Privacy policy

SayCandid helps businesses collect short video reviews from their customers and show them on their website. This page explains what we collect, why, and what you can ask us to do with it. We keep it short and plain.

Who we are

SayCandid is run by Three Chapter Media, Lithuania. Questions or requests about your data: write to us through our contact page.

Two kinds of people use SayCandid

• Businesses with a SayCandid account, who send links and publish videos.
• Customers who open a business’s link and record a video for it.

For customers’ videos, the business decides what is recorded, what is approved and where it is shown; we store and process the videos for the business and don’t review them ourselves. For accounts and our own website, we decide, and we are responsible.

What we collect

• Account: your email, your password (stored only as a secure hash), or, if you continue with Google, the name and email Google shares with us. Your business name and logo.
• Videos and what customers type: the recording, the name, role and company they enter, their star rating, and a record of the consent they gave (the exact text and when).
• Email invites: if a business asks us to email you a link to record a video, the email address and name it gave us, when we emailed you, whether you opened the link or recorded, and whether you unsubscribed. The business is responsible for having your permission to email you.
• Made from videos: a text transcript and captions, and a short AI summary for the business.
• Visits to our website: pages viewed, clicks, the device and browser used, roughly where from, and which ad or link brought you here (see “Cookies, analytics and ads” below).
• Reports: if you report a video, what you tell us (the reason, your message, your email and name if you give it), which video and moment it’s about, and the page you saw it on.
• Security: a scrambled (hashed) form of the IP address, kept for a short time to stop abuse.

Why we use it

• To run the service you signed up for: your account, your links, storing and showing your videos.
• To send account emails (confirming your email, resetting a password, telling you a new video arrived).
• To send the review requests and reminders a business asks us to send its customers, and to stop them as soon as someone records, unsubscribes or the emails don’t arrive.
• To understand how people find and use our website, improve it, and measure and improve our advertising.
• To handle reports about videos, as the law requires of us, and to tell you what we decided.
• To keep SayCandid safe: limits against spam and misuse.

We never sell your data and never use your videos to advertise SayCandid without asking.

Cookies, analytics and ads

Some cookies are needed for SayCandid to work, for example the one that keeps you signed in. With your consent, we also use analytics and advertising tools, such as Google Analytics, Google Ads, the Meta pixel and similar tools from other social networks, to count visits, see how the site is used, and measure which ads lead to sign-ups. These providers may combine this with other information they hold about you, under their own privacy policies. You can say no, or change your mind at any time, and the site keeps working either way.

These tools run on our own website only. They are never added to the recording pages your customers open or to the video widget on a business’s website.

Who else handles data

We use a small number of carefully chosen service providers to host SayCandid, store videos, create captions and summaries, send emails and keep backups. They may only use the data to do that job for us, under data-processing agreements. Our main database and video storage are in the EU. Where a provider handles data outside the EU, it is protected by the safeguards the law requires, such as the EU’s standard contractual clauses.

How long we keep it

Account data stays while your account exists. Videos stay until the business deletes them or its workspace; deleted files are then removed automatically. Backups are kept for a short time only and then replaced. Reports are kept only as long as we need them to handle the report and any questions about our decision. Email invites are deleted with the request they belong to, and after 180 days at most. If you unsubscribe, or emails to you bounce or are marked as spam, we keep your address on a do-not-email list so it is never emailed again. Website analytics and advertising data is kept only as long as it’s useful for the purposes above.

Your rights

You can ask to see, correct or delete your data, or withdraw a consent you gave. Every email invite has an unsubscribe link that works with one click. Customers who recorded a video can ask the business, or write to us and we’ll pass it on and help. If you think we got something wrong, you can also complain to the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt).

Changes

If we change this policy in a way that matters, we’ll update the date above and tell account holders by email.