Privacy Policy

Overview

Sarion is a workspace for agencies to manage clients, projects, invoices, and a client portal. This policy explains what we collect, why, and the choices you have. We aim to collect only what we need to run the service.

Account data

When you create an account we collect your name, email address, and a securely hashed password. We use this to authenticate you, provide the service, and send essential account and billing notifications. Billing details are handled by our payment processor — we do not store full card numbers.

Agency data

Content you create in Sarion — clients, projects, invoices, notes, comments, team members, and agency branding — belongs to your agency. We process it solely to provide the service to you. We do not sell it or use it for advertising.

Client data

Information you store about your own clients, and content shared through the client portal, is processed on your behalf. You are the controller of that data; Sarion acts as a processor. You are responsible for having the right to store it and for what you share through the portal.

Cookies

We use strictly necessary cookies to keep you signed in and to remember preferences such as your theme. These are required for the app to function and are not used for cross-site tracking.

Analytics

We may use privacy-respecting, aggregated analytics to understand how the product is used and to improve it. Where used, analytics are limited to operational insight and are not used to profile individuals or sold to third parties.

Security

Data is encrypted in transit, passwords are hashed, and access to your workspace is scoped to your agency. No system is perfectly secure, but we work to protect your data and to limit who can access it. If you believe your account has been compromised, contact us right away.

Third-party services

We rely on a small number of trusted providers to run Sarion, and share only the data each needs to do its job:

• Lemon Squeezy — our merchant of record for subscription billing. They process your payment details; we never see or store full card numbers.
• Resend — delivers transactional email such as account, billing, and invite notifications.
• Hosting & database — our infrastructure and managed PostgreSQL providers store your data securely on our behalf.
• Analytics — privacy-respecting, aggregated usage analytics, as described above.

Each provider is bound by its own data-processing terms and uses your data only to provide its service to us.

Data retention & deletion

We keep your data while your account is active. You can request export or deletion of your agency data by contacting us. Some records may be retained where required for legal or accounting reasons.

Contact

Questions about privacy or a data request? Email us at hello@trysarion.com, or visit our contact page.