Privacy Policy

1. Scope and data controller

This Privacy Policy applies to SaaSLocator websites, accounts, product submissions, launches, comments, votes, newsletters, paid services, advertising, support, and related features.

SaaSLocator is the controller of personal data it determines how to use. External providers may act as processors or independent controllers for their own services.

2. Information we collect

Information you provide

• Account information such as name, email address, username, password hash, avatar, and social profile links.
• Product, founder, launch, category, technical stack, pricing, website, image, and promotional information.
• Votes, comments, replies, moderation responses, support messages, and newsletter preferences.
• Billing contact details and transaction records associated with paid launches or advertising.

Information collected automatically

• Registration IP address, timestamps, device and browser information, requested pages, referrer, approximate location, and security logs.
• Authentication session data and cookies needed to sign in and protect forms.
• When analytics is enabled with appropriate controls: page views, navigation, interactions, device details, approximate geography, heatmaps, and session diagnostics.

Information from third parties and public sources

• Google account information when you choose Google Sign-In.
• Payment status and transaction identifiers from an external payment processor.
• Public website text, favicon, screenshots, metadata, and technical signals used for AI Autofill or imports.

3. How we use information

• Create accounts and provide authentication.
• Accept, moderate, schedule, publish, rank, and promote products.
• Process purchases, advertising, renewals, cancellations, refunds, and accounting.
• Enable voting, discussions, founder profiles, dashboards, and newsletters.
• Generate and improve AI-assisted product suggestions.
• Measure performance, diagnose errors, prevent fraud and abuse, and protect the service.
• Communicate about accounts, launches, payments, policy changes, and support.
• Comply with legal obligations and enforce our agreements.

4. Legal bases

Depending on your location and the activity, we rely on one or more of the following:

• Contract: to provide accounts, launches, purchases, and requested services.
• Legitimate interests: to operate, secure, improve, measure, and promote the platform, provided those interests are not overridden by your rights.
• Consent: for optional marketing and non-essential cookies or analytics where required.
• Legal obligation: for tax, accounting, fraud prevention, and lawful requests.

5. How information is shared

We may share information with service providers only as reasonably necessary for their function, including:

• web hosting, storage, database, security, email, and support providers;
• Google for Sign-In, Google Tag Manager, and Google Analytics when those tools are enabled;
• Microsoft Clarity when it is enabled;
• external payment processors for one-time purchases and recurring advertising subscriptions;
• browser automation, screenshot, AI, and content-processing providers used for Autofill;
• professional advisers, authorities, or counterparties where required for law, safety, claims, or a business transaction.

Public product pages, founder profiles, comments, votes, rankings, and submitted promotional information are visible to other users and search engines. We do not sell personal information for money.

6. Analytics and session tools

We plan to manage analytics tags through Google Tag Manager and may use Google Analytics and Microsoft Clarity. These services can process online identifiers, device and browser information, page activity, approximate location, interaction events, heatmaps, and session diagnostics.

Non-essential analytics storage will be controlled by consent where required. Do not enter sensitive or confidential information into public forms or content. See our Cookie Policy for details and controls.

7. Payment information

Payments will be completed on or through an external payment provider. The provider may collect card, bank, billing, fraud-prevention, and identity information under its own privacy notice. We generally receive transaction status, amount, currency, customer or subscription identifier, and limited billing details rather than full payment-card data.

8. Newsletter and marketing

Guests and account holders may subscribe to product updates, launches, and editorial emails. Where consent is required, marketing consent should be a separate, voluntary choice and not a condition of creating an account.

You can unsubscribe in account settings or through a link in any marketing email. We may retain a minimal suppression record so we do not accidentally resubscribe an address that opted out.

9. Data retention

We retain information only as long as reasonably necessary for the purposes above. Account and product data is generally kept while the account or listing remains active. Transaction and tax records may be retained for the legally required accounting period. Security logs and Autofill job data are kept for a limited operational period. Public comments or launch records may be preserved to maintain discussion and ranking integrity, subject to lawful deletion requests.

10. International data transfers

Providers may process information in countries other than yours. Where required, we use recognized transfer safeguards such as adequacy decisions, contractual clauses, or provider data-protection terms.

11. Security

We use reasonable technical and organizational measures, including password hashing, access controls, CSRF protection, input validation, and restricted administration. No online system is completely secure, so we cannot guarantee absolute security.

12. Your privacy rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing; receive a portable copy; withdraw consent; opt out of certain sharing or targeted advertising; and complain to a data-protection authority.

To make a request, contact [email protected]. We may need to verify your identity. Withdrawing consent does not affect processing that was lawful before withdrawal.

13. Children

SaaSLocator is intended for people legally able to use business and software services. It is not directed to children under 13, and we do not knowingly collect their personal data. Higher minimum ages may apply in some jurisdictions.

14. Changes to this Policy

We may update this Policy when our features, providers, payment flows, analytics, or legal obligations change. We will update the date above and provide additional notice for material changes where appropriate.

15. Contact

Privacy questions and requests can be sent to [email protected].