How we handle invitations
Somebody gave us your email address so they could invite you to choose films and television with them on Sarita. This page says exactly what we did with it, and what you can ask us to do. It applies whether or not you ever make an account.
Who is responsible
WikiTribune, Ltd., which operates Sarita, is the data controller. You can write to us at admin@sarita.ai or at WikiTribune, Ltd., Mailbox 018, 272 Kensington High Street, London, W8 6ND, United Kingdom.
Where your address came from
A person using Sarita typed it in, having reviewed the message before it was sent. We did not buy it, scrape it, guess it, or get it from a list, and we did not read anyone's contacts to find it.
What we do with it, and why
We use it to deliver that one invitation and to manage it: to know it was sent, to honour a decline, and to stop writing if you ask. The lawful basis is legitimate interests: the interest is letting someone arrange, with a particular person they already know, an activity that needs that person's own preferences to work at all.
This is not marketing. Your address is not added to any list, not used to advertise anything, not used to build a profile of you, not shared with anyone else for their purposes, and not used to train models. You will not receive a reminder. We send one message, and only one. In some circumstances our staff may send it again.
What we hold
- Your email address, while the invitation is open.
- Which account invited you, and when.
- Whether the invitation was delivered, declined or expired.
- If you decline, or ask us to stop, a protected one-way fingerprint of your address. It is enough to recognise it and refuse to write again, and not enough to recover the address from. After a decline it stops the person who invited you from inviting you again; after a stop, it stops everyone.
How long
If you decline, or the invitation expires, the address is deleted, in any case within 30 days. If you accept, it is deleted from the invitation's records, and the address you sign up with becomes part of your account, kept and used like any account's address, for example to send you messages about your account. The fingerprint left by a decline or a stop is kept for as long as we run invitations, because the alternative is quietly starting again.
What accepting does
If you press Connect, you and the person who invited you become friends on Sarita. Friends can see each other's ratings, watchlist and what each has liked, unless one of you makes them private, which you can do at any time in Settings, as you can disconnect or block someone.
An invitation can also come as a group link, made by the person who started a Watch Buddy group and shared wherever they chose. Pressing Connect on one makes you friends with that person straight away, without them confirming it: up to 20 people for each link, within 14 days of its being made. It does not put you in the group: its creator adds members one at a time, and you can leave whenever you like.
A partner invitation, sent by someone choosing what to watch with you, also puts the two of you in a group of your own. It works once: when you accept it, it stops working for anyone else.
Who else sees it
Amazon Web Services, who deliver our email and host our systems. They act on our instructions and may not use your information for their own purposes. Our systems run in the United States, so your address is processed there. That transfer is covered by our data processing agreement with Amazon Web Services, which includes the UK Addendum to the European Commission's Standard Contractual Clauses, the safeguard UK law requires for sending personal data abroad.
What you can do, without an account
- Ignore it. Nothing happens, and nobody is told.
- Decline it. The invitation closes and cannot be resent on the same link.
- Stop invitation emails to your address, from anyone, for good.
- Report a problem if the message was unwanted or looks wrong.
You can also ask us for a copy of what we hold about you, ask us to correct or delete it, or object to our using it at all. We will not ask you to justify an objection to invitations: ask, and we stop. If we keep the fingerprint described above after an erasure request, it is only so that the block itself survives, and we will say so.
Complaints
Write to admin@sarita.ai. We will acknowledge within 30 days and usually far sooner, and tell you what we have done. You can also complain to the Information Commissioner's Office at ico.org.uk, though we would rather hear from you first.