The short version
We collect your name, email, company, and a few scheduling preferences when you ask for a SĀMA pilot. We use that information to email you, put sessions on your calendar, and check in monthly on how the practice is landing. We don't collect health data. We don't sell or share your information. You can ask us to delete everything, any time, and we'll do it within 30 days.
Who we are
SĀMA (referred to below as "we," "us," "SĀMA") is a live workplace meditation service operated by Eddy Kaljic, based in New York. You can reach us at hello@sama.living. For legal/data questions, the same address — we will respond within 5 business days.
What we collect
When you submit the interest form on sama.living or fill in the intake for a pilot, we collect:
- Your name — so a human can address a human.
- Your work email — to follow up, send calendar invites, and answer your questions.
- Your company name — to scope the proposal.
- Team size range — to price accurately.
- Preferred session window — morning, midday, end of day.
- Anything you type into free-form fields — whatever you choose to tell us.
During a session, we do not collect biometric data (HRV, heart rate, anything from a wearable), clinical data, or audio/video recordings of participants unless the client company specifically requests a session recording for internal replay.
What we don't collect
- Health records. Ever.
- Session audio or video, by default. If your company asks us to record a session for internal replay, recordings stay inside your company's environment and are not distributed anywhere by SĀMA.
- Third-party advertising IDs, social-media pixels, or cross-site trackers. The site uses no analytics tools at this time.
- Cookies beyond essential ones required by embedded third parties (Typeform, Zoom). No tracking cookies.
How we use what we collect
We use your information to:
- Reply to your inquiry and send a proposal.
- Schedule intake calls and sessions via Google Calendar / Outlook invites.
- Deliver live sessions via Zoom (or your company's preferred platform).
- Send one short monthly check-in email asking "how does it feel."
- Invoice for services once a client relationship exists.
That's it. We don't send marketing emails unless you've opted in explicitly.
Who sees your information
Your information is accessible to:
- Eddy and Estefania — SĀMA's founders.
- Service providers we contract with to run the business: Typeform (form submissions), Google Workspace (email, calendar), Zoom (session delivery), Stripe (payments, when billing begins). Each of these is a data processor with its own privacy policy.
We do not sell, rent, or trade your information. We do not share it with marketing partners.
How long we keep it
24 months from your last interaction with SĀMA, after which we delete it from our active systems. Email backups may linger for up to 6 additional months before being purged.
If you ask us to delete your information sooner, we will do so within 30 days. Email hello@sama.living with the subject line "Delete my data."
Your rights
Wherever you live, you can ask us to:
- See a copy of everything we hold about you.
- Correct anything that's wrong.
- Delete everything, subject to any legal retention requirements on our end (e.g., tax records).
- Port your data to another service, in a machine-readable format.
- Object to specific uses (e.g., the monthly check-in).
If you're in the EU, UK, or California, these rights are explicitly yours under GDPR, UK GDPR, or CCPA. If you're elsewhere, we'll honor them anyway.
How to reach us
For any privacy question: hello@sama.living. Eddy is the data controller. For now, there is no separate Data Protection Officer; we handle privacy requests directly.
If you're in the EU and we can't resolve your concern, you can lodge a complaint with your national data-protection authority.
What this isn't
SĀMA is not a medical or mental-health service. Our sessions are wellness practice, not therapy. If you are experiencing a mental-health emergency, please call 988 (US Suicide & Crisis Lifeline) or your local equivalent.
Changes to this policy
If we materially change how we handle your data, we'll update this page and email anyone currently active in our system. The current "last updated" date at the top of this page is always the authoritative version.