We sell software, not your data.

The short version

• This site sets no cookies and runs no third-party analytics, ad, or tracking scripts.
• The only personal information we collect is what you type into the early-access form.
• We use it for one purpose: to respond to you about SaaSoT.
• We never sell or share your information for advertising. Ever.
• We delete form submissions after 24 months, or sooner if you ask.

What we collect

The early-access form

If you submit the form, we store what you entered — email address, and optionally your name, company, role, segment, company size, and message — together with the page the form was on and your browser's user-agent string (which helps us filter out bots). Submitting the form is entirely optional; you can browse the whole site without telling us anything.

Server logs

Like essentially every website, our hosting infrastructure records standard request logs (including IP addresses) for security, abuse prevention, and rate limiting. These are operational logs with short, rolling retention — we don't use them to profile visitors.

Fonts

This site currently loads its typeface from Google Fonts, which means Google's servers receive your IP address when the font is fetched. No other third-party request is made from this site. We plan to self-host the font to remove even this.

What we don't do

No advertising or analytics cookies, no tracking pixels, no session recording, no fingerprinting, no social-media embeds, and no sale, rental, or sharing of your information with data brokers or advertisers — which also means there is nothing to "opt out" of under laws like the CCPA, because we don't sell or share personal information in the first place.

Why we're allowed to process it

For readers in the EU/UK: our lawful basis for processing form submissions is your consent and the steps you've asked us to take before entering into a contract (GDPR Art. 6(1)(a) and (b)); for operational security logs it's our legitimate interest in keeping the service secure (Art. 6(1)(f)).

How long we keep it

Early-access submissions are automatically deleted 24 months after they're received. If you become a customer, the information moves under our customer agreement instead. If you'd like your submission deleted sooner, one email is all it takes.

Who processes it for us

Your information is stored and handled by a deliberately short list of infrastructure providers, each bound by their own data-processing terms:

• Supabase — database hosting (United States)
• Railway — application hosting (United States)
• Google Workspace — email, when we correspond with you

Your rights

Wherever you are, you can ask us to show you the information we hold about you, correct it, delete it, or stop using it. Email privacy@saasot.net and we'll respond within 30 days. If you're in the EU/UK you also have the right to lodge a complaint with your supervisory authority — though we'd appreciate the chance to fix things first.

Changes

If this policy changes, we'll update this page and its effective date. If a change is material — a new category of data, a new purpose — we'll say so prominently rather than burying it.

Contact

Privacy questions: privacy@saasot.net
Everything else: hello@saasot.net