Your privacy.
Your choices.

Who is responsible for your information

SautiLink Corporation operates SautiLink and decides the principal purposes and means of processing personal data through the service, subject to any separate rules that apply when you deliberately leave SautiLink or use a connected-account feature. This policy applies to sautilink.com, SautiLink account features, profiles, feeds, posts, replies, Rooms, messages, notifications, search, saved content, moderation, verification, support and official applications that link to this policy.

Our contact address is Uhuru Street, Mwanza, United Republic of Tanzania. This policy is intended to work alongside applicable privacy and data-protection laws, including Tanzania's data-protection framework and mandatory rights that may apply where you live.

What we collect and process

The information involved depends on the features you use.

Sensitive information you choose to share

SautiLink does not require you to publish sensitive personal information. If you place health information, precise location, political or religious beliefs, identity documents or other sensitive details in a post, Room, message or profile, those details become part of the content you chose to provide. Use the audience and privacy controls available to you and avoid posting information you do not want others to receive.

Where information comes from

• From you: when you register, update a profile, create content, join or manage a Room, send a message, submit a report, request verification, change settings or contact us.
• From your use of SautiLink: interactions, searches, follows, saves, device sessions, content-viewing and other actions needed to make features work and protect the service.
• From other members: when someone follows, mentions, messages, invites, blocks or reports you, or includes information about you in their content.
• From sign-in methods you choose: when you use a supported connected-account sign-in method, we receive the identifiers and account information authorized by that sign-in flow, such as an email address or account identifier.
• From operational systems: limited technical signals may be generated to authenticate requests, deliver the service, detect abuse or troubleshoot reliability.

We do not purchase consumer dossiers from data brokers to build hidden personal profiles about SautiLink members.

How we use your information

We use personal data for purposes reasonably connected to providing and protecting SautiLink, including to:

• create, authenticate, recover and secure accounts;
• display profiles and deliver posts, media, replies, polls, Rooms, messages, notifications and saved content;
• operate search, discovery and feed ordering based on relevant platform signals and member choices;
• remember settings, theme, session state and feature preferences;
• detect spam, fake engagement, impersonation, malicious automation, fraud, security attacks and other abuse;
• receive and investigate reports, make moderation decisions, preserve audit records and provide appeals;
• verify eligible accounts and administer identity or username controls;
• measure reliability, diagnose failures, improve performance and develop or test product features;
• communicate about security, account changes, support requests, policy updates and service notices; and
• comply with applicable law, valid legal process and obligations necessary to protect rights, safety and platform integrity.

Legal bases

Where a law requires a specific legal basis, processing may rely on performance of our agreement with you, consent, compliance with law, or legitimate interests such as service security, fraud prevention, product reliability and protecting members. Where consent is the basis, you may withdraw it, although withdrawal does not make earlier lawful processing unlawful.

Advertising and profiling

SautiLink does not currently use your off-platform browsing activity to build cross-site behavioural advertising profiles. If we introduce a materially different advertising or personalization use that requires new disclosure, consent or opt-out controls, we will update this policy and provide the required choices before applying that use.

Public content, audiences and Rooms

Who can access your information depends on the audience you choose and the feature you use. The following explains how those choices affect your content.

• Public profiles and posts: may be visible to other SautiLink members and, where the product permits public access, people outside SautiLink. Public content can be copied, quoted, linked, reshared or captured by others.
• Audience-restricted content: is delivered according to the relevant product setting, but recipients can still copy, screenshot or disclose what they receive.
• Public Rooms: Room identity and eligible content may be discoverable according to Room settings and product design.
• Private Rooms: membership and content receive restricted access. Room owners, admins and moderators may access content and membership information necessary to operate and moderate that Room. Private does not mean that another member cannot copy or disclose content outside the Room.

Removing content from SautiLink cannot erase copies that other people lawfully made outside our systems, screenshots, downstream shares, or records we must preserve for a limited legal or safety purpose.

Direct messages are private from the public

Direct messages are designed for the participants in a conversation and are not published as ordinary public posts. We process message content and related metadata as needed to transmit, synchronize, store and secure conversations, operate user controls, investigate valid reports and comply with applicable law.

Blocking, muting, deleting or hiding a conversation can change what appears in your account without necessarily deleting a copy held by another participant or a limited record retained for safety, security or legal reasons.

Operating the service and our technology partner

SautiLink uses technical and communications systems to authenticate accounts, store and deliver content, operate messages and notifications, secure requests, diagnose incidents and provide support. Information processed through these systems remains subject to the purposes and safeguards described in this policy.

When you intentionally use a connected-account sign-in method or follow a link that leaves SautiLink, information you choose to send outside SautiLink may be handled under the rules shown by that destination.

