Privacy policy
We sell software, not your data.
This page explains what information this website collects, why, how long we keep it, and how to reach us about it. It's written to be read, not skimmed past. Effective date: August 1, 2026.
The short version
- This site sets no cookies and runs no third-party analytics, ad, or tracking scripts.
- The only personal information we collect is what you type into the early-access form.
- We use it for one purpose: to respond to you about SaaSoT.
- We never sell or share your information for advertising. Ever.
- We delete form submissions after 24 months, or sooner if you ask.
What we collect
The early-access form
If you submit the form, we store what you entered — email address, and optionally your name, company, role, segment, company size, and message — together with the page the form was on and your browser's user-agent string (which helps us filter out bots). If you arrived through a campaign link, the submission also includes the campaign tags (UTM parameters), the first page you landed on, and the site that referred you — held in your browser's session storage for the duration of your visit and sent only if you choose to submit the form. Submitting the form is entirely optional; you can browse the whole site without telling us anything.
Site analytics (built in-house, cookieless)
We measure site usage with our own minimal analytics — not Google Analytics or any
third-party service. It records the page viewed, the referring site, campaign tags,
a coarse screen size (mobile/tablet/desktop), and an anonymous visitor identifier
derived with a salt that changes every day — so we can count daily visitors, but
cannot recognize you across days, and the identifier cannot be traced back to you.
Your IP address and browser details are never stored by this system, and nothing is
placed on your device — unless you opt out of analytics by visiting any page with
?notrack=1 in the address, in which case a single opt-out flag is saved
in your browser so we remember not to count you (?notrack=0 removes it).
Server logs
Like essentially every website, our hosting infrastructure records standard request logs (including IP addresses) for security, abuse prevention, and rate limiting. These are operational logs with short, rolling retention — we don't use them to profile visitors.
Fonts
This site's typeface is self-hosted on our own servers. Loading this website makes no requests to any third party — no fonts, no scripts, no images, nothing leaves our infrastructure.
What we don't do
No advertising or analytics cookies, no tracking pixels, no session recording, no fingerprinting, no social-media embeds, and no sale, rental, or sharing of your information with data brokers or advertisers — which also means there is nothing to "opt out" of under laws like the CCPA, because we don't sell or share personal information in the first place.
Why we're allowed to process it
For readers in the EU/UK: our lawful basis for processing form submissions is your consent and the steps you've asked us to take before entering into a contract (GDPR Art. 6(1)(a) and (b)); for operational security logs it's our legitimate interest in keeping the service secure (Art. 6(1)(f)).
How long we keep it
Early-access submissions are automatically deleted 24 months after they're received. If you become a customer, the information moves under our customer agreement instead. If you'd like your submission deleted sooner, one email is all it takes.
Who processes it for us
Your information is stored and handled by a deliberately short list of infrastructure providers, each bound by their own data-processing terms:
- Supabase — database hosting (United States)
- Railway — application hosting (United States)
- Google Workspace — email, when we correspond with you
Your rights
Wherever you are, you can ask us to show you the information we hold about you, correct it, delete it, or stop using it. Email privacy@saasot.net and we'll respond within 30 days. If you're in the EU/UK you also have the right to lodge a complaint with your supervisory authority — though we'd appreciate the chance to fix things first.
Changes
If this policy changes, we'll update this page and its effective date. If a change is material — a new category of data, a new purpose — we'll say so prominently rather than burying it.
Contact
Privacy questions: privacy@saasot.net
Everything else: hello@saasot.net
Early access
Become a source-of-truth early partner.
Tell us where you're coming from and we'll be in touch. No spam, ever.