Sabi — Privacy Policy & Terms of Service

Privacy Policy

1. Information We Collect

Information you provide

• Contact and account details: name, email, phone number, business information you share during signup or activation.
• Payment information: processed by our payment processor, Stripe. Card details are tokenized in your browser and passed directly to Stripe. We do not see or store full card numbers.
• Messages and content: texts you send Sabi, voice messages (transcribed), documents you upload to your knowledge base, and support requests.

Information from connected accounts

When you choose to connect third-party accounts (for example Gmail, Google Calendar, Zoom, Slack, Stripe, QuickBooks, iCloud, or social platforms), Sabi accesses data from those accounts under the permissions you grant, solely to provide the Service. Depending on which connections and scopes you approve, this can include email content, calendar events, transcripts, files, transactions, and contacts.

You can revoke a connection at any time from your Sabi dashboard or directly with the third-party provider.

Information from the Sabi iPhone app

If you install the Sabi iPhone app and allow access, the app uploads data from your iPhone to Sabi's servers: Apple Health data (steps, distance, active energy, workouts, sleep, heart rate, resting heart rate, heart rate variability, body weight, and nutrition), Reminders (list name, title, notes, due date, and completion state), and Contacts (names, organizations, phone numbers, and email addresses). Before each upload the app tells you what it will upload and asks for your consent, and iOS asks you to allow access as well. Sabi uses this data only to answer your requests over text and to keep your phone up to date. It is never used for advertising, never sold, and never shared with third parties. You can change access at any time in iOS Settings, and deleting your Sabi account deletes the uploaded copy. Details: app.meetsabi.com/privacy.

Information collected automatically

• Usage data: features used, tasks run, message counts, credit consumption.
• Device and log data: IP address, device type, browser, pages viewed, and Sabi audit logs (every tool call your assistant makes is recorded).
• Cookies and similar technologies: see the Cookie Notice below.

2. How We Use Information

We use information to:

• Provide and operate Sabi, including running the tasks you request or schedule.
• Power Sabi's persistent memory and personalization, including background processing of your connected data ("Night Shift") to prepare summaries, drafts, suggestions, and reminders for you.
• Process payments, subscriptions, and refunds through Stripe.
• Provide support and respond to bug reports and feature requests.
• Send service communications by text and email, and, with your consent where required, marketing communications (opt out anytime via STOP or unsubscribe).
• Monitor usage, prevent fraud and abuse, detect prompt-injection or webhook-forgery attempts, and enforce these Terms.
• Improve Sabi, including reviewing de-identified or aggregated usage patterns.
• Comply with legal obligations.

AI processing. Your messages and connected data are processed by third-party AI model providers under agreements that restrict their use of your data to providing services to us. We do not permit our AI providers to use your identifiable content to train their publicly available models.

Google user data. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide and improve user-facing features of Sabi that you request, is not used for advertising, and is not transferred except as necessary to provide those features, for security, or to comply with law.

3. How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only with:

• Service providers and processors:
  • AI model providers that generate Sabi's responses.
  • Supabase — managed Postgres database (customer data is isolated per-customer via Row Level Security enforced at the database layer, not just in app code).
  • DigitalOcean — application hosting.
  • Stripe — payments (PCI DSS Level 1; Sabi never sees or stores your card).
  • Secure connection platforms — SOC 2 certified providers such as Pipedream and Composio that broker your third-party account authorizations via OAuth without exposing your passwords to us. Tokens are held by those platforms; we reference your connections by ID.
  • Messaging, analytics, and support tooling — each bound to use data only to provide services to us.
• Third-party services you connect: when Sabi performs actions you direct (for example, creating a calendar event or drafting an email in your inbox).
• Professional advisors and authorities: where required by law, to protect rights and safety, or in connection with a corporate transaction (with notice where required).
• With your direction or consent: for example, testimonials you approve.

4. Security

We use administrative, technical, and physical safeguards appropriate to the nature of the data. Highlights:

• Data isolation. Every customer's data is walled off at the database level via Row Level Security in Supabase. The database itself refuses to hand over anyone else's data on every query, independent of application code.
• OAuth-first credentials. For Gmail, Google Calendar, and most other tools, Sabi connects through OAuth via managed-auth platforms. We do not see or store your passwords. App passwords for services like iCloud are encrypted in Supabase Vault with authenticated encryption (libsodium). API keys for the small number of services that only offer them are stored server-side with access restricted to the service that runs your requests.
• Secret scrubbing. If you paste an API key or credential into a message to Sabi, our system scrubs it from the transcript before storage and is designed to fail closed (redact defensively if the scrubber cannot confirm the message is clean).
• Approval gate for outbound actions. By default, Sabi will not send an email, reply to a message, or post on your behalf until you approve it. The gate is enforced by deterministic code outside the AI, not by instructing the model.
• Prompt-injection defenses. Your saved instructions are wrapped in provenance markers so the AI can distinguish what came from you versus what came from third-party content it reads. External content is treated as data, not commands.
• Least-privilege agent design. Sabi is a set of specialists (email, calendar, etc.) routed by a parent controller. Each specialist only has the tools it needs, so a compromise in one path is contained.
• Signed webhooks and rate limiting. Inbound events from Stripe, iMessage, Slack, and other systems are cryptographically signature-verified before Sabi acts on them. Public endpoints are rate-limited.
• Encryption in transit and at rest. TLS is enforced everywhere. Customer data is stored encrypted. Production secrets are stored as encrypted environment variables on DigitalOcean and are not committed to code.
• Full audit trail. Every action Sabi takes is logged — what she read, every tool call, and why the run stopped.
• Break-glass admin access. Production access is limited to a small, named team. Access to a user's Sabi memories requires a break-glass grant with a written reason, logged to a specific person, and expiring after one hour.

Compliance posture. Sabi is built on SOC 2-compliant infrastructure (Supabase, Stripe, DigitalOcean). Sabi's own SOC 2 Type I audit is in preparation; we will publish attestation here when complete. We are not currently certified for HIPAA or ISO 27001. If your business requires formal security documentation (DPA, sub-processor list, vendor security questionnaire), contact us via the Sabi support page.

No system is 100% secure, and you use the Service at your own risk. Notify us immediately of any suspected unauthorized access.

5. Your Choices and Rights

• Messaging: reply STOP to opt out of texts (this limits or disables Sabi, since text is her primary interface); reply HELP for help.
• Marketing email: use the unsubscribe link in any message.
• Connections: revoke any connected account from your Sabi dashboard, or directly with the provider, at any time.
• Memory: view and delete Sabi's stored memories from your dashboard.
• Export: export your Sabi data (including memories and knowledge base) from the dashboard or by request.
• Deletion: request deletion of your account and associated personal information via the Sabi support page.
• Cookies: manage via the choices in the Cookie Notice below.

California residents (CCPA/CPRA): You have the right to know, access, correct, and delete personal information we hold about you, the right to opt out of "sale" or "sharing" (we do not sell or share as defined), the right to limit use of sensitive personal information (we use it only to provide the Service), and the right not to be discriminated against for exercising your rights. Submit requests via the Sabi support page with "Privacy Request" in the subject. We will verify your identity before responding and respond within the timeframes required by law. You may use an authorized agent as permitted by law.

Residents of other states with comprehensive privacy laws (including Colorado, Connecticut, Texas, Utah, Virginia, and others) have similar rights and may use the same contact to exercise them, including the right to appeal a refusal.

6. Data Retention

We retain personal information for as long as your Sabi account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Message logs, audit logs, and memories are retained while your account is active unless you delete them. Upon verified deletion requests, we delete or de-identify personal information except where retention is required by law (for example, payment records).

7. Children

Sabi is for adults 18 and older. We do not knowingly collect personal information from children under 18. If you believe a child has provided us information, contact us and we will delete it.

8. International Users

We operate from the United States and process data in the United States. If you use Sabi from outside the U.S., you consent to processing in the U.S., where laws may differ from your jurisdiction.

9. Changes to This Policy

We will post updates here with a new effective date and, for material changes, provide additional notice (for example by email or text). Continued use of Sabi after changes take effect constitutes acceptance.

