Privacy

Yakutsk Private Limited (CIN U52291KA2026PTC219166) runs Saute and is the Data Fiduciary for the personal data in this notice. Registered office: 235, Binnamangala, 13th Cross Road, Indiranagar 2nd Stage, Bengaluru, Karnataka 560038.

This notice covers the Saute apps, saute.one and our concierge service. It is separate from our Terms of Service, and capitalised terms such as Booking and Supplier have the meanings given there. It follows the Digital Personal Data Protection Act, 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

It is available in English and, on request, in any language in the Eighth Schedule to the Constitution of India.

We use each item only for the purpose stated, unless we ask you first.

2.1 Account. Your name and email address from Google or Apple sign-in, the first name you give us if it is different, your phone or WhatsApp number if you add it, and a profile photo if you add one. We never see your Google or Apple password.
Purpose: to create your account and contact you.

2.2 Travel documents. Each traveller’s name as printed on their passport or travel document, its number, the nationality it shows, its expiry date, and the traveller’s date of birth and gender. You can add the people you travel with. Their details are entered by you, so you must have their permission to give them to us for these purposes.
Purpose: to make Bookings. Suppliers and immigration systems require them.

2.3 Trips. Destinations, trip status, briefs, saved places and preferences, including your Saute passport: your bucket list, escape preferences and alter ego.
Purpose: to plan your trips.

2.4 Conversations. Messages, voice notes and files you exchange with your Concierge, and each file’s name, size, type and dimensions. If you share a conversation, who you shared it with and the name shown to them. Saute’s AI Concierge reads your text messages and writes some of our replies (see 5.8).
Purpose: to run the concierge service.

2.5 Payments. Order and payment references, amount, currency, payment method type and status. We never receive your card number, CVV or bank login. The payment aggregator handles them under its own authorisation.
Purpose: to take payments, issue refunds and keep tax records.

2.6 Device and usage. A notification token for each device where you allow notifications, how you use the app, and crash reports. Usage analytics (Mixpanel) and crash reports (Sentry) run from when you first open the app, and are linked to your account ID once you sign in. What the app sends for advertising measurement is in 5.6.
Purpose: to send notifications, and to run, fix and improve Saute.

2.7 Website. What you enter in our forms and the guide you request. Our website analytics are anonymous: they record the pages you view and what you do there, such as sending a request, applying or downloading a guide, the site or campaign link that brought you, your country, and your type of device and browser. They use no cookies and no stored identifier, and our analytics never pass on your IP address. Our host and our database provider keep request logs, including IP addresses, for a short time to keep the site secure.
Purpose: to reply to you, see how the website is used and keep it safe from bots and attacks.

2.8 Setup. What you tell us when you first set up the app: the city you are based in, how many trips you take a year and any trip coming up. Saute’s AI Concierge reads these answers to understand them and writes a short note about you for your Concierge. Only our team sees the note, and it is marked as an AI summary that has not been checked.
Purpose: to introduce you to your Concierge and plan around how you travel.

2.9 Preferences. What you tell us in the chat about how you like to travel, such as food you avoid, places you love and who you travel with. Saute’s AI Concierge notes these from your own messages, and each note records the message it came from and the words you used. Notes it is unsure of wait for our team to check. You can see, change and remove them in the app (You, Preferences). When you remove one there, we stop using it and clear the words you wrote. When you ask us to stop using one, or our team finds it wrong, it is retired: we stop using it, but it stays in our records, with the words it came from, until your account is erased.
Purpose: to tailor our help to how you travel.

2.10 Reports. If you report a message in the app, the reason you pick, any note you add, and our latest message to you at the time.
Purpose: to look into messages you report and improve our replies.

We process your data:

• to provide the service you asked for, using the data you give us for that purpose, including Saute’s AI Concierge, which helps us understand your answers when you set up the app and helps answer your messages in the chat;
• to meet legal obligations, such as keeping tax and accounting records;
• to keep Saute secure and to run, fix and improve it, including fraud prevention, crash reports and usage analytics in the app; and
• to measure our advertising (see 5.6). On iPhone, your advertising identifier is shared only if you allow tracking when the app asks.

