Privacy at Sabí.
Updated 19 October 2026. This describes the current trial, not a certification of GDPR compliance.
What we collect
There are no accounts. We do not ask you to sign in, and we do not keep a history of your runs. During a trial we handle the repository link, the selected source files or ZIP excerpts you provide, your change request, the docs Sabí writes from them, and your feedback answer if you give one. We also count your runs per day to enforce the free limits.
If you ask for a demo, we collect your name, work email, company and message. Pricing and security forms collect your work email.
Only selected code is sent for writing documentation. Credential-like text is screened, but this is not anonymisation. Do not submit personal or sensitive information unless you are authorised to share it.
Where it goes
- Anthropic is the AI provider. It receives the selected code and your request to write the docs. This does not establish zero provider retention or exclude all provider logging.
- GitHub supplies public repository content when you scan a link. Private repositories are not read.
- Notion receives the exact docs you reviewed and approved, and only when you choose to publish. They go to a public shared demo wiki. Anyone with the link can read them, so do not publish anything confidential. You can instead connect your own Notion for that visit and publish to a page you choose there. Those pages follow your own Notion sharing settings, and Sabí does not delete them.
- HubSpot receives your name, email, company and message when you send a form. This is for answering your request, not for a newsletter. If you accepted its cookie banner, HubSpot also receives the pages you visit and links them to your email once you send a form.
- Neon stores demo, pricing and security form submissions, and the daily usage counts. Vercel hosts the site and may keep its own request logs.
After your visit
The docs Sabí writes live in your browser for that visit only. When you leave, they are gone from your side, and Sabí cannot show them to you again.
The server keeps a copy for 24 hours, tied to your visitor cookie. It exists only so that the exact docs you reviewed are the ones that get published. It is not shown again, and it is removed after 24 hours.
Pages published to the shared demo wiki are deleted after 48 hours. Cleanup moves them to the Notion trash. That is not a promise of permanent erasure on Notion's side. Form submissions in HubSpot and Neon stay until we delete them, and provider logs and backups need a separate retention review.
Cookies and browser storage
A seven-day encrypted visitor cookie recognises your browser, enforces the free-try limits and links your reviewed docs to your publish request. It is not used for advertising. The site font is served by Sabí, with no Google Fonts request.
The live site loads HubSpot's tracking script, so your browser contacts HubSpot when you visit. HubSpot's own cookie banner asks you first. If you accept, HubSpot sets cookies (hubspotutk and a few others starting __hs) to count which pages you read and to link those visits to a demo request, using the email you send. If you decline, HubSpot sets no tracking cookies and your page views are not linked to you, though it may still set cookies it needs to work. You can change your choice any time with Cookie settings in the footer.
If you connect your own Notion, a second encrypted cookie holds the access Notion gives Sabí. It is a session cookie: it has no expiry date, so your browser drops it when your visit ends, and it stops working after 12 hours either way. Scripts on the page cannot read it, and it is never saved in our database. Disconnecting removes it at once. It does not delete pages already published, and you can also remove Sabí's access in your Notion settings.
We do not run an advertising tag. Hosting and connected providers may have their own storage and logs, so production checks and legal exemption decisions remain necessary.
Access, correction and erasure
With no accounts, there is no data page to sign in to. If you sent a form and want your details corrected or removed from HubSpot, Neon or the email we received, ask the Sabí founder. Requests are handled by hand, so they are not instant. Pages already published to the demo wiki delete themselves after 48 hours.
Information still under review
The legal controller identity and privacy contact, lawful bases, international-transfer safeguards, provider retention, backup deletion, how long HubSpot keeps page view data, the legal treatment of both cookies and the applicable supervisory authority are awaiting confirmation by the Sabí founder. This page must be completed before it is treated as a full statutory privacy notice. No consent checkbox substitutes for those decisions.
