Say & Sell
Privacy Policy
Last updated 11 August 2026
This policy explains what Say & Sell collects, why, and what we do with it.Say & Sell is operated by Say & Sell Ltd (company number 17392474) registered in England and Wales at 52 Whirlow Grove, Sheffield, United Kingdom, S11 9NR. If anything here is unclear, email hello@sayandsell.com and a person will answer.
One platform, several names
Say & Sell is the platform. Some people reach it under a different name, because coaches and creators run it for their own audiences under their own branding, for example Growth AI inside the Growth Accelerator. Whichever name you arrived under, the service is the same one described here and it is operated by Say & Sell Ltd.
Who this is for
Say & Sell is a business tool. Our customers are the coaches and creators who sign in and build pages with it. This policy covers both them and the visitors who land on a page one of them has published.
What we collect
If you are a customer
- Your name, email address and the brand details you enter.
- The pages, offers, prices and emails you create.
- Which accounts you have connected, and the access tokens for them.
- Basic usage records, so we can bill fairly and see what is breaking.
If you are a visitor to a customer’s page
- The name and email address you type into a form, which go to the customer whose page you are on.
- Anonymous page view counts. We do not build an advertising profile of you.
Google user data
You can connect a Google account so that Say & Sell can send email as you and manage bookings on your calendar. Connecting is optional and the product works without it. We request the narrowest permissions that make those features work, and here is every one of them, in plain terms.
| Permission | What we do with it |
|---|---|
gmail.send | Send the emails you have written, to the people who opted in or bought from you, from your own address. This permission cannot read your inbox, and we do not have any permission that can. We never read, search, store or delete your existing email. |
calendar.freebusy | Check which times you are already busy, so your booking page never offers a slot you cannot take. We receive only busy and free time ranges. We do not receive the titles, guests, locations or notes of your existing events. |
calendar.events | Create a calendar event when somebody books a call with you, including a video link, and update or cancel that event if the booking changes. |
Limited Use. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not use Google user data to serve advertising, we do not sell it, we do not transfer it to others except as needed to provide the features above or where the law requires it, and we do not allow humans to read it except with your explicit consent, to resolve a specific problem you have reported to us, for security purposes, or where the law requires it.
We do not use Google user data to train AI models. The product uses AI to help you write pages and emails. That AI is given what you type into Say & Sell. It is never given your inbox, your existing emails or the contents of your calendar.
Instagram user data
You can connect an Instagram professional account so that Say & Sell can show you how your posts are performing, and help you handle the messages and comments they bring in. Connecting is optional and the product works without it. As with Google, we request the narrowest permissions that make those features work, and here is every one of them.
| Permission | What we do with it |
|---|---|
instagram_business_basic | Read your profile, so the hub knows whose account it is showing: your username, name, profile picture, follower count, biography and account type. Also read your own posts and their details, such as the caption, the image or video, the link to it, when it went out, and how many likes and comments it has. |
instagram_business_manage_insights | Read the numbers Instagram keeps on your own account and posts: reach, views, saves, shares, follower growth, and the audience breakdowns Instagram provides. This is what fills in your analytics. |
instagram_business_manage_messages | Read the direct messages sent to your account and send replies from it, so you can answer people asking about your offers without leaving the hub, and so an automation you have set up can send the first reply for you. We only ever act on the account you connected. |
instagram_business_manage_comments | Read comments on your posts and mentions of your account, and reply to them, so that somebody commenting a keyword can be turned into a direct message conversation. |
What we deliberately do not ask for. We do not request permission to publish posts, so Say & Sell cannot post to your Instagram grid, stories or reels. We do not request any Facebook Page or advertising permissions. We do not read the accounts of people who message or comment beyond the public username and profile picture Instagram attaches to their message.
Your Instagram data is yours alone.It is shown only to you inside your own hub. We do not sell it, we do not share it with other members, we do not use it to target advertising, and we do not pool it with anyone else’s data.
AI and your messages. When you ask Say & Sellto draft a reply to a direct message or a comment, the text of that message and your brand details are sent to Anthropic’s Claude to write the draft. Nothing is sent to Anthropic unless you have asked for a draft, and your Instagram data is never used to train AI models, ours or anyone else’s.
How your connections are protected
Access and refresh tokens are encrypted before they are stored, using AES-256-GCM, with the key held separately from the database. They are decrypted only in memory, at the moment we send an email, write a calendar event or read the Instagram data you have asked to see. You can disconnect at any time from the Offers page in the hub, which deletes the stored tokens.
You can also revoke our access directly with the provider, without going through us at all. For Google, at myaccount.google.com/permissions. For Instagram, in the Instagram app under Settings, then Website permissions, then Apps and websites. Doing it that way stops our access immediately and we delete the stored token when Instagram tells us you have revoked it.
Who we share data with
We do not sell your data. We use a small number of providers to run the service:
- Vercel, which hosts the application.
- Supabase, which stores the database.
- Clerk, which handles signing in.
- Stripe, which processes payments. Card details go to Stripe and never reach us.
- Anthropic, which provides the AI that helps write your pages.
Each of these acts on our instructions, for the purpose of running the service, and nothing else.
How long we keep it
We keep your account and the pages you have built for as long as your account is open. Ask us to close it and we delete your content within 30 days, other than records we are legally required to retain, such as payment records for tax. Disconnecting a Google or Instagram account deletes its tokens immediately. Instagram posts, insights, messages and comments we have cached to show you are deleted when you disconnect, and cached items older than 90 days are cleared automatically in any case.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Email hello@sayandsell.com and we will act within 30 days. If you are in the UK or the EU and you think we have got something wrong, you can also complain to your data protection regulator.
Children
Say & Sell is a business tool and is not intended for anyone under 18.
Changes
If we change how we handle your data we will update this page and change the date at the top. If the change is significant we will tell you by email rather than expecting you to notice.