Your data. Your voice. Your control.

Who we are and what this policy covers

SautiLink Corporation is building SautiLink, a social network created in Tanzania for people around the world. For purposes of applicable data-protection law, SautiLink Corporation is responsible for deciding how and why personal data is processed through SautiLink.

This policy covers sautilink.com, our pre-launch waitlist, future SautiLink accounts and social features, and official SautiLink applications for web, Android, iOS, Windows and other supported devices. It does not govern independent websites or services that we do not control.

Our registered contact address for this policy is Uhuru Street, Mwanza, United Republic of Tanzania.

Our privacy commitments

SautiLink does not give independent third-party apps blanket access to user data. If integrations are introduced, access will require a clear user action, be limited to the selected purpose, and be revocable.

Personal data we handle

The data involved depends on whether you are using the current public website or a future SautiLink account feature.

Sources of data

We receive data directly from you, from your use of SautiLink, from device or browser signals needed to operate the service, and from other people when they interact with you or report content. We do not purchase personal profiles from data brokers.

Sensitive information

SautiLink does not require you to publish sensitive personal information. Please think carefully before posting health information, precise location, identity documents, political or religious beliefs, or other sensitive details. Where a feature genuinely needs sensitive data, we will use a clear notice and obtain consent or rely on another lawful basis as required.

How and why we use data

We process personal data only for identified purposes, including:

• managing the waitlist and sending requested launch or essential product updates;
• creating, verifying, securing and supporting accounts;
• publishing and delivering content to the audience you select;
• providing feeds, search, notifications, messaging, accessibility and language features;
• remembering settings and making the service relevant without selling your profile;
• preventing spam, fraud, impersonation, malicious activity and threats to users or the platform;
• reviewing reports, enforcing our Terms, supporting appeals and protecting freedom of expression alongside safety;
• measuring reliability, fixing errors, improving performance and developing requested features; and
• complying with lawful obligations and defending the rights, safety and integrity of SautiLink and its community.

Legal grounds

Depending on the context and applicable law, our legal grounds may include your consent, performance of our agreement with you, compliance with a legal obligation, and legitimate interests such as securing and improving SautiLink. Where we rely on legitimate interests, we consider the impact on your rights and use proportionate safeguards. You can withdraw consent at any time where consent is the basis.

Your posts, messages and audience choices

SautiLink is a social platform, so some information is intended to be seen by others. A public post, public profile field, reaction or reply may be viewed, copied, shared or indexed beyond your expected audience. Content shared with a limited audience will be delivered according to the controls available for that feature, but recipients may still capture or reshare it.

• Public content: visible to anyone permitted by the feature and may appear in search, previews or shared links.
• Limited-audience content: delivered to selected followers, groups or recipients.
• Private communications: used to deliver the conversation, protect safety and respond to valid reports or lawful requirements; they are not used as advertising inventory.
• Drafts: treated as non-public unless you publish or deliberately share them.

Deleting content removes it from active SautiLink surfaces, subject to reasonable technical processing time, lawful retention and copies already shared outside our control.

Permissions, cookies and local storage

We design permissions around specific actions. For example, attaching a photo may require access to a selected photo; recording audio requires microphone permission; sharing live media requires camera permission. Declining an optional permission will not block unrelated features.

The current public website uses browser storage to remember your light or dark theme. Security systems may also use limited cookies or similar technologies to maintain sessions, prevent abuse and keep the service reliable. We do not currently use behavioral-advertising cookies on the public SautiLink website.

When apps launch, device operating systems will show permission controls. You can change those permissions in your device settings. We will explain a permission before or when it is requested.

When data may be shared

We do not sell personal data. We disclose only what is reasonably necessary in these limited situations:

• At your direction: when you publish content, choose an audience, share a link or authorize an integration.
• Operational providers: carefully selected hosting, security, communications, support, reliability and similar providers may process limited data for SautiLink. They must act on our instructions, protect it to an equivalent standard and may not own or independently exploit it.
• Legal and safety reasons: when disclosure is required by a valid legal process, or is reasonably necessary to protect rights, prevent serious harm, investigate abuse or defend platform integrity. We assess requests and challenge overbroad demands where appropriate.
• Corporate change: if SautiLink is involved in a reorganization, merger or transfer, data remains subject to this policy unless users receive notice of a materially different practice.

