Your privacy matters to us. This policy explains in plain language what we collect, why we collect it and how you stay in control of your information.
Introduction
SaaSyTech Ltd (“SaaSyTech”, “we”, “us”) builds software that helps teams automate work and understand their data. This policy explains what personal information we collect when you visit our website or use our products, why we collect it and the choices you have.
It applies to our marketing website, our web application and our mobile apps. If you use SaaSyTech through your employer, your employer is usually the controller of the data you put into the workspace, and we process it on their behalf.
Information we collect
We collect only what we need to run the service and keep it safe. This falls into three groups.
- Information you give us: your name, work email, company, password and anything you enter when you contact support or complete a form.
- Information created by using the product: workspace content, workflow configurations, comments and the records your integrations bring in.
- Information collected automatically: device type, browser, IP address, pages viewed, referring site and approximate location derived from the IP address.
How we use your information
We use personal information to provide and improve SaaSyTech, and for no unrelated purpose. In practice that means:
- creating and securing your account and delivering the features you ask for;
- sending service messages such as receipts, security alerts and product notices;
- answering support requests and diagnosing problems;
- measuring how features are used so we can make them better;
- detecting abuse, fraud and security incidents;
- meeting our legal and accounting obligations.
Legal bases for processing
Where data protection law requires a legal basis, we rely on the following: contract (to deliver the service you signed up for), legitimate interests (to secure and improve the product, provided your rights do not override those interests), consent (for optional marketing email and non-essential cookies) and legal obligation (for tax, accounting and lawful requests).
You can withdraw consent at any