When information may be shared

We may disclose information in the following circumstances, limited to what is reasonably necessary:

• At your direction: for example, when you publish content, join a Room, send a message or choose a connected-account sign-in method.
• With other members or the public: according to your content, profile and Room settings.
• For operating SautiLink: limited information may be processed through systems used for hosting, authentication, storage, delivery, security, support and related technical functions.
• For safety and legal reasons: when we reasonably believe disclosure is required by applicable law or valid legal process, or is necessary and lawful to investigate fraud, serious abuse, threats, security incidents or violations of rights.
• During a corporate transaction: if SautiLink is involved in a merger, financing, restructuring, acquisition or transfer of assets, information may be disclosed subject to confidentiality and applicable legal requirements.
• With consent: for another purpose you clearly authorize.

We do not sell or rent personal data to data brokers. We also do not give external applications blanket access to SautiLink accounts merely because they request it.

Sessions, local storage, cookies and similar technology

SautiLink uses browser and device storage where needed to keep you signed in, remember theme and preferences, preserve certain drafts or temporary workflow state, protect account flows and make features responsive. Depending on the browser or device, these mechanisms can include cookies, local storage, session storage, authentication tokens and comparable technologies.

Some local information remains on your device rather than being sent to SautiLink. Clearing browser data, signing out or changing devices can remove local state. Essential authentication and security storage may be required for signed-in features to work correctly.

We may also use server logs, request metadata and security signals to detect attacks, enforce rate limits, diagnose incidents and prevent unauthorized access.

Retention and account deletion

We retain information for as long as reasonably necessary for the feature or purpose involved, taking account of account status, user choices, security, dispute resolution, legal obligations and technical backup cycles. Different records therefore have different lifetimes.

• Active account and profile information generally remains while the account is active or until it is changed or deletion is completed.
• Posts and media generally remain until removed by the member, moderation, Room administration where applicable, or account deletion processing.
• Security, moderation and audit records may be kept longer when necessary to investigate abuse, prevent repeated serious violations, establish or defend legal claims, or comply with law.
• Support and privacy-request records may be retained long enough to resolve the request and document the outcome.

Account deletion is available now

You can initiate account deletion through SautiLink account settings. When a deletion request enters a recovery period, the product shows the applicable deadline and may hide the profile while cancellation remains available. After the recovery period expires, final deletion processing can permanently remove or irreversibly anonymize eligible account data from active systems.

Backups, legal records, anti-abuse evidence and copies belonging to other participants may persist for a limited period where technically or legally necessary. We restrict retained data and do not restore it to ordinary product use merely to avoid a valid deletion request. See Account & Data Deletion for additional guidance.

Your privacy rights and choices

Depending on applicable law and the type of information involved, you may have rights to access, correct, export or delete personal data; object to or restrict certain processing; withdraw consent; and complain to a competent regulator.

• Access and export. Review account information and request eligible account data in a usable format.
• Correction. Update eligible profile or account details, subject to identity and anti-abuse limits.
• Deletion. Delete individual content where available or request permanent account deletion.
• Audience controls. Choose available visibility settings and manage Room memberships, blocks and mutes.
• Consent choices. Withdraw consent where consent is the legal basis, subject to processing already lawfully completed.
• Appeals and complaints. Use available moderation appeals and contact a competent data-protection authority where applicable.

We may need to verify identity before acting on a request, especially where disclosure or deletion could expose another person's data or compromise an account. We may refuse or limit a request where permitted by law and will provide an explanation when required.

Requests can be sent to support@sautilink.com. In Tanzania, you may also contact the Personal Data Protection Commission.

Moderation, recommendations and automated signals

SautiLink uses product rules, member reports, account history, technical signals and, where appropriate, automated detection to help rank content, identify spam, protect accounts and surface possible policy violations. Human review may be used for moderation, appeals, verification and complex safety decisions.

Automated systems can make mistakes. Where SautiLink offers an appeal or review mechanism, members can challenge eligible decisions. We may preserve the minimum evidence needed to explain enforcement, prevent repeated severe abuse and protect the integrity of the appeals process.

Harmful posts may not always be detected immediately, and automated ranking may not always reflect your preferences.

International processing and transfers

SautiLink is operated from Tanzania, while some operational systems can process information in other countries. That means personal data may be transferred to, stored in or processed outside the country where you live.

Where cross-border safeguards are required, we use measures appropriate to the data, processing purpose and applicable law, such as contractual restrictions, access controls, encryption, data minimization or another lawful transfer mechanism. The fact that SautiLink can be accessed globally does not remove mandatory privacy rights that apply to you.

Children and teenagers

SautiLink is not intended for children under 13 years old, and a higher minimum age applies where local law requires it. We may take reasonable steps to estimate, request or verify age when required for safety or legal compliance.

If we learn that an account belongs to someone below the applicable minimum age, we may restrict or close the account and delete information as required. Parents or guardians who believe a child has provided information improperly can contact support@sautilink.com.

Changes to this policy

We may update this policy as features, operations, legal requirements or data practices change. We will change the effective date and provide additional notice for material changes where appropriate or required.

If a new use requires consent under applicable law, merely changing this document will not replace that consent. Earlier versions may be retained where legally or operationally appropriate.

Questions, requests and complaints