We disclose the categories of recipients and the purposes for any processing while keeping confidential technical details protected. SautiLink remains accountable for the privacy commitments made here.

International data transfers

SautiLink is based in Tanzania and is intended for global access. Data may be processed in countries other than where you live when required to operate the service. Before cross-border processing, we apply safeguards required by applicable law, which may include adequacy assessments, contractual protections, consent where appropriate, security controls and regulatory authorization.

We take account of Tanzania's Personal Data Protection Act and its cross-border transfer requirements. Availability in a country does not reduce the protections described in this policy.

Retention, deactivation and deletion

We keep personal data only as long as reasonably necessary for the purpose collected, to maintain security, resolve disputes, enforce agreements and meet legal obligations. Retention varies by data type:

• Waitlist data: kept while the launch communication remains relevant, until you withdraw, or until it is no longer needed. We review pre-launch records regularly and accept removal requests at any time.
• Account and active content: generally retained while the account is active or until the user deletes the content or account.
• Security and audit records: retained for a limited period proportionate to fraud prevention, investigation and legal needs.
• Support and legal records: retained long enough to respond, document the outcome and comply with applicable requirements.

Deleting your account

Today, waitlist participants can request removal by emailing support@sautilink.com. Once SautiLink accounts launch, users will be able to initiate permanent deletion in account settings and through our Account & Data Deletion page.

After a verified account-deletion request, we intend to deactivate access promptly and delete or irreversibly anonymize associated personal data from active systems within 30 days, unless a longer period is required by law or a legitimate security investigation. Encrypted backup copies may persist for up to 90 days before routine overwrite and will not be restored for ordinary product use.

Your privacy rights

Subject to applicable law and appropriate identity verification, you may have the following rights. We aim to make core controls available to all SautiLink users, not only where a law compels us.

You may also opt out of non-essential communications and appeal eligible moderation decisions. We will not discriminate against you for exercising a privacy right. We may ask for information needed to verify that a request concerns your data and may deny or limit requests where the law permits, explaining the reason.

To exercise a right, email support@sautilink.com. You may also complain to the Personal Data Protection Commission of Tanzania or another competent regulator where you live.

Recommendations and automated safety systems

When social features launch, SautiLink may use automated signals to rank content, detect spam, protect accounts and identify possible violations. These systems may consider your choices and platform interactions, but we will not secretly build advertising profiles from sensitive data.

Automated signals can be wrong. Significant enforcement decisions should include appropriate review and an appeal route where feasible. We do not intend to make solely automated decisions that produce legal or similarly significant effects without the safeguards required by applicable law.

Security and incident response

We use administrative, technical and organizational safeguards proportionate to the data and risk. These include access controls, encryption in transit, secure development practices, monitoring, data minimization, backup protections, staff confidentiality and incident-response procedures.

No online service can guarantee absolute security. You can help by using a strong unique password, protecting verification codes, keeping devices updated and reporting suspicious activity. If a personal-data incident creates a risk requiring notice, we will notify affected people and authorities as required by law.

Children and teen privacy

SautiLink is not intended for children under 13, and a higher minimum age applies where local law requires it. We do not knowingly collect waitlist or account data from a child below the applicable minimum age. If we learn that this occurred, we will take steps to remove the data and close the account.

For teenagers, we intend to use age-appropriate defaults, clearer notices, limits on sensitive personalization and stronger safety controls. A parent or guardian who believes a child has provided data improperly can contact support@sautilink.com.

Changes to this policy

We may update this policy as SautiLink develops, laws change or new features launch. We will update the effective date and, for material changes, provide a prominent notice or direct communication where appropriate. We will seek consent when a change requires it.

Earlier versions may be made available where required. Continued use after an effective update means the current policy applies, but it does not override rights that cannot legally be waived.

Questions, requests and complaints

Contact us if you have a privacy question, want to exercise a right, need waitlist data removed, or believe SautiLink is not following this policy.