Prices, written down early
Pay for the shelf, not the stuff.
Sally catalogs your files where they already live. She never takes custody, so she never charges you for storage. You pay only when your catalog outgrows the free shelf — and plenty of people never will.
Nothing on this page is for sale yet.
Sally is pre-launch. Every account today is free, no caps are switched on, and there is honestly no way to pay us even if you wanted to. We are publishing the prices anyway, because a number you can read a year before you need it is worth more than one that turns up at checkout. Anything marked not built yet is exactly that: promised, not shipped — written down so you can hold us to it.
Showing yearly prices.
Free
One phone's worth, fully fingerprinted.
$0
Free, and not the kind that expires.
The whole product, at a smaller size:
- 5,000 items — duplicates of the same file count once
- 2 connected sources
- Full fingerprints: SHA-256, visual print, EXIF dates, GPS and camera
- Duplicate finding, fidelity scores and the review queue
- Every export: JSON-LD, CSV, XMP sidecars, whole-catalog SQLite
- Claude can read your catalog over MCP
- One live share link
- Consent settings, and an account-deletion button that works
No card, no clock, no trial countdown.
Plus
Most popularYour whole scattered life, cataloged.
$6/mo
Billed $72 once a year · save $12
Everything in Free, and:
- 100,000 items
- Unlimited connected sources
- sally go watches your folders and re-scans on a schedulenot built yet
- Claude can write enrichment back into the catalog over MCPnot built yet
- XMP written back into your own files, where they sitnot built yet
- Three invited helpers — the aunt who knows every facenot built yet
- Ten share links
- Email support, from the person who built it
Plus opens when billing does. Your price is then locked for as long as you stay subscribed.
Pro
For people who do this for other people.
$24/mo
Billed $288 once a year · save $60
Everything in Plus, and:
- Ten separate client catalogsnot built yet
- 1,000,000 items per catalog, fair use
- Ten invited helpers per catalognot built yet
- Unlimited share links
- Your own branding on shared pagesnot built yet
- Scoped API tokens, one per client catalognot built yet
- Bulk operations across a whole catalognot built yet
- Priority email support
Same door as everyone else. The bigger desk arrives with billing.
Every plan exports everything, always — including Free. Downgrading never deletes or locks a single item; the shelf just stops growing.
Every plan includes
These are the parts we will not be charging for later. Writing them down is the point of writing them down.
📤
Your exports, free forever.
JSON-LD, CSV, XMP sidecars and a full SQLite copy of the catalog — any day, on any plan, including Free. This one is a promise rather than a feature: a catalog you cannot take with you is a trap, and traps make bad librarians.
🗄️
Catalog, not custody.
Sally stores fingerprints and facts about your files. The local agent reads them where they already sit and leaves them there — only the files you deliberately drag into the browser are ever held here. There is very little to hold hostage, which is the idea.
🙈
Zero face recognition.
Sally never scans a face and never will. People get named by the humans who love them, which is why the names are right — and why she is legal in Illinois and decent everywhere else.
🔒
Private by default.
Nothing is shared unless you share it. Consent settings are yours on every plan, and the free plan is not a lesser class of privacy.
🚪
The door out is a button.
Export everything and delete your account from Settings — today, on the free plan. No phone call, no retention specialist, no chatbot standing in the doorway.
💸
Thirty days, any reason.
Once there is something to pay for, any first payment is refundable in full for 30 days — a subscription, a renewal, or a Founding seat. No forms and no “are you sure”.
Founding Archivist — $199, once. 500 seats, ever.
Plus for life. A numbered badge on your profile and on every catalog you sharenot built yet. A direct line to the founder, first vote on the roadmap, and a price-locked $19/mo upgrade if you ever need the Pro desk.
Seats claimed: 0 of 500 — because they are not on sale yet.
When they are, the counter on this page is the real one. When it reads 500 it stays at 500 forever: the seats are never re-run and never discounted.
Honest math: $199 is two years and nine months of Plus, and then free. For comparison, at the time of writing Peakto sells a $270 “lifetime” that includes one year of updates, and Excire charges $249 per version. This one means the life of the product — and if Sally ever winds down you get at least 90 days of notice, open exports the whole way, and a pro-rated refund inside your first year.
The whole grid
A Founding Archivist seat is the Plus column, for life. The rows where every plan says yes are the important ones.
| Feature | Free | Plus | Pro |
|---|---|---|---|
| Price | $0 | $6/mo billed yearly, or $7 monthly | $24/mo billed yearly, or $29 monthly |
| Unique items (duplicates count once) | 5,000 | 100,000 | 1,000,000 per catalog, fair use |
| Connected sources | 2 | Unlimited | Unlimited |
| Fingerprints: SHA-256, visual print, EXIF | Everything | Everything | Everything |
| Duplicates, fidelity scores, review queue | Yes | Yes | Yes |
| Exports: JSON-LD, CSV, XMP, SQLite | Always | Always | Always |
| Claude reads your catalog (MCP) | Yes | Yes | Yes |
| Claude writes enrichment back (MCP) | No | Yesnot built yet | Yesnot built yet |
| sally go local agent | Scans when you run it | Watches and re-scans on a schedulenot built yet | Many machines, bulk operationsnot built yet |
| XMP written back into your files | No (sidecar export instead) | Yesnot built yet | Yesnot built yet |
| Invited helpers for family tagging | No | 3not built yet | 10 per catalognot built yet |
| Share links | 1 live link | 10 | Unlimited |
| Your branding on shared pages | No | No | Yesnot built yet |
| Client catalogs (separate workspaces) | 1 | 1 | 10not built yet |
| Consent tiers, deletion, privacy controls | All of them | All of them | All of them |
| 30-day money-back guarantee | Nothing to refund | Yes | Yes |
| Support | The guide, and the community | Priority email |
Fair questions
The objections people actually have, answered in the order they usually arrive.
