1. Overview
SAASAF.AI, LLC ("we," "us," "our") operates the SAASAF.AI platform. This Privacy Policy explains how we collect, use, and protect information about you when you use our website and services.
We do not sell your personal data to third parties. We do not display advertising. Our business model is subscription fees and transaction fees — not data monetization.
2. Information We Collect
Information you provide directly:
- Account registration information (name, email address, company name)
- Product listings, pricing, and collateral uploaded by vendors
- Application information submitted by resellers
- Payment information processed through Stripe (we do not store card numbers)
- Communications you send us via contact forms or email
Information collected automatically:
- Log data (IP address, browser type, pages visited, timestamps)
- Device information (device type, operating system)
- Usage data (features used, clicks, session duration)
- Cookies and similar tracking technologies (see Section 5)
Information from third parties:
- Payment processing data from Stripe Connect
- OAuth login data if you connect via Google or LinkedIn
3. How We Use Your Information
We use your information to:
- Operate and improve the Platform
- Process vendor and reseller applications
- Facilitate commission tracking and payouts
- Send transactional emails (approvals, deal notifications, payout alerts)
- Send platform updates and the SAASAF Dispatch newsletter (only if subscribed)
- Detect and prevent fraud and abuse
- Comply with legal obligations
- Respond to support requests
We do not use your data for targeted advertising. We do not build advertising profiles.
4. How We Share Your Information
We share your information only in the following circumstances:
- Between vendors and resellers: When a reseller applies to a vendor program, relevant profile information is shared with that vendor. Vendor product details are visible to all resellers on the Platform.
- Stripe: Payment processing requires sharing necessary information with Stripe. See Stripe's Privacy Policy.
- Service providers: We use third-party services for hosting, email delivery, and analytics. These providers process data only as directed by us and under confidentiality obligations.
- Legal requirements: We may disclose information when required by law, court order, or to protect the rights and safety of SAASAF.AI, our users, or the public.
- Business transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction.
We never sell your data to advertisers, data brokers, or third-party marketers.
5. Cookies and Tracking
We use cookies and similar technologies to:
- Keep you logged in to your account
- Remember your preferences
- Understand how users navigate the Platform (analytics)
You can disable cookies in your browser settings, but this may affect Platform functionality. We do not use third-party advertising cookies.
6. Data Retention
We retain your account data for as long as your account is active. If you close your account, we retain data for up to 90 days before deletion, except where we are required by law to retain it longer (e.g., transaction records for tax purposes — typically 7 years).
Commission and transaction records are retained for a minimum of 7 years to comply with financial recordkeeping requirements.
7. Security
We implement industry-standard security measures including:
- TLS encryption for all data in transit
- Encryption at rest for sensitive data
- Role-based access controls limiting employee data access
- Regular security reviews and penetration testing
No system is perfectly secure. If you discover a security vulnerability, please contact us at info@saasaf.ai before disclosing publicly.
8. Your Rights
Depending on your location, you may have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Request that we correct inaccurate data
- Deletion: Request that we delete your personal data (subject to legal retention requirements)
- Portability: Request your data in a machine-readable format
- Opt-out: Unsubscribe from marketing communications at any time
To exercise these rights, contact us at info@saasaf.ai. We will respond within 30 days.
California residents have additional rights under the CCPA. EU/UK residents have rights under GDPR. Contact us for jurisdiction-specific requests.
9. Children's Privacy
The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at info@saasaf.ai and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (if you have an account) or by posting a prominent notice on the Platform. Your continued use of the Platform after the effective date constitutes acceptance of the updated policy.
Questions, concerns, or requests regarding this Privacy Policy: