Privacy Policy

This policy describes what Less collects and why. The data controller is PM Frontier LLC, 30 N Gould St, Sheridan, WY 82801, United States. Privacy questions: privacy@sayless.is.

What we collect

• Account data. Your email and name, from the sign-in provider you use to create your account, plus the payout details you add (Wise email or PayPal email) and your country.
• Tool queries. When your AI assistant calls Less, we receive the query the assistant sends to our tools (for example, "send $2,000 to Colombia") and we log it to operate and improve the service. We do not receive the rest of your conversation.
• Click and transaction data. When you use a tracked link we record the click (with a hashed IP address and hashed browser signature, used only for abuse prevention) and any purchase data affiliate networks report back: merchant, order amount, commission, and status. We do not see what you bought item-by-item unless the network includes it.
• Visit data. We count page visits on sayless.is ourselves, first-party: the page you viewed, the campaign parameters in the link that brought you here (like utm_source), the referring site's domain, your country (two-letter code only), a coarse device class (mobile / tablet / desktop), and a random visitor ID stored in one first-party cookie. This goes straight into our own database so we can tell which ads work.
• Product analytics. We use PostHog to understand how sayless.is is used: pages viewed, elements clicked, and session replays, a reconstruction of how you interacted with our pages (never your screen outside sayless.is; payment-style fields are masked). PostHog processes this on our behalf and does not get to use it for anything else.

What we never do

• We do not sell or rent your data. To anyone. Ever.
• We do not read your AI conversations, only the queries sent to our tools.
• We do not run a browser extension or track your browsing outside sayless.is.
• We do not use analytics for third-party advertising or share it with ad networks. It exists so we can make the product better and know which of our own ads work.

Who receives data

• Affiliate networks receive a pseudonymous click ID when you follow a tracked link. They never receive your name or email from us.
• Service providers we use to run Less: hosting (Vercel), database (Supabase), authentication (WorkOS), email (Resend), analytics (PostHog), and payouts (Wise / PayPal, which receive the payout details you provided). Each processes data only on our instructions.
• Authorities, only if legally required.

Cookies

We use session cookies for sign-in; one first-party cookie (less_attr, expires after 60 days) holding a random visitor ID and the campaign parameters from your first visit, so we know which ad or link brought you here; and PostHog analytics cookies (ph_*) holding a random device ID so we can recognize return visits and stitch a session replay together. All of them identify a browser, not a person, until you choose to sign up. None are used for advertising or shared with ad networks.

Retention and deletion

Account data lives until you delete your account (Settings → Delete account). Deletion is real: your profile is erased and remaining records are anonymized. We retain transaction and payout records as required for financial and tax compliance, without your identity attached where the law allows. Tool-query logs are retained for up to 12 months.

Your rights

You can access, correct, export, or delete your data at any time: most of it directly in the app, or by emailing privacy@sayless.is. If you are in the EEA/UK, you also have the rights provided by the GDPR, including the right to lodge a complaint with a supervisory authority. If you are a California resident, the CCPA gives you similar rights; we do not sell personal information as defined there.

Changes

If this policy changes materially, we will note it here and, for significant changes, email account holders before the change takes effect.