One principle governs everything: we measure only these public pages, and only with your consent. Your vault (your documents, your work) is never tracked. Not by us, not by anyone.

What we measure on public pages

The public sites (sazai.app and ui.sazai.app) use Google Analytics 4 to understand which pages are visited, which product areas draw interest, and where visitors come from: page views, clicks on product sections, language and device type. Measurement is off by default and activates only after you accept the consent notice. All requests flow through our own domain (first-party proxy); IP addresses are anonymized; we do not use advertising features or cross-site tracking.

If you decline, or simply ignore the notice, nothing is measured. The pages work identically either way.

What we never do in the vault

The authenticated product, your vault, carries zero analytics. No tracking scripts, no beacons, no third-party requests of any kind. The only cookies present are the session cookies that keep you signed in. Product usage is accounted for by our own internal metering, which exists for billing and capacity: it records actions, never content, and never leaves our infrastructure.

Your account and identity

Sign-in is handled by our identity provider (Zitadel), optionally through your organization’s Microsoft account. We hold the minimum: your name, email address, and the tenant your invite binds you to. Access to a vault is granted by invitation only.

Your documents

Documents you upload are stored in your tenant’s isolated workspace and processed deterministically: the same input always produces the same output, and every transformation is recorded so you can audit exactly what was done. When AI models process your content (for example, translation), they do so under commercial terms that prohibit the use of your content for model training.

When you delete a document, its content is erased. Minimal audit and metering records, without content, are retained, as the law permits and good accounting requires.

Cookies

CookiePurposeSurface
Consent choiceRemembers whether you accepted or declined measurementPublic pages
SessionKeeps you signed inVault
PreferencesLanguage and theme choiceAll surfaces

No advertising cookies. No cross-site identifiers.

Infrastructure

SazAI runs on Amazon Web Services (United States). All traffic is encrypted in transit (TLS); tenant workspaces are isolated from one another. For organizations that require it, SazAI is also offered as a dedicated, self-contained installation on the client’s own infrastructure.

Your rights under the LGPD

The Lei Geral de Proteção de Dados (Law 13.709/2018) grants you the right to access the data we hold about you, correct it, delete it, receive it in portable form, and revoke consent at any time. Revoking measurement consent is immediate: decline on any public page. For anything else, write to us.

Contact

Privacy requests: ask@sazai.env SazAI · Rua dos Tijolos Amarelos, 42

Last updated: 2026-08-01.

Cookies

Everything we store in your browser, and why. You can review or withdraw your consent at any time.

Open cookie preferences

NamePurposeDurationScope
_oauth2_proxyAuthentication session (SSO Zitadel via oauth2-proxy)~7 days.sazai.app
sazai_vaultWhich library you are viewing (§9.2 sharing ACL)1 yearvault.sazai.app (host-only)
sazai_localeInterface language1 year.sazai.app
sazai_skinVisual theme / outfit (sazai · 90s)1 year.sazai.app
sazai_themeLight / dark1 year.sazai.app
themeSame-origin theme fallbackpersistentper-origin
sazai_consentRecords your consent decisionpersistentper-origin
_gaGoogle Analytics 4 — distinguish visitors (public pages)~2 years.sazai.app
_ga_NQQKVCTRSBGA4 — session state (ID G-NQQKVCTRSB)~2 years.sazai.app