Privacy, without the mystery.

Who is responsible for your data

SautiLink Corporation operates SautiLink and decides the principal purposes and means of processing personal data through the service, except where another provider acts independently under its own terms. This policy applies to sautilink.com, SautiLink account features, profiles, feeds, posts, replies, Rooms, messages, notifications, search, saved content, moderation, verification, support and official applications that link to this policy.

Our contact address is Uhuru Street, Mwanza, United Republic of Tanzania. This policy is intended to work alongside applicable privacy and data-protection laws, including Tanzania's data-protection framework and mandatory rights that may apply where you live.

What we collect and process

The information involved depends on the features you use.

Information you choose to make sensitive

SautiLink does not require you to publish sensitive personal information. If you place health information, precise location, political or religious beliefs, identity documents or other sensitive details in a post, Room, message or profile, those details become part of the content you chose to provide. Use the audience and privacy controls available to you and avoid posting information you do not want others to receive.

Where information comes from

• From you: when you register, update a profile, create content, join or manage a Room, send a message, submit a report, request verification, change settings or contact us.
• From your use of SautiLink: interactions, searches, follows, saves, device sessions, content-viewing and other actions needed to make features work and protect the service.
• From other members: when someone follows, mentions, messages, invites, blocks or reports you, or includes information about you in their content.
• From identity providers you choose: if you use Google, Facebook or Microsoft sign-in, we receive the identifiers and account information authorized by that sign-in flow, such as an email address or provider account identifier.
• From service and security providers: limited operational signals may be returned to us to authenticate requests, deliver infrastructure, detect abuse or troubleshoot the service.

We do not purchase consumer dossiers from data brokers to build hidden personal profiles about SautiLink members.

How and why we use information

We use personal data for purposes reasonably connected to providing and protecting SautiLink, including to:

• create, authenticate, recover and secure accounts;
• display profiles and deliver posts, media, replies, polls, Rooms, messages, notifications and saved content;
• operate search, discovery and feed ordering based on relevant platform signals and member choices;
• remember settings, theme, session state and feature preferences;
• detect spam, fake engagement, impersonation, malicious automation, fraud, security attacks and other abuse;
• receive and investigate reports, make moderation decisions, preserve audit records and provide appeals;
• verify eligible accounts and administer identity or username controls;
• measure reliability, diagnose failures, improve performance and develop or test product features;
• communicate about security, account changes, support requests, policy updates and service notices; and
• comply with applicable law, valid legal process and obligations necessary to protect rights, safety and platform integrity.

Legal bases

Where a law requires a specific legal basis, processing may rely on performance of our agreement with you, consent, compliance with law, or legitimate interests such as service security, fraud prevention, product reliability and protecting members. Where consent is the basis, you may withdraw it, although withdrawal does not make earlier lawful processing unlawful.

Advertising and profiling

SautiLink does not currently use your off-platform browsing activity to build cross-site behavioural advertising profiles. If we introduce a materially different advertising or personalization use that requires new disclosure, consent or opt-out controls, we will update this policy and provide the required choices before applying that use.

Public content, audiences and Rooms

Social networks work because information can be shared. The privacy treatment of content therefore depends heavily on the audience you choose and the feature you use.

• Public profiles and posts: may be visible to other SautiLink members and, where the product permits public access, people outside SautiLink. Public content can be copied, quoted, linked, reshared or captured by others.
• Audience-restricted content: is delivered according to the relevant product setting, but recipients can still copy, screenshot or disclose what they receive.
• Public Rooms: Room identity and eligible content may be discoverable according to Room settings and product design.
• Private Rooms: membership and content receive restricted access. Room owners, admins and moderators may access content and membership information necessary to operate and moderate that Room. Private does not mean that another member cannot copy or disclose content outside the Room.

Removing content from SautiLink cannot erase copies that other people lawfully made outside our systems, screenshots, downstream shares, or records we must preserve for a limited legal or safety purpose.

Direct messages are private from the public, not magically invisible

Direct messages are designed for the participants in a conversation and are not published as ordinary public posts. We process message content and related metadata as needed to transmit, synchronize, store and secure conversations, operate user controls, investigate valid reports and comply with applicable law.

Blocking, muting, deleting or hiding a conversation can change what appears in your account without necessarily deleting a copy held by another participant or a limited record retained for safety, security or legal reasons.

Service providers, identity providers and partners

SautiLink relies on specialized infrastructure rather than trying to build every technical layer itself. Depending on the feature, providers may process limited data on our behalf or under their own terms.

Third-party identity providers and external websites have their own privacy terms. When you leave SautiLink or choose a third-party sign-in flow, their policies may also apply.

