Legal
Privacy notice
Saiela exists to keep personal data out of places it shouldn't go, and we hold ourselves to the same standard. This notice explains what we collect, why, and what you can ask us to do.
Last updated 22 October 2026
Who we are
Saiela is provided by SimpleKPI Ltd, registered in England and Wales with company number 06191007, at 66 Paul Street, London EC2A 4NA. For the personal data described in this notice we are the controller. We're registered with the Information Commission (ICO) under number ZB902250.
We haven't appointed a formal data protection officer. Stuart Kinsey, co-founder, is responsible for data protection at Saiela. Contact him through our contact form, choosing "Privacy and data requests", or write to him at SimpleKPI Ltd, 66 Paul Street, London EC2A 4NA.
The short version
- This website uses analytics cookies only if you accept them, never advertising cookies, and we don't track you across other sites.
- Saiela's browser extension checks prompts on your computer. The text of prompts and answers is never sent to us.
- We collect what we need to run your account and bill you, and nothing more.
- We don't sell personal data.
What we collect and why
| When | What we collect | Why, and our lawful basis |
|---|---|---|
| Website analytics, only if you accept | The pages you visit, how you found us, your device and browser, and an approximate location from your IP address, collected by Google Analytics cookies. | To see which pages help people, and improve the website. Consent, which you can withdraw at any time from "Cookie settings" at the bottom of every page. |
| Visiting this website | Your IP address, browser and device type, the pages you request and when, recorded in our hosting provider's server logs. | To deliver the website and keep it secure. Legitimate interests: running a secure website. |
| Creating and running an account | Your name, work email address, organisation, role and sign-in details. | To provide Saiela to your organisation and let you sign in. Contract, or legitimate interests where you use Saiela for your employer. |
| Billing | Billing contact, address, VAT number and payment status. Card details go straight to our payment provider; we never see the full number. | To take payment and keep the records tax law requires. Contract and legal obligation. |
| Support and service messages | What you tell us when you contact us, and records of our replies. | To help you and to tell you about changes to the service, security issues and your account. Contract and legitimate interests. |
| Product news | Your name and work email address. | To tell you about new Saiela features. Every email has a link to unsubscribe. Legitimate interests. You can object at any time. |
Where we rely on legitimate interests, we've weighed our interests against yours. You can ask us for details, and you can object at any time.
Data we process for customers
When an organisation uses Saiela, it decides how Saiela records its staff's use of AI tools. For that data the organisation is the controller and we are its processor, acting only on its instructions under our data processing terms.
That data is metadata: what kind of personal data was found in a prompt, which AI tool it was heading for, what Saiela did, when, and which team, with each person shown as a pseudonym. It never includes the text of prompts or answers, or the personal details that were swapped for placeholders. It's kept in a UK data region.
If you use Saiela at work and have a question about this data, ask your employer first. They can ask us to help.
Who we share it with
We share personal data only with suppliers who help us run Saiela, under contracts that protect it:
- hosting: Cloudflare, for this website, and Microsoft Azure, for the Saiela console (in Azure's UK South region);
- payments: Paddle, which sells Team to you as our reseller (the merchant of record) and handles your payment details under its own privacy notice;
- email: Amazon Web Services, for sign-in codes, alerts and other account emails;
- network security: Cloudflare, in front of the console;
- the console's assistant: Microsoft Azure OpenAI, in Microsoft Foundry;
- website analytics: Google Analytics, provided by Google, only if you accept analytics cookies.
- The full list, for the data we process for customers, is on our sub-processors page.
We may also share personal data with our professional advisers, with a buyer if Saiela's business is sold, and with authorities when the law requires it.
Transfers outside the UK
Your organisation's Saiela account data is stored in a UK data region (Microsoft Azure, UK South). Some suppliers process personal data outside the UK: Cloudflare runs a global network, and the console's assistant may generate its answers in any Azure region. Google Analytics, if you accept it, processes data in the United States (UK-US data bridge). When a supplier processes personal data outside the UK, we make sure the transfer is protected as UK data protection law requires, for example because UK regulations recognise the country's protection as adequate, or by using the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. Ask us for a copy of the safeguards we use.
How long we keep it
- Account details: while your account is open, and for 12 months after it closes in case you return or there's a dispute.
- Billing records: for six years, as tax law requires.
- Support messages: for two years after the conversation ends.
- Website server logs: for 30 days, unless we need them to investigate a security issue.
- Website analytics: for 14 months in Google Analytics, then deleted.
- Customer data we process for organisations: for the retention period each organisation sets, then deleted.
What you have to give us
You don't have to give us any personal data to read this website. To use Saiela we need your name and work email address, and to pay for Team we need billing details. Without them we can't provide the service.
We don't make decisions about you based only on automated processing.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of your personal data;
- correct it if it's wrong;
- delete it, or restrict how we use it;
- stop using it for legitimate interests or for marketing;
- give it to you, or another organisation, in a portable format.
Use our contact form, choosing "Privacy and data requests". We'll reply within one month, and we may need to confirm who you are first. Some rights have exceptions, and we'll explain if one applies.
Complaints
If you're unhappy with how we've handled your personal data, please tell us first through our contact form so we can try to put it right. We'll acknowledge your complaint within 30 days.
If you're still unhappy, you can complain to the Information Commission (the ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.
Cookies, children and changes
Cookies. This website sets Google Analytics cookies only if you accept them. See our cookie notice for what we store in your browser and why.
Children. Saiela is a service for businesses and isn't meant for children.
Changes. We'll update this notice when how we use personal data changes, and change the date at the top. If a change matters to you, we'll tell you directly.