10. Contact

HLDFST INC
12636 High Bluff Drive Suite 400
San Diego, CA 92130 US

Support: https://meetsabi.com/support

Cookie Notice

Effective Date: August 25, 2026

We and our providers use cookies, pixels, and similar technologies on meetsabi.com and app.meetsabi.com.

Types we use

• Strictly necessary: required for the site, dashboard, and checkout to function (always on).
• Analytics and performance: help us understand site usage (for example, Google Tag Manager and analytics tags).
• Advertising: measure and improve our ad campaigns (for example, Meta Pixel and similar tags), which may involve sharing limited identifiers with ad platforms.
• Functional: remember preferences and improve your experience.

Your choices

• Use the cookie preferences control on our site (where shown) to accept or decline non-essential cookies.
• Adjust your browser settings to block or delete cookies.
• Opt out of interest-based advertising via industry tools such as aboutads.info/choices and optout.networkadvertising.org.
• Where required by your state's law, you can opt out of targeted advertising via the Sabi support page with "Cookie Opt-Out" in the subject, and we honor the Global Privacy Control (GPC) signal where legally required.

Terms of Service

By accessing or using Sabi, you agree to these Terms. If you do not agree, do not use Sabi.

1. Eligibility

You must be at least 18 years old (or the age of majority in your jurisdiction, whichever is greater) to use Sabi. By using Sabi, you represent that you meet this requirement and have the legal capacity to enter into these Terms. Sabi is intended for business use by entrepreneurs and business owners and is not directed to children.

2. Accounts and Registration

You agree to provide accurate, current information when creating an account or activating Sabi, and to keep it updated. You are responsible for all activity under your account and phone number. Notify us immediately via the Sabi support page of any unauthorized use.

3. What Sabi Is

Sabi is an AI-powered assistant service accessed primarily by text message (SMS/iMessage) and through a web dashboard at app.meetsabi.com. Sabi can, at your direction:

• Draft communications (email, texts, social posts, and more).
• Manage tasks, reminders, and calendar events.
• Analyze information, generate content and images, and produce reports (for example, PDFs, P&L snapshots).
• Interact with third-party services you choose to connect.

4. Text Messaging Consent

By texting Sabi's phone number or providing your phone number to activate Sabi, you consent to receive automated and AI-generated text messages from Sabi at that number, including service messages, task outputs, reminders, and account notifications.

• Message frequency varies based on your usage and configured tasks.
• Message and data rates may apply.
• Consent to marketing messages is not a condition of purchase.
• Reply STOP to opt out of messages or HELP for help.
• Opting out will limit or disable the Service, because texting is Sabi's primary interface.
• Sabi's phone number may change from time to time. We will notify active users of number changes.

5. AI-Generated Output

Sabi uses artificial intelligence, including large language models provided by third parties. AI output can be inaccurate, incomplete, or inappropriate despite our safeguards. You agree that:

• You are responsible for reviewing output before relying on it or sending it to others.
• Sabi does not provide legal, tax, financial, accounting, medical, or other professional advice. Output on such topics is informational only.
• Where Sabi drafts communications (such as emails), the default mode requires your approval before Sabi sends them. The approval gate is enforced by deterministic code, not by prompt instructions. If you enable or instruct any autonomous sending or posting, you accept responsibility for those communications as your own.
• We do not guarantee any business outcome, revenue result, or time savings from use of Sabi.

6. Connected Accounts and Permissions

You may connect third-party accounts (for example, email, calendar, payment, project management, and social platforms) to Sabi. Connections are made through secure third-party connection platforms and use permission-based OAuth authorizations that you grant and may revoke at any time. By connecting an account, you authorize Sabi to access and act on data from that account as needed to perform tasks you request or schedule, including background processing (the "Night Shift") that reviews connected data to prepare summaries, suggestions, and memory.

You represent that you have the right to connect each account and to grant this access, including where the account belongs to your business. Your use of connected third-party services remains subject to those services' own terms.

Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

7. Memory and Knowledge Base

Sabi maintains a persistent memory of information learned from your interactions and connected accounts to provide the Service. You can:

• View and delete memories in the dashboard.
• Upload documents to your knowledge base.
• Export your data (memories and knowledge base) from the dashboard or by request.

