Privacy Policy
Last updated: October 10, 2026Saras is a GMAT coach you talk to over chat. To coach you well it has to remember a lot about your prep, so this page sets out exactly what it keeps, why, who else handles it, and how to get a copy or have it deleted. It covers Saras, the Saras assessment, and Saras for Educators.
Who we are
Saras is run by Sanganak Works Private Limited ("Sanganak Works"), a company incorporated in India (CIN U62010UW2026PTC259543). Sanganak Works decides how and why your personal data is used. That makes it the data controller under the EU and UK GDPR, and the data fiduciary under India's Digital Personal Data Protection Act.
A note on payments. For now, Saras payments are processed by Dodo Payments through an account held by our founder, listed as "saras.works" at checkout. We're moving that account to Sanganak Works and will update this policy when we do. Either way, Sanganak Works is responsible for your data.
Questions and requests about your data go to contact@sanganak.works.
What we collect
- Conversations. Every message you send Saras and every reply, including voice notes, photos, screenshots and documents you share (like a resume).
- Tool calls. The actions Saras takes for you and what they return: web searches for study material, reminders and scheduled check-ins, the notes it keeps in your study file, and calendar events if you connect a calendar.
- Check-in responses. What you tell Saras at your daily check-ins and check-outs: what you studied, for how long, and how it went.
- Scores and dates. Mock test scores and section breakdowns, your official GMAT score if you share it, your target score and schools, and your test date.
- Account and contact details. Your name, email address, phone number, and the ID and username of the messaging account you use with Saras (for example, your Telegram ID).
- Payment details. Dodo Payments collects your payment and billing details. We get back your name, email, billing country, what you bought, your subscription status and your access key. We never see your full card number.
- Forms. Your answers to the Saras assessment and onboarding questions, and waitlist sign-ups, including the Saras for Educators waitlist.
- Website usage. When you visit saras.works we record page views and a few button clicks, along with your browser, device, approximate location (from your IP address) and the link that brought you. See Cookies and analytics.
We don't ask for sensitive information like health details or government ID. Share only what you're comfortable with, and you can ask us to delete anything.
How we use it, and why we're allowed to
Privacy law requires a legal basis for each way we use your data. These are ours:
| What we do | Legal basis |
|---|---|
| Coach you: daily focus, error analysis, plans, check-ins, finding resources, readiness calls | Delivering the service you signed up for (contract) |
| Take payments, run your subscription, keep tax and accounting records | Contract, and our legal obligations |
| Send service messages: activation links, reports, account notices | Contract |
| Improve Saras for every student using anonymised patterns (cohort learning) | Our legitimate interest in making Saras better. You can object |
| Share your study journey with a partner coach (coach handoff) | Your explicit consent, asked each time |
| Keep Saras secure, prevent abuse, fix bugs | Our legitimate interest in running a safe, working service |
| Measure how people find and use the website | Our legitimate interest in understanding how the site is used. See Cookies and analytics to block it |
We don't sell your personal data, share it for advertising, or use it to build ad profiles. We don't send marketing emails unless you've asked for them.
Automated decisions. Saras generates your plans, priorities and readiness calls automatically. They're coaching suggestions, not decisions with legal or similarly significant effects, and you're always free to ignore them.
Cohort learning: how your data helps other students
Saras gets better by learning what works across all of its students: which error patterns tend to show up together, which resources actually move scores, and how a plan should change as the test date gets closer. We call this its playbook.
To build it, we remove names, contact details, account IDs and anything else that points to a person, and look at patterns across many students rather than at anyone's individual record. Once data is genuinely anonymised it can't be traced back to you. It's no longer personal data, and we may keep it after your account is deleted.
Cohort learning improves Saras's playbook. It doesn't mean your conversations are used to train a public AI model.
If you'd rather your data stayed out of cohort learning, email contact@sanganak.works and we'll leave it out from then on. Your coaching won't change.
Saras for Educators
Saras for Educators is a version of Saras that GMAT coaches use to run their own programs.
- Coaches start from the student playbook. The anonymised insights from cohort learning power Saras for Educators, so a coach's Saras already knows what tends to work. Coaches never receive your conversations, or anything that identifies you, this way.
- A coach's cohort stays with that coach. If you study with a coach on Saras for Educators, your data is private to that coach's program by default. We process it on the coach's behalf, and the coach's own privacy policy also applies.
- Nothing flows back without opt-in. Data from a coach's program is used to improve Saras for other students only if that coach opts in, and then only in aggregated, anonymised form.
Coach handoff
Sometimes the most useful thing Saras can do is introduce you to a human coach, for example when your score has been stuck for a while. When that happens, Saras may suggest one of our partner coaches.
Nothing is shared unless you say yes. Before anything goes to a coach, Saras tells you who the coach is and exactly what they'll see, and asks for your explicit go-ahead. What's shared is your study journey: your scores, how consistently you've studied, and your error patterns. Nothing beyond what Saras lists is shared.
You can say no and keep using Saras exactly as before. If you say yes, you can ask us to stop sharing at any time. That stops future sharing, but the coach keeps what they've already received and handles it under their own privacy policy.
