Savewhere Privacy Policy

Savewhere is a private saved-items organizer operated by Sehgal Software. Savewhere helps users organize and search items they have saved across services they choose to connect. This policy explains how Savewhere handles information when a user connects an account such as Pinterest, YouTube, or Reddit.

Information Savewhere Collects

When you connect a source account, Savewhere may collect:

• account identifiers returned by the connected platform, such as username, display name, or platform account ID;
• OAuth access tokens and refresh tokens needed to keep the connection working;
• saved-item references such as platform name, item ID, canonical URL, board or playlist name, title, author or channel name, thumbnail URL, timestamps, and short descriptions where the platform API allows access;
• user-created organization data such as notes, tags, custom collections, and Smart Collection results.

Savewhere does not ask for your platform password. Connections use the platform's OAuth authorization flow.

How Savewhere Uses Information

Savewhere uses connected-account information to:

• sync saved items that you authorize Savewhere to access;
• show your saved items in a unified Source Library;
• let you search, filter, organize, and open saved items;
• generate Smart Collections from saved-item metadata when that feature is enabled;
• maintain security, debug issues, and honor disconnection or deletion requests.

Connected Platform Data Handling

For connected platforms such as YouTube, Reddit, and Pinterest, Savewhere uses OAuth to access only the data authorized by the connected user. The app requests read-only access where available, such as YouTube playlist data, Reddit saved-item data, and Pinterest account, board, and pin data through official platform API scopes.

Savewhere stores references and limited metadata rather than copying full third-party content. Full content remains on the original source platform.

Tokens and Security

OAuth tokens are stored on the backend and encrypted before being persisted. Tokens are not exposed to browser JavaScript. Local development credentials are stored in environment variables and should not be committed to source control.

AI and Smart Collections

Smart Collections are generated from saved-item metadata and user-owned organization data. Savewhere is designed so AI enrichment, prompts, categorization logic, embeddings, and ranking run on the backend rather than in client-side JavaScript.

Savewhere does not sell connected-account data and does not use connected-account data to train third-party commercial AI models.

Data Sharing

Savewhere does not sell personal data. Savewhere only sends requests to connected platforms as needed to provide the service the user requested. If hosted infrastructure, databases, or model services are used in the future, they will be used only to operate Savewhere and protect user data.

Data Retention and Deletion

Users can disconnect a source account. When a source account is disconnected, Savewhere removes the local connection state and associated saved-item references for that source account. If the source platform supports token revocation through its API, Savewhere attempts to revoke the token as part of disconnection.

Contact

For privacy questions or data deletion requests, contact Savewhere at privacy@sehgalsoftware.com.

Changes

This policy may be updated as Savewhere evolves. Material changes will be reflected on this page before public launch or production use.