Our website’s analytics are anonymous and need no consent (see 2.7).

You can withdraw consent at any time. The app has no switch for analytics or advertising measurement today, so this is how to stop each:

• Advertising identifier on iPhone: in Settings, Privacy & Security, Tracking, turn tracking off for Saute.
• Advertising identifier on Android: in your phone’s settings, under Google and Ads, reset your advertising ID or opt out of ads personalisation.
• Notifications: turn them off for Saute in your phone’s settings.
• Saute’s AI Concierge: ask us at any time, in the chat or at hello@saute.one, to stop using AI for your account. From then on only our team reads and answers your messages, and we stop using the preferences we noted (2.9). You can also ask us to stop using any one of them.
• Usage analytics, crash reports and Meta’s app events (install, app open, sign-up and your first request): these run whenever the app is used. To stop them, stop using the app, or delete your account in the app or by writing to hello@saute.one (see Delete your account).

Withdrawal does not affect processing already carried out.

We do not sell your personal data or share it for others’ advertising.

5.1 Suppliers. Traveller details go to the airline, hotel, operator or intermediary needed to make your Booking. Each is responsible for that data under its own terms and the laws where it operates.

5.2 Forex and insurance partners. If you ask for these, we share your name and contact details, and your travel dates and document details if the partner needs them. Partners provide their service under their own licence and terms, and are responsible for that data.

5.3 Payment aggregator. What it needs to process payments and refunds. It handles card data under its own security standards.

5.4 Service providers. Each handles data only to provide its service to us:

• Supabase, our database and file storage, on servers in Mumbai, India;
• Vercel, which hosts saute.one and checks our website forms for bots;
• Mixpanel, usage analytics, with European Union data residency;
• Sentry, crash reports, with European Union data residency;
• Expo, which delivers push notifications through Apple and Google, and app updates;
• Resend, which sends our emails, such as the welcome email when your application is approved, with European Union data residency;
• Apple and Google, for sign-in and push notifications;
• Meta, for app install measurement (see 5.6);
• Slack, for alerts to our team, such as a new message or application from our website, which carry what you entered, and, when a chat message trips one of our safety checks, a short quote of it with phone numbers and email addresses hidden;
• Anthropic, our AI provider for setup and the chat (see 5.8); and
• Exa, web search for Saute’s AI Concierge, which receives no personal details (see 5.8).

5.5 WhatsApp. If you message us on WhatsApp or join our WhatsApp community, those messages are handled by WhatsApp under Meta’s terms. Community posts are visible to other members.

5.6 Advertising measurement. From when you first open the app, on iPhone and Android, Meta receives four events: the install, each time the app is opened, sign-up when you finish setting up, and your first request to your Concierge. Meta’s software in the app sends basic device details with them, such as the device model, operating system and app version. On Android it also receives your phone’s advertising ID from first launch; you can reset it or opt out of ads personalisation in Android settings. On iPhone it receives your advertising identifier only if you allow tracking. Meta never receives your name, contact details, document details or payment data.

5.7 Legal requests. Where the law or a valid order requires it, or to protect someone’s safety.

5.8 How we use AI. Anthropic, PBC provides Saute’s AI Concierge, which runs on its Claude models. Some of the replies you get from Saute in the chat are written by it.

• Setup: it reads what you type in setup so we can understand your answers, and writes the short note for your Concierge described in 2.8.
• Chat: it reads the text messages in your chat, with your first name, your local time, your current and upcoming trips and Bookings, and your preferences (2.9), so it can answer you, gather the details of a request for our team, and note your preferences. It does not read voice notes, photos or files.
• Web search: for some questions about a place, such as a gym near your hotel, it searches the web through Exa. A search holds only a place, a topic and at most a month, never your name or other personal details.
• People: our team can see every conversation and handles every price, Booking, change, payment and refund. You can ask for a person at any time.

