SAAM does real things for you, so the controls are plain. You approve what matters, your secrets stay with you, and what you write stays in your own space.
Sending, booking and changing things stop at an approval card. You can set rules to always ask or always allow by tool, app or category, and a scheduled or webhook run that would change something waits for your yes. A spoken yes on a live call never approves anything. Approvals stay on screen.
Your agents, chats, memories and files belong to your account. Other accounts cannot read them, and the app does not let you invite other people into yours.
The people who run the service can see usage totals and settings on their admin site. It never shows message contents, passwords or keys.
When SAAM needs a password or a key, it shows a card and you type it there. The model never sees it, and a live call stops listening while you type.
Keys and tokens you add for model providers, apps and servers are stored encrypted.
Each computer runs in its own container, on a network that cannot reach the service or its database. Inside it, SAAM works without a card for each step, so the container is the boundary. It sleeps after 10 minutes idle.
To answer you, SAAM sends your messages, memories and files to the model you chose, which may be the included one or your own key. Apps you connect receive what each action needs. The privacy policy names the providers. This website is hosted on Cloudflare. If you join the list, we keep your email, the time and the page language until we contact you or you ask us to delete it.
The full legal text, last updated October 3, 2026.
Open Account in the app, enter your password under Delete account and confirm. This permanently deletes your account and its personal data. Data already sent to a provider follows that provider's own rules.
To report a vulnerability, write to [email protected].