See the Privacy Policy for details on retention and deletion.

8. One User Per Instance

Each Sabi instance is licensed to one individual user and one phone number. You may not share access to your instance or permit others to issue instructions to it, except through features we provide for that purpose (such as future team or group features).

9. Beta Service

Sabi is currently offered in beta. Features may change, be interrupted, or be discontinued. Connections may fail and errors may occur. We provide the beta Service "as is" and rely on user feedback and bug reports to improve it. Sections 5, 15, and 16 apply fully to the beta Service.

10. Fair Use

Plans described as "unlimited" are subject to reasonable fair use. We may contact you to discuss usage that materially exceeds ordinary individual business use or that indicates automated abuse, resale, or use inconsistent with these Terms, and we may throttle or suspend accounts engaged in abuse.

11. Subscriptions, Billing, and Refunds

11.1 Pricing and Billing

Current pricing is presented at checkout. Subscriptions renew automatically at the then-applicable rate for your plan until canceled. You authorize us and our payment processor (Stripe) to charge your payment method on each renewal.

11.2 Founding Member Rate Lock

If you purchase a plan designated as a founding member or rate-locked plan, your recurring rate will not increase for as long as your subscription remains continuously active. If your subscription is canceled, lapses, or is terminated for breach, the rate lock ends, and any future subscription will be at then-current pricing. Rate locks apply to the recurring subscription price only, not to separate products or services.

11.3 Cancellation

You may cancel your Sabi subscription at any time from your dashboard or by contacting our team via the Sabi support page. When you cancel:

• You will not be charged again at renewal.
• You keep access to Sabi through the end of your current paid period (monthly, annual, or otherwise).
• Except as expressly stated in Section 11.4, we do not issue prorated refunds for unused time in the current period, and delivered one-time bonuses and services already rendered (for example, a completed strategy call) are not refundable.

11.4 Legacy "Sabi Earns Her Keep" Guarantee (Founding Member 6-Month Specials)

This guarantee applies only to Founding Member 6-month special subscriptions purchased on or before Friday, August 28, 2026. It does not apply to any other plan, and it does not apply to subscriptions purchased after that date.

If you hold a qualifying subscription, you may cancel at any time by contacting our team via the Sabi support page. Upon cancellation under this guarantee, we will refund the prorated value of the unused days remaining in your current prepaid period, calculated to the day. Delivered one-time bonuses and services already rendered (for example, a completed strategy call) are not separately refundable. This guarantee is our exclusive refund remedy for qualifying subscriptions.

11.5 Price Changes

Except where a rate lock applies, we may change pricing prospectively. Continued use after a renewal at changed pricing constitutes acceptance.

12. License and Acceptable Use

We grant you a limited, non-exclusive, non-transferable, revocable license to use Sabi for your internal business purposes. You agree not to:

• Resell, sublicense, or provide Sabi to third parties without our written agreement.
• Reverse engineer, scrape, or extract underlying models, prompts, or software.
• Use Sabi to violate any law, including anti-spam (CAN-SPAM, TCPA), privacy, and intellectual property laws.
• Use Sabi to send unsolicited bulk communications.
• Submit content that is unlawful, infringing, or malicious, or that contains others' sensitive personal information without authority.
• Attempt to bypass usage limits, security measures, the approval gate, prompt-injection defenses, or other safety controls.
• Use Sabi output to develop competing AI services.

You are responsible for the instructions you give Sabi and the communications sent at your direction.

13. Your Content and Output

You retain ownership of content you submit ("Input") and, as between you and us, we assign to you our rights in the output Sabi generates for you ("Output"), subject to these Terms and third-party rights. You grant us a license to host, process, and use Input and Output as needed to provide, secure, and improve Sabi, consistent with our Privacy Policy. You are responsible for your use of Output, including verifying that it does not infringe third-party rights. Output may be similar to output generated for other users; no exclusivity is promised.

14. Feedback and Testimonials

If you submit feedback, feature requests, or bug reports, we may use them without obligation. If you provide a testimonial or case study, you grant us a perpetual, royalty-free license to use your name, likeness, and statements in Sabi marketing, unless we agree otherwise in writing.

