# Security

> How Just Say It protects a conversation, in plain terms — and how to tell us about a problem.

## What you can count on

- Everything between your browser and the service is encrypted in transit.
- Recordings are kept in access-controlled storage in the United States, readable by the service alone; no sound file of a conversation is stored — the microphone is transcribed as it streams (a voice sample someone records for a film is kept until they delete it).
- Payment details never reach our systems; plans and cards are handled by ELAV8’s billing service.
- Sign-in is through your ELAV8 account; a room is entered by invitation, through its own link under the host’s setting, or by knocking and being admitted by the host.
- No third-party script runs on justsayit.ai’s pages — no analytics, no tag managers; the product loads one, the human check on the trial door, from our network provider — and our logs carry codes and counts, never a transcript.
- When the product itself fails, a report goes to an error-reporting service through our own server: the kind of failure, where in our code it happened, the version and the kind of browser or server — never what was said, written or shown, never who was there, never a network address.

The [Privacy Policy](https://justsayit.ai/privacy) says what is collected, who handles it and for how long. A security review by a third party has not been done yet; this page will say so until it has.

## Reporting a problem

Write to [contact@elav8.ai](mailto:contact@elav8.ai) with “Security” in the subject: what you found, how to reproduce it, and how to reach you. A person reads it. There is no bug bounty; there is a thank-you, by name if you want it, on this page.

Last updated 2026-10-17. [Just Say It](https://justsayit.ai/) · [llms.txt](https://justsayit.ai/llms.txt)