When information may be shared

We may disclose information in the following circumstances, limited to what is reasonably necessary:

• At your direction: for example, when you publish content, join a Room, send a message or choose an external identity provider.
• With other members or the public: according to your content, profile and Room settings.
• With processors and operational providers: for hosting, authentication, storage, delivery, security, support and related technical functions.
• For safety and legal reasons: when we reasonably believe disclosure is required by applicable law or valid legal process, or is necessary and lawful to investigate fraud, serious abuse, threats, security incidents or violations of rights.
• During a corporate transaction: if SautiLink is involved in a merger, financing, restructuring, acquisition or transfer of assets, information may be disclosed subject to confidentiality and applicable legal requirements.
• With consent: for another purpose you clearly authorize.

We do not sell or rent personal data to data brokers. We also do not give external applications blanket access to SautiLink accounts merely because they request it.

Sessions, local storage, cookies and similar technology

SautiLink uses browser and device storage where needed to keep you signed in, remember theme and preferences, preserve certain drafts or temporary workflow state, protect account flows and make features responsive. Depending on the browser or provider, these mechanisms can include cookies, local storage, session storage, authentication tokens and comparable technologies.

Some local information remains on your device rather than being sent to SautiLink. Clearing browser data, signing out or changing devices can remove local state. Essential authentication and security storage may be required for signed-in features to work correctly.

We may also use server logs, request metadata and security signals to detect attacks, enforce rate limits, diagnose incidents and prevent unauthorized access.

How long we keep information and what deletion does

We retain information for as long as reasonably necessary for the feature or purpose involved, taking account of account status, user choices, security, dispute resolution, legal obligations and technical backup cycles. Different records therefore have different lifetimes.

• Active account and profile information generally remains while the account is active or until it is changed or deletion is completed.
• Posts and media generally remain until removed by the member, moderation, Room administration where applicable, or account deletion processing.
• Security, moderation and audit records may be kept longer when necessary to investigate abuse, prevent repeated serious violations, establish or defend legal claims, or comply with law.
• Support and privacy-request records may be retained long enough to resolve the request and document the outcome.

Account deletion is available now

You can initiate account deletion through SautiLink account settings. When a deletion request enters a recovery period, the product shows the applicable deadline and may hide the profile while cancellation remains available. After the recovery period expires, privileged deletion processing can permanently remove or irreversibly anonymize eligible account data from active systems.

Backups, legal records, anti-abuse evidence and copies belonging to other participants may persist for a limited period where technically or legally necessary. We restrict retained data and do not restore it to ordinary product use merely to avoid a valid deletion request. See Account & Data Deletion for additional guidance.

Your privacy rights and choices

Depending on applicable law and the type of information involved, you may have rights to access, correct, export or delete personal data; object to or restrict certain processing; withdraw consent; and complain to a competent regulator.

We may need to verify identity before acting on a request, especially where disclosure or deletion could expose another person's data or compromise an account. We may refuse or limit a request where permitted by law and will provide an explanation when required.

Requests can be sent to support@sautilink.com. In Tanzania, you may also contact the Personal Data Protection Commission.

Moderation, recommendations and automated signals

SautiLink uses product rules, member reports, account history, technical signals and, where appropriate, automated detection to help rank content, identify spam, protect accounts and surface possible policy violations. Human review may be used for moderation, appeals, verification and complex safety decisions.

Automated systems can make mistakes. Where SautiLink offers an appeal or review mechanism, members can challenge eligible decisions. We may preserve the minimum evidence needed to explain enforcement, prevent repeated severe abuse and protect the integrity of the appeals process.

We do not promise that every harmful post will be detected immediately or that automated ranking will always reflect your preferences perfectly.

International processing and transfers

SautiLink is operated from Tanzania but uses infrastructure and providers that can process information in other countries. That means personal data may be transferred to, stored in or processed outside the country where you live.

Where cross-border safeguards are required, we use measures appropriate to the provider, data and applicable law, such as contractual restrictions, access controls, encryption, data minimization or another lawful transfer mechanism. The fact that SautiLink can be accessed globally does not remove mandatory privacy rights that apply to you.

Children and teenagers

SautiLink is not intended for children under 13 years old, and a higher minimum age applies where local law requires it. We may take reasonable steps to estimate, request or verify age when required for safety or legal compliance.

If we learn that an account belongs to someone below the applicable minimum age, we may restrict or close the account and delete information as required. Parents or guardians who believe a child has provided information improperly can contact support@sautilink.com.

Changes to this policy

Products, laws and infrastructure change. We may update this policy to reflect new features, providers, legal requirements or data practices. We will change the effective date and provide additional notice for material changes where appropriate or required.

If a new use requires consent under applicable law, merely changing this document will not replace that consent. Earlier versions may be retained where legally or operationally appropriate.

Questions, requests and complaints