15. Intellectual Property

Sabi, including software, branding (including "Sabi" and "First AI Hire"), content, and design, is owned by us or our licensors and protected by law. No rights are granted except as expressly stated.

16. Disclaimers

SABI IS PROVIDED "AS IS" AND "AS AVAILABLE." TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ACCURACY, AND UNINTERRUPTED OR ERROR-FREE OPERATION. WE DO NOT WARRANT THAT AI OUTPUT WILL BE ACCURATE OR RELIABLE, THAT CONNECTIONS TO THIRD-PARTY SERVICES WILL FUNCTION, OR THAT SABI WILL MEET YOUR REQUIREMENTS.

17. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW: (A) WE WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, DATA, OR GOODWILL; AND (B) OUR TOTAL AGGREGATE LIABILITY ARISING FROM OR RELATING TO SABI WILL NOT EXCEED THE AMOUNTS YOU PAID US FOR SABI IN THE TWELVE (12) MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM. SOME JURISDICTIONS DO NOT ALLOW CERTAIN LIMITATIONS; IN THOSE JURISDICTIONS, OUR LIABILITY IS LIMITED TO THE FULLEST EXTENT PERMITTED.

18. Indemnification

You will defend, indemnify, and hold harmless the Company and its officers, directors, employees, and agents from claims, damages, and expenses (including reasonable attorneys' fees) arising from: (a) your Input, instructions, or use of Output; (b) communications sent to third parties at your direction; (c) your connected accounts and your authority to connect them; (d) your violation of these Terms or applicable law; or (e) your violation of third-party rights.

19. Term, Suspension, and Termination

You may stop using Sabi at any time and cancel your subscription as described in Section 11. We may suspend or terminate access for breach of these Terms, suspected abuse or fraud, legal risk, or non-payment. Upon termination, your license ends; Sections 5, 13, 14, and 16 through 23 survive. Data export and deletion are described in the Privacy Policy.

20. Dispute Resolution: Informal Resolution First

Before filing any claim, you agree to first send a written description of the dispute via the Sabi support page with "Legal Notice" in the subject line and give us thirty (30) days to work with you in good faith to resolve it. We agree to do the same before filing against you. This section does not limit either party's right to seek equitable relief to protect intellectual property or confidential information.

21. Governing Law, Venue, and Class Action Waiver

These Terms shall be governed by and construed in accordance with the laws of the State of Wyoming, without giving effect to its conflict of laws principles. The nearest state and federal courts to Cheyenne, Wyoming shall have exclusive jurisdiction over any case or controversy arising from or relating to Sabi or this website, including but not limited to the Privacy Policy or these Terms. By using Sabi, you hereby submit to the exclusive jurisdiction and venue of these courts, consent irrevocably to personal jurisdiction in such courts, and waive any defense of forum non conveniens.

Class Action Waiver. To the maximum extent permitted by law, the parties waive any right to bring claims as part of a class, collective, consolidated, or representative action, and agree to limit any litigation to individual claims they may have against one another. If the class action waiver is found unenforceable as to a particular claim or request for relief, that claim or request (and only that one) shall be severed and may proceed as required by law, while the remainder proceeds on an individual basis.

Nothing in these Terms limits any non-waivable rights you may have under the mandatory consumer protection laws of your state of residence.

22. Changes to Sabi and These Terms

We may update Sabi and these Terms. Material changes will be posted with an updated effective date, and where required we will provide additional notice (for example, by text or email). Continued use after changes take effect constitutes acceptance.

23. Miscellaneous

These Terms, together with the Privacy Policy and any order terms presented at checkout, are the entire agreement between you and us regarding Sabi. If any provision is found unenforceable, the remainder stays in effect. Our failure to enforce a provision is not a waiver. You may not assign these Terms without our consent; we may assign them in connection with a merger, acquisition, or sale of assets. Notices to us must be sent to the contact below; notices to you may be sent to your email or phone number on file. Neither party is liable for delays caused by events beyond its reasonable control.

24. Contact

HLDFST INC
12636 High Bluff Drive Suite 400
San Diego, CA 92130 US

Support: email direct at [email protected] or through form https://meetsabi.com/support