of certain sales of personal information.

  7. Opt out of targeted advertising.

  8. Opt out of certain types of profiling.

  9. Withdraw consent where processing is based on consent.

  10. Appeal certain decisions regarding a privacy request.

  11. Exercise privacy rights without unlawful discrimination.

Requests may be submitted to:

privacy@spheremin.com

We may take reasonable steps to verify a request before acting on it.

Because ordinary Saynsight responses may be submitted without a name, account, or email address, we may not always be able to determine which response belongs to a particular person.

We will not collect additional identifying information solely for the purpose of linking a person to data where applicable law does not require us to do so.

We are not required to reidentify Deidentified Data solely to respond to an individual rights request where applicable law provides otherwise.

Authorized agents may submit requests where permitted by applicable law and subject to appropriate verification.

14. Children and Child Directed Campaigns

Saynsight does not impose a general age restriction on ordinary campaigns and generally does not ask Respondents to provide their date of birth.

Saynsight may be used in locations or settings where children are present.

However, where a Campaign Owner intentionally creates a campaign directed to children under 13, or where we otherwise have knowledge that applicable child privacy laws apply, additional safeguards are required.

Such campaigns must use any parental notice, verifiable parental consent, or other child privacy process required by applicable law.

Campaign Owners are required to notify Sphere Min before intentionally operating a campaign directed to children under 13.

We may restrict or suspend a child directed campaign that does not use required safeguards.

If we learn that children's personal information has been collected in a manner that does not comply with applicable law, we will take appropriate steps, which may include restricting processing, obtaining legally required parental authorization, or deleting the information.

Deidentified Data derived from children's information will be handled only as permitted by applicable law.

15. Sensitive Information

A voice response may sometimes contain information that applicable law treats as sensitive.

Respondents are not required to provide sensitive personal information in order to use an ordinary Saynsight campaign.

Campaign Owners should not intentionally solicit sensitive personal information unless there is a legitimate reason to do so and all applicable notice, consent, and other legal requirements have been satisfied.

Where applicable law requires consent before processing sensitive data, Sphere Min and the Campaign Owner will apply the legally required process.

16. Security

We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, loss, or destruction.

These measures may include:

  1. Access controls.

  2. Encryption or protected transmission methods.

  3. Secure cloud infrastructure.

  4. Restricted access to voice recordings and personal information.

  5. Authentication controls.

  6. Logging and security monitoring.

  7. Internal access management.

No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

17. International Processing

Sphere Min is a United States company.

Information may be processed or stored in the United States and in other jurisdictions where our service providers operate.

Where applicable law requires safeguards for international transfers, we will use appropriate legal mechanisms.

18. United States State Privacy Disclosures

Residents of certain United States states may have additional privacy rights under state law.

These may include California, Delaware, Colorado, Connecticut, Virginia, and other jurisdictions that have enacted comprehensive consumer privacy laws.

Where such a law applies, we will honor rights and obligations required by that law.

For purposes of applicable state privacy laws:

  1. We collect the categories of personal information described in Section 3.

  2. We use those categories for the purposes described in Section 5.

  3. We disclose information to the categories of recipients described in Section 9.

  4. We do not sell identifiable personal information for monetary consideration.

  5. We do not share personal information for cross context behavioral advertising.

  6. We may use and commercially license Deidentified Data as described in Sections 7 and 8.

  7. We maintain Deidentified Data in deidentified form and do not attempt to reidentify it.

  8. We contractually restrict recipients of Deidentified Data from attempting to reidentify it.

California residents may have rights to know, access, correct, delete, and obtain information about certain disclosures, and may have rights concerning sale, sharing, or certain uses of sensitive personal information where applicable.

Delaware residents may have rights to access, correct, delete, obtain portability, opt out of certain processing, and appeal certain privacy request decisions where the Delaware Personal Data Privacy Act applies.

To exercise an applicable state privacy right, contact:

privacy@spheremin.com

19. Changes to This Privacy Policy

We may update this Privacy Policy as Saynsight changes, our business practices evolve, or applicable law changes.

When we make material changes, we will provide notice through the Services, by email where appropriate, or through another reasonable method.

The current version will display the effective date at the top of this Policy.

20. Contact Us

For questions about this Privacy Policy or to exercise a privacy right, contact:

Sphere Min Inc.

Privacy: privacy@spheremin.com

General Saynsight support: hello@saynsight.com