This Privacy Policy explains how SaaS Starter ("we", "us" or "our") collects, uses and shares personal data when you visit our website or use our application (together, the "Service").
By using the Service, you agree to the practices described here. Words defined in our Terms of Service have the same meaning in this policy.
Data we collect
We only collect what we need to run the Service.
Account data
When you create an account, we store:
- your name and email address;
- your profile picture, if you sign in with Google;
- the organizations you belong to and your role in each of them.
We never store a password: you sign in with your Google account.
Billing data
Payments are handled by Stripe. We never see or store your full card number. We keep a reference to your Stripe customer, your plan and the status of your subscription.
Usage data
Like most websites, our servers log technical information when you use the Service: IP address, browser and device type, pages visited and the time of each request.
Cookies
We only use first-party cookies that the Service needs to work:
| Cookie | Purpose |
|---|---|
| Session | Keeps you signed in. |
| Preferences | Remembers settings such as the color theme. |
| Security | Protects forms and sign-in against forgery. |
We do not use advertising or third-party tracking cookies.
How we use your data
We use your data to:
- create and secure your account;
- provide the Service and the features of your plan;
- process payments and send receipts;
- answer your support requests;
- send important notices about your account, such as security alerts or changes to these policies;
- understand how the Service is used, fix problems and improve it;
- comply with our legal obligations.
We do not sell your personal data.
Legal bases
If you are in the European Economic Area or the United Kingdom, we process your data on the following legal bases:
- Contract: to provide the Service you signed up for.
- Legitimate interests: to keep the Service secure and improve it.
- Legal obligation: to keep billing records, for example.
- Consent: for any optional use we ask you about. You can withdraw it at any time.
Service providers
We rely on trusted providers to run the Service. They only process your data on our instructions.
| Provider | Purpose |
|---|---|
| Vercel | Hosting |
| Neon | Database |
| Stripe | Payments and invoicing |
| Sign-in with Google (optional) |
We may also share data if the law requires it, or with a buyer if our business is sold or merged.
Data retention
We keep your account data for as long as your account exists. When you delete your account, we delete or anonymize your personal data within 30 days, except where we must keep it longer, such as invoices kept for accounting purposes.
Server logs are kept for a limited time, usually no longer than 90 days.
International transfers
Our providers may process data outside your country. When data leaves the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Security
We protect your data with encryption in transit, passwordless sign-in and access restricted to the people who need it. No system is perfectly secure, so we cannot guarantee absolute security, but we work to keep your data safe.
Your rights
Depending on where you live, you can:
- access the personal data we hold about you;
- correct data that is wrong or incomplete;
- delete your data;
- object to or restrict some processing;
- receive your data in a portable format.
To exercise these rights, email us at privacy@example.com. We may ask you to confirm your identity first. You can also file a complaint with your local data protection authority.
Children
The Service is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. We will post the new version on this page and update the date below. If the changes are significant, we will also notify you by email or in the Service.
Contact us
If you have any question about this policy or your data, email us at privacy@example.com.