Messaging apps and other channels
You talk to Saras through apps run by other companies. Your messages pass through their systems, and their privacy policies apply to what they handle.
| Channel | What passes through it |
|---|---|
| Telegram | Your messages, voice notes and files, Saras's replies, and your Telegram ID, username and display name. Chats with bots aren't end-to-end encrypted, so they're readable on Telegram's servers. |
| iMessage (through Photon) | Your messages and attachments, Saras's replies, and your phone number or Apple ID email. These pass through Photon's servers as well as Apple's. |
| Your email address and the emails we exchange: activation links, assessment reports, support. We send through Resend and receive in Google Workspace. | |
| WhatsApp (coming soon) | Your phone number, your messages and Saras's replies, through Meta's WhatsApp service. |
| ChatGPT apps, agent-to-agent (A2A) and Muse connectors (coming soon) | Only what's needed for the request you make through them, plus Saras's reply. The platform you use also handles it, under its own terms. |
We'll update this list before any new channel goes live.
Service providers we use
These companies process data on our behalf so Saras can run. They may use it only to provide their service to us.
| Provider | What they do | What they handle |
|---|---|---|
| OpenRouter | Routes Saras's requests to AI models | Conversation content and coaching context |
| OpenAI | Main AI model; transcribes voice notes and voices replies | Conversation content and voice notes |
| DeepSeek (through OpenRouter) | Backup AI model when the main one is unavailable | Conversation content and coaching context |
| Firecrawl | Web search and page fetching when Saras looks for study material | Search queries about your study topics, not your contact details |
| Dodo Payments | Checkout, billing and sales tax, as merchant of record | Name, email, billing details, payment method, subscription |
| Hostinger | Servers that run Saras and store your conversations and study file | Everything Saras keeps about your prep |
| Vercel | Hosts the saras.works website | Website requests and form submissions |
| Supabase | Database for sign-ups, onboarding and assessments | Contact details, form answers, order status |
| Resend | Sends our emails | Email addresses and email content |
| Google Workspace | Our inbox | Emails you send us |
| YouForm | Hosts some of our forms | Form answers |
| PostHog | Website analytics | Page views, clicks, device and approximate location |
Dodo Payments is the merchant of record, so it's also responsible for payment data under its own privacy policy. If you connect Google Calendar, Google handles that calendar data under its own terms, and Saras accesses only what you've allowed.
International transfers
Sanganak Works is based in India, and most of our providers are in the United States, so your data is processed outside the EU, the UK and possibly the country you live in.
When EU or UK personal data goes to a provider in a country without an adequacy decision from the European Commission or the UK, we rely on the Standard Contractual Clauses (with the UK addendum) in that provider's data processing terms, or, for US providers certified under it, the EU–US Data Privacy Framework and its UK extension. To get a copy of the safeguards for any provider, email contact@sanganak.works.
How long we keep it
- Coaching data (conversations, check-ins, scores, error log, study file): while your account is active, and for 90 days after you cancel so you can pick up where you left off. After that we delete it or anonymise it.
- Account and contact details: for the same period as your coaching data.
- Payment and tax records: as long as tax and accounting law requires, up to 8 years. Dodo Payments keeps its own records as merchant of record.
- Assessment answers and reports: 12 months after your report is sent.
- Waitlist sign-ups: until we invite you, or for 12 months, whichever comes first.
- Website analytics: up to 12 months.
- Anonymised data: possibly indefinitely, because it no longer identifies anyone.
When we delete data, copies in logs and backups are cleared on their normal cycle, within 30 days.
Your rights
Wherever you live, you can ask us to:
- Show you your data and give you a copy.
- Export it in a machine-readable format (your conversations, check-ins, scores and error log) to keep or take elsewhere.
- Correct it if something's wrong.
- Delete it. We'll delete your account and personal data, except anything the law requires us to keep, like tax records.
- Stop or limit a use of it, including leaving cohort learning.
- Withdraw consent you've given, such as for a coach handoff, at any time. This doesn't affect anything that happened before.
Email contact@sanganak.works from the address you signed up with (or tell us which messaging account you use) so we can confirm it's you. It's free, and we'll reply within 30 days.
EU and UK: these are your rights under the GDPR, and you can also complain to your local data protection authority. India: you can raise a grievance with our Grievance Officer (see Contact), and then with the Data Protection Board of India. United States: we don't sell or share personal information for targeted advertising, and we'll honour the privacy rights your state gives you.
Security
Data is encrypted in transit, access is limited to the people who run Saras, and our logs are set up to redact personal details. No system is perfectly secure, though. If a breach puts your data at risk, we'll tell you and the relevant authorities as the law requires.
Age
Saras is for people aged 18 and over. We don't knowingly collect data from anyone younger. If you think we have, tell us and we'll delete it.
Changes to this policy
When we change this policy we'll update the date at the top. If a change matters, like a new use of your data or a new kind of provider, we'll tell you by email or in chat before it takes effect.
Contact
Sanganak Works Private Limited, E-1504, RG Residency, Sector 120, Noida, Uttar Pradesh 201301, India. Email contact@sanganak.works about anything to do with your data or this policy.
Grievance Officer. For complaints about Saras or how we handle your data, contact Samyak Sahu, Founder and Director, at contact@sanganak.works. We acknowledge complaints within 48 hours and resolve them within one month.