Last updated: 8 October 2026
Sasonica is made by South Pen Labs. This page explains what we keep when you have a Sasonica account or use sasonica.com, and what we don’t.
The short version
- Your account holds your username, email address, password and, if you add one, a profile photo. That’s all.
- Your conversations, files and voice never come to us. They stay on the Sasonica server you run yourself, such as your own computer.
- If you choose our hosted relay, the commands your AI assistant sends to your computer, and their results, pass through it (see “The hosted relay”).
- The chat on sasonica.com sends your questions to Anthropic to be answered. We don’t keep them.
- If you write to us, through the contact form or by email, we keep your message and address so we can reply.
- We don’t sell your information, show you ads, or track you around the web.
What your account holds
When you create a Sasonica account on sasonica.com we keep:
- Your username and email address, so you can sign in and we can send you account emails.
- Your password, stored only as a one-way hash. We can’t read it.
- A profile photo, if you add one or it comes from a sign-in provider.
If you sign in with Google, GitHub or Facebook, that service tells us your name, email address and profile photo, and we link your Sasonica account to it. We don’t get your password there, and we don’t post anything or read anything else from that account.
Your devices and your server
The Sasonica app pairs with a Sasonica server that you run. When you sign in on the app, your server keeps a record of the device (its name, when it was last seen, and which account signed it in) and a sign-in token so it can keep your account details up to date. That record lives on your server, not with us.
Everything you do in the app — messages, replies, files, speech — goes between the app and your server. sasonica.com is not part of that.
Your server turns replies into speech with Microsoft’s speech service unless you choose another voice, so the text it reads aloud goes there. That is between your server and Microsoft; it doesn’t pass through us. The app and the server send us no analytics, crash reports or usage data.
The hosted relay
Sasonica Shell lets an AI assistant run commands on your own computer. The relay that passes those commands along normally runs in your own Cloudflare account. If you install with the hosted option instead (a free beta, and what the Windows installer uses), South Pen Labs runs it for you at relay.sasonica.com, linked to your Sasonica account.
The hosted relay holds, for your account only:
- The commands your assistant asks your computer to run, and their results. The relay deletes them once they are 30 days old.
- Your machine’s name and when it last connected. A machine that hasn’t connected for 90 days is removed, with everything the relay held for it.
- Your connected assistants and sign-ins, so only the ones you approved on your phone can send commands.
The relay signs each command before your computer will run it, so using it means trusting South Pen Labs with that, as you would any relay that queues commands for you. If you’d rather not, the self-hosted relay keeps all of it in your own Cloudflare account.
The chat on sasonica.com
The chat on the home page answers questions about Sasonica from this site’s pages.
- Your questions and the conversation so far are sent to Anthropic, whose Claude model writes the replies. We don’t store the conversation; it is gone when you close the page.
- Bot check: your first question is checked by Cloudflare Turnstile, which sees your network address and browser. When it passes, a cookie lets you keep asking for 12 hours without another check.
- Limits: to stop abuse we count questions per network address. The counts are kept only in the server’s memory, never written to disk, and are lost whenever it restarts.
- Read aloud: when you play a reply, its text is sent to Microsoft’s speech service to make the audio. If you turn on “Read replies aloud”, that choice is saved in your browser, not with us.
- The microphone uses your browser’s own speech recognition. In Chrome, that sends your voice to Google to turn it into text; other browsers may do it on your device. Nothing you say comes to us until you send it.
Contacting us
If you use the contact form or write to [email protected], we get your name (if you give one), your email address and your message. The form passes Cloudflare Turnstile’s bot check first, and the message is sent to us by email through Cloudflare. We keep it in our mailbox (Gmail, run by Google) for as long as it’s useful for the conversation, and use your address only to reply.
Supporting Sasonica
If you make a contribution on the Support page:
- Stripe takes the payment. Your card details go to Stripe, never to us; Stripe’s own privacy policy applies to them.
- We keep the order: your email address, the amount, the date, the order number, the last four digits and expiry of the card as Stripe reports them, and the supporter licence we made for you. We keep orders for as long as Australian tax law requires (five years), even if you delete your account.
- The supporter licence names your order number, not you.
Emails
We send emails only about your account and your purchases: confirming a new email address, password resets, a note when your email changes, and a receipt when you make a contribution. They are sent through Cloudflare Email Service.
Cookies and browser storage
sasonica.com uses a cookie to keep you signed in to your account, one to remember that you passed the chat’s bot check (12 hours), and one to remember your cookie choices on the account pages (six months). Your browser also remembers whether you turned on “Read replies aloud”. It doesn’t use advertising or analytics cookies.
Logs and backups
Like most websites, our web server logs each request, including your network address, to keep the site running and secure. The account site keeps a short log of recent events too. Each day we back up the account and shop database; backups are kept for up to 30 days, so something you delete can remain in a backup until it ages out.
Who else is involved
- Stripe takes payments on the Support page.
- Cloudflare runs sasonica.com’s network and the hosted relay, checks the chat and contact form for bots, and sends and forwards our emails.
- Anthropic answers questions in the site’s chat.
- Microsoft turns chat replies into speech when you play them.
- Google, if you use the chat’s microphone in Chrome, and as our mail provider when you write to us.
- Google, GitHub and Facebook, only if you choose to sign in with them; their own privacy policies apply to your accounts there.
We share your information with no one else, unless the law requires it.
Keeping and deleting
We keep your account until you delete it. You can delete it yourself: in the Sasonica app (your picture → Edit profile → Delete account) or on your account page at cms.sasonica.com. We email you a link, and the account is deleted as soon as you confirm. Deleting removes your username, email, password and photo, unlinks any Google, GitHub or Facebook sign-in, and removes your machines from the hosted relay with everything it held for them. You can also remove a machine yourself at relay.sasonica.com/account.
To ask what we hold about you, to correct it, or for help deleting, email [email protected]. Records on your own Sasonica server are yours to remove; signing out in the app removes that device.
Changes
If we change this policy we’ll update the date at the top, and for anything significant we’ll email you first.
Contact
South Pen Labs Pty Ltd (ABN 35 696 457 860), Australia
- Privacy and your account: [email protected]
- Anything else: [email protected], or the contact page