Before what you type in setup or the chat is sent to Anthropic, we remove card, Aadhaar, passport and PAN numbers from it and hide phone numbers and email addresses. The trip, Booking and preference details listed above are sent as they are. Apart from your first name, we never send Anthropic your contact details, your passport details or your account ID. Anthropic processes this data outside India, keeps it only for the limited period its commercial terms allow, and does not use it to train its models. To stop the AI Concierge reading your messages, see section 4.

Every provider that processes data for us is bound by contract to protect it to the standard in this notice.

Your account records and files, including travel documents, are stored in Mumbai. Some data is processed outside India: Booking details sent to Suppliers abroad, website hosting, analytics and crash reports, push notifications, alerts to our team, WhatsApp messages, advertising measurement, and what you type in setup and the chat, which Anthropic processes. We follow any transfer restriction the Government of India notifies.

Our website uses no advertising, analytics or tracking cookies, and its analytics store nothing in your browser. It keeps one small note there for each guide you ask for, holding the date you asked, so we do not ask for your email again. It is not shared or used to profile you. If that changes, we will ask for your consent first and publish a cookie notice.

You can clear this in your browser settings at any time, and the site will still work.

We keep personal data only while we need it for its purpose, or until you withdraw consent, unless the law requires longer. When you delete your account:

• Erased when the 30 days end: your profile and profile photo, sign-in record, travel documents and the travellers you added, setup answers and the note written from them, your preferences (2.9), including any retired, your message reports (2.10), the AI Concierge’s records of your chats and web searches, Saute passport, trips (including drafts, briefs and waitlist status), bookings, saved places, notifications, the notes our team kept about you, and chat files, including voice notes.
• Sign-in records: kept while your account exists, including when and from which IP address you signed in, and erased with it.
• Chat messages: kept 12 months after deletion, to resolve any open refund, claim or dispute, then erased.
• Usage analytics: kept while useful to understand how Saute is used. When your account is erased, we remove your identifier from them and ask Mixpanel to delete your profile and its events.
• A summary without your name or contact details: kept after the erase, to understand why people leave: the reason you gave, the months you joined and left, how many days you were a member, how you got in, whether you finished setup, how many messages you sent, how many trips and bookings you had, your platform and app version, your phone number’s country code and the month you were last active.
• Our team’s alerts: our team’s internal alerts in Slack about you, such as your first name when you join and, when you leave, the reason, any note you wrote, your number of trips and the month you joined, are kept and not erased.
• Website forms: what you send through our website’s forms is kept separately from your account and is not erased with it. Ask us if you want it erased.
• Crash reports: kept by Sentry for up to 90 days.
• Backups: our database provider keeps a daily backup of our database for 7 days, so erased data leaves the backups within 7 days.
• Technical logs: request logs kept by our host and our database provider for a short time, for security.
• Invoices and payment records: kept as long as tax and company law require. We cannot shorten this on request.

You can cancel a deletion within the 30 days by writing to us. After that it is permanent. How to delete your account: Delete your account.

We encrypt personal data in transit and at rest, restrict and log access to it, and enforce row-level access controls in our database. Our service providers must apply equivalent safeguards. No system is completely secure.

If a breach affects your data, we will tell you promptly: what happened, its nature and extent, the likely impact, what you can do, and who to contact. We will report it to the Data Protection Board of India without delay, followed within 72 hours by a detailed report covering the facts, the cause and the steps we have taken.

Saute is for people aged 18 and over. We do not knowingly collect data from anyone under 18, and we delete it if we find we have. Tell our Grievance Officer if you believe this has happened.

You can ask us to:

• give you a summary of your personal data and how we have used it;
• correct, complete or update it;
• erase data we no longer need to keep; and
• let someone you nominate exercise these rights for you.

Email hello@saute.one from the address on your account and tell us which right you are using. We acknowledge within 48 hours with a reference number and resolve within one month. If you are not satisfied, you may complain to the Data Protection Board of India.

Grievance Officer: Mohit Agarwal, Director, Yakutsk Private Limited, 235, Binnamangala, 13th Cross Road, Indiranagar 2nd Stage, Bengaluru, Karnataka 560038. Email: hello@saute.one. We acknowledge within 48 hours and resolve within one month.

We will update this notice as our service changes, and tell you in the app or by email if a change materially affects how we use your data.