Security

What you can count on

• Everything between your browser and the service is encrypted in transit.
• Recordings are kept in access-controlled storage in the United States, readable by the service alone; no sound file of a conversation is stored — the microphone is transcribed as it streams (a voice sample someone records for a film is kept until they delete it).
• Payment details never reach our systems; plans and cards are handled by ELAV8’s billing service.
• Sign-in is through your ELAV8 account; a room is entered by invitation, through its own link under the host’s setting, or by knocking and being admitted by the host.
• No third-party script runs on justsayit.ai’s pages — no analytics, no tag managers; the product loads one, the human check on the trial door, from our network provider — and our logs carry codes and counts, never a transcript.
• When the product itself fails, a report goes to an error-reporting service through our own server: the kind of failure, where in our code it happened, the version and the kind of browser or server — never what was said, written or shown, never who was there, never a network address.

The Privacy Policy says what is collected, who handles it and for how long. A security review by a third party has not been done yet; this page will say so until it has.

Reporting a problem

Write to [email protected] with “Security” in the subject: what you found, how to reproduce it, and how to reach you. A person reads it. There is no bug bounty; there is a thank-you, by name if you want it, on this page.