“Google Photos is free.”
Google is free because your photos live there — in Google's building, described by Google's guesses. Sally works the other way: your files stay where they are, the labels are yours, the exports are open formats, and your AI assistant gets the truth instead of a guess. Google's own MCP server hands Claude a pile of unlabeled files. Sally hands it your grandmother's name.
“Why is the free plan so big?”
Because a catalog of 5,000 well-fingerprinted items is a demo no screenshot can be. We would rather you feel the moment Sally finds the same photo in three places than read a paragraph about it. Roughly one in twenty people will eventually want a bigger shelf. That is the whole business, and it is enough.
“What happens if I stop paying?”
Nothing is deleted, nothing is locked, and exports keep working. Your catalog simply stops growing past the free shelf: no new items past 5,000, extra sources pause instead of disconnecting, and the first share link stays live. The door out is always open.
“You are one person. What if you get hit by the Blue Line?”
Fair. Three protections, none of which require trusting me. Your files stay where they are — the local agent fingerprints them in place, and anything you upload you still have a copy of. Your exports are open formats that already work in other tools today. And sally go is one zero-dependency file on your own machine. Plus the written promise: if Sally winds down, at least 90 days of notice, exports open the whole way, and refunds for unused time.
“Will you train AI on my data, or sell it?”
No. Your content is not sold and is not used to train models — that is in the Terms, not just here. Consent tiers exist so that if a paid, opt-in licensing pool is ever built, saying yes is a deliberate choice with a price tag on it, and saying nothing means no, forever.
Questions about the money
What counts as an item?
One unique file, identified by its fingerprint. The same photo sitting on your laptop, in Dropbox and in an old backup counts once — knowing it is the same photo is the entire point of Sally.
What counts as a source?
A place Sally watches: a computer running the sally go agent, or a cloud account like Dropbox or Google Drive once those connectors ship. Everything you drag into the browser is one source called “My uploads”, however many times you do it.
What happens when I hit 5,000 items?
Today, nothing — no caps are switched on, because nothing is for sale yet. The plan when they are: files past the line get counted and held rather than cataloged, so Sally can tell you “1,218 files are waiting” without doing work you have not asked for. Upgrade and they file themselves in. Nothing already cataloged is ever touched.
Are exports really free on the free plan?
Yes. Full exports, every format — JSON-LD, CSV, XMP sidecars, and the whole catalog as a SQLite file — on every plan, forever. This is deliberate and permanent. Paywalling the exit is the one thing that would make Sally a worse librarian than the mess she replaced.
Can Claude read my catalog on the free plan?
Yes. Read-only MCP access is free: create a token in Settings, add the connector, and your assistant can search your catalog, read item details and see your tag vocabulary. Writing back — Claude filing its answers into the catalog as enrichment — is the Plus hook, and it is honestly not built yet.
Do you do face recognition?
Never. Sally does zero biometric processing: no face scans, no face math, nothing for a law like Illinois BIPA to object to. People get named by you, which is also why the names are right and the spelling matches the family.
What does “not built yet” mean on this page?
Exactly what it says: promised, not shipped. Those items are written down early so you can hold us to the list, not so anyone can be charged for them. Nothing on this page bills anyone today.
Why is Sally US-only?
Because doing privacy properly in one jurisdiction beats doing it vaguely in fifty. US-only keeps the promises simple and testable. Elsewhere later, carefully.
Will my price go up?
No. The price you subscribe at is locked for as long as your subscription stays active — future increases apply to new subscribers only. Lapse for more than 60 days and rejoin, and the then-current price applies. If a feature ever moves between plans, subscribers who already have it keep it.
What is in the Founding Archivist seat, exactly?
Plus for life, a numbered badge, the founders channel, first vote on the roadmap, and a price-locked $19/mo upgrade if you ever need Pro. Five hundred seats, sold once, never re-run. “Life” means the life of the product: if Sally ever winds down you get at least 90 days of notice, open exports throughout, and a pro-rated refund inside your first year.
How will refunds work?
Thirty days, any first payment, any plan, any reason, refunded in full — email hello@sallydoesdata.com from your account address. After 30 days, monthly charges are not refunded (cancel and you keep the plan until the period ends) and yearly plans refund unused full months on request. We would rather refund than trap.
How do I cancel?
There is nothing to cancel yet. When there is: cancel from Settings, effective at the end of the period you already paid for, and you keep your catalog afterwards regardless. If you sign up online you cancel online — no phone calls, ever.
Is my card safe? Will you see my number?
Payments will run entirely on Stripe. Sally will never see or store a card number, and receipts, renewal reminders and card updates come from Stripe on our behalf.
Start with the free shelf.
Five thousand items, two sources, every export, no card. If your life turns out bigger than that — most lives are — Plus will be $6 a month, and you will hear the price from this page before you hear it from a checkout.