Privacy Policy

SaaS List (“we”, “us”) operates this directory. This policy explains what personal data we collect, why we collect it, and the choices you have. It applies to this website and the services offered on it.

Data we collect

• Account data — your name, email address and a hashed password when you create an account. We never store passwords in plain text.
• Content you submit — listings, reviews, claims, reports and messages you send us.
• Usage & security logs — IP address, user agent, timestamps and request metadata used for rate limiting, abuse prevention and diagnostics.
• Analytics data — aggregate, cookie-less usage statistics (pages viewed, referring sites, approximate location) measured by NordTally, our own analytics platform hosted in the EU. See “Cookies & analytics” below.

How and why we use it

• To operate the directory: publish listings, moderate content, prevent abuse.
• To send transactional email (verification, password resets, listing status).
• To understand which pages and tools are useful so we can improve them.
• To comply with legal obligations and enforce our Terms of Service.

Under the GDPR, we rely on: performance of a contract (providing your account and the directory), legitimate interests (security, abuse prevention, improving the service), consent (analytics cookies where required) and legal obligation.

Cookies & analytics

We use one essential cookie to keep you signed in. Usage is measured with NordTally, our own analytics platform: the tracker sets no cookies, stores no identifiers and never retains raw IP addresses. You can block or delete cookies in your browser settings; the site will keep working, though you will not stay signed in.

Sharing

We do not sell personal data. We share data only with service providers who process it on our behalf: hosting (Hetzner, EU), transactional email (Sendaro), and payment processing (Stripe) when paid features are used. Analytics runs on our own EU-hosted infrastructure. Each processor is bound by contractual data-protection terms.

Retention

Account data is kept until you delete your account. Security logs are kept for up to 30 days. Published listings, reviews and reports remain while the directory is live; you can ask us to remove your content at any time.

Your rights

You have the right to access, correct, export or delete your personal data, and to object to processing based on legitimate interests. Email us to exercise any of these rights. You may also lodge a complaint with your local data-protection authority (in Denmark, Datatilsynet).

Security

We use HTTPS everywhere, hash passwords with Argon2, restrict administrative access and keep software up to date. No system is perfectly secure, but we take these obligations seriously.

Changes

If we make material changes to this policy we will update the date above and, where appropriate, notify registered users by email.

Contact

For privacy questions or data requests, contact privacy@saaslist.directory.