We're a Danish company governed by the GDPR. This policy explains what we collect, why, and what rights you have. If something here is unclear, email privacy@saasboost.app.
1. Data we collect
- Account data: name, email, password hash, role, profile bio.
- Verification data: ID document (for sellers), retained encrypted for 12 months then deleted.
- Listing + content data: anything you publish on the platform.
- Tracking data: referral IDs, click timestamps, conversion amounts. We do not collect end-user emails or IPs via the saasboost SDK.
- Operational data: support tickets, login logs (retained 90 days), error reports.
2. Why we collect it
To operate the service: authenticate you, show your listings to others, route payouts, and meet our legal obligations (tax, anti-fraud, KYC where applicable).
3. Who we share with
- Stripe — payment processor for escrow + payouts.
- AWS (eu-central-1) — hosting.
- Postmark — transactional email.
- Plausible — privacy-respecting analytics, no cookies, IP anonymized.
We do not sell or share your data for advertising. Ever.
4. Cookies
We use one first-party cookie (saasboost_token) for authentication. The saasboost SDK on customer sites uses a first-party ref cookie scoped to that customer's domain. No third-party cookies anywhere.
5. Your rights
Under GDPR you have the right to access, correct, port, restrict, object to processing, and erase your personal data. Most of these you can do yourself from the Settings page. For the rest, email privacy@saasboost.app and we'll respond within 30 days.
6. Data retention
- Account data: while your account is active, plus 30 days after deletion.
- Financial records: 5 years (Danish bookkeeping act).
- Login logs: 90 days.
- Support tickets: 24 months.
7. International transfers
All servers are in the EU. The only cross-border transfer is to Postmark (US), covered by Standard Contractual Clauses and supplementary measures.
8. Children
SaaSBoost is not intended for anyone under 18. We do not knowingly collect data from children. If you believe we have, email us and we'll delete it.
9. Changes
We'll notify you by email of material changes at least 30 days before they take effect. Non-material clarifications may be made without notice.
10. Complaints
You have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet). We'd appreciate the chance to fix things first — email privacy@saasboost.app.