Website Privacy Policy

Policy version: November 1, 2026. Effective when published at saidandfound.com.

This policy covers saidandfound.com, email sign-ups and related correspondence. For accounts, inventory and cloud AI, see our app privacy policy.

Who we are

The website controller is Shanghai Juantang Technology Co., Ltd., Shanghai, China. Contact us at [email protected].

The service is not directed to the European Union, European Economic Area or United Kingdom. We have not appointed EU or UK representatives. Your rights under applicable law are unaffected.

What we collect and why

• Email sign-ups: your email, first sign-up time and source, such as a reservation page or campaign link. We use these for the notices or reservation contact you request. Providing an email is optional; a reservation does not take payment.
• Messages: your email and the information you send, so we can respond to support, privacy or other enquiries.
• Visits and links: connection and browser information used to deliver and protect the site, visit and performance statistics, and daily counts of store or reservation link clicks. A store redirect uses browser information to choose the appropriate store.

We do not sell personal data, show ads or build advertising profiles. Website sign-ups are not sent to our app's AI service. We do not use a launch-notification sign-up as permission for unrelated marketing or research.

Browser storage and analytics

Cloudflare Web Analytics provides cookieless traffic statistics. Separately, we save a campaign tag in your browser's session storage and reuse it in links and sign-ups. When saved with your email, the source is linked to you. Daily click counts contain a date, destination and optional campaign tag, not your email.

These features run without an on-page consent control. Browser settings can block scripts or storage; blocking scripts also prevents the sign-up form from working, so you can email us instead. Any consent requirements under applicable law still apply.

Store links may pass campaign tags to Apple or Google, which handle your visit under their own policies.

Who receives information

Cloudflare provides hosting, storage, security and analytics. Email routing and mailbox providers handle correspondence. Our operators handle sign-ups and support; authorities or advisers may receive information where required by law or necessary for a claim. Website sign-ups are not shared with app household members.

Our operator is based in China and providers use international infrastructure. Information may be stored or accessed outside your country. Applicable legal requirements for transfer safeguards remain in place; contact us for information about a particular recipient or transfer.

How long we keep information

• Sign-up records: until manually removed. There is no automatic expiry. Deleting an app account does not remove a website sign-up.
• Browser campaign tag: for the tab's session, subject to browser session restoration. A source saved with an email follows the sign-up record's lifetime.
• Daily click counts: until manually removed, without automatic expiry.
• Analytics, logs and recovery copies: our hosting providers manage these under their service retention settings. Their lifetimes vary by record type; these website records are separate from the app's database recovery history.
• Correspondence: until manually removed from the mailbox. You may request erasure; limited records may remain where necessary to honour a do-not-contact request or meet a legal obligation or claim.

Your choices and rights

Reply “remove” or email [email protected] to withdraw permission for optional messages or request deletion. Requests are handled manually; there is no self-service unsubscribe page. Withdrawal does not affect earlier lawful processing.

Where UK or EU GDPR applies, our bases are consent for requested notification or reservation messages; contract for essential service correspondence; legitimate interests for website delivery, security, permitted traffic measurement, enquiries and claims; and legal obligations for applicable rights requests or legal duties. Device-storage consent rules apply separately.

Depending on applicable law, you may request access, correction, erasure, restriction or a portable copy, and object to legitimate-interest processing. You can object to direct marketing at any time. We do not make solely automated decisions with legal or similarly significant effects.

Email us to exercise these rights. We may need proportionate identity confirmation. Where GDPR applies, requests are normally free and due within one month; a permitted extension of up to two further months requires an explanation within the first month.

You may complain to us or, where applicable, the UK ICO or your EEA supervisory authority, without contacting us first. Applicable UK complaint rules require acknowledgement within 30 days. Judicial remedies remain available.

Children and policy changes

The website is not designed for children under 13. Do not submit sensitive information or children's details. Where child-consent rules apply, the UK age is 13 and EU ages vary from 13 to 16, with parental authorisation required below the applicable age. Forms do not verify age; contact us about unauthorised submissions.

We will update this policy as our practices change and provide notice or obtain further consent where required.