Privacy Policy

Saha helps AI assistants find sports venues in the UAE. This policy explains what personal data we collect, why, where it is stored and what you can ask us to do with it. It covers asksaha.app and the Saha MCP server at mcp.asksaha.app.

Who we are

Saha is a beta and an MVP. It is a personal project, built by an individual in Dubai, United Arab Emirates, to learn how to build a first MCP server. It is not run by a registered company and is not a licensed business. For anything about your data, write to hello@asksaha.app.

Because Saha is in beta, features, data and this policy can change, and the service can stop at any time. Please do not share anything sensitive with it.

What we collect

• When you ask for access: your first name, last name, email address and, if you give it, your phone number.
• When you connect an assistant: your email address and the one time code we send to it. Your browser keeps a sign in session so you do not have to log in each time.
• When your assistant uses Saha: the request your assistant sends us, for example “padel court in JVC tonight under AED 200”, the filters it applied, how many results we returned, the time, your account and which assistant app made the call. If you search near you, this includes the location your assistant sends. We also record when a booking link is opened.
• When a venue registers: the contact person's name, role, email and phone, and the venue details they submit.
• Technical data: your IP address, held briefly to stop abuse and kept in our hosting provider's logs, and anonymous page view statistics collected without cookies.

We only receive what your assistant chooses to send to Saha. The rest of your conversation stays with your assistant provider, such as Anthropic or OpenAI, under their own privacy policy.

Why we use it

• To send you the MCP endpoint and sign you in.
• To answer your assistant's searches.
• To enforce usage limits and stop abuse.
• To improve search, by seeing what people ask for and where we return nothing.
• To contact you about your account or important changes to Saha.
• For venues, to review and publish the listing.

We do not sell your data. We do not show ads. We do not use your data to train AI models.

Who processes it

We use a small number of providers to run Saha:

• Supabase, for our database and sign in. Servers in Australia.
• Vercel, for hosting and page statistics. Servers in the United States.
• Resend, for sending email. Servers in the United States.
• Sentry, for error reports from the assistant service. Servers in the United States.

This means your data is stored and processed outside the UAE. Each provider protects it under its own security and data processing terms. We share data with authorities only when the law requires it.

Cookies and browser storage

We use no advertising or tracking cookies. When you sign in, your browser stores a session token. It is needed for sign in to work and is removed when you sign out.

How long we keep it

• Your signup and account: until you ask us to delete them, or until Saha closes.
• Assistant requests: up to 12 months, then deleted or made anonymous.
• Venue contact details: while the listing is live, and up to 12 months after it is removed or declined.

Your rights

Under UAE law you can ask to see the personal data we hold about you, correct it, delete it, or stop us using it. You can also withdraw your consent at any time. Write to hello@asksaha.app from the email address you used with Saha. We reply within 30 days.

Security

Data travels encrypted. Access to our database is restricted, and every table is protected by access rules. No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.

Children

Saha is not meant for anyone under 18, and we do not knowingly collect their data.

Changes

If we change this policy, we update the date above. If a change matters, we email everyone who signed up before it takes effect.

See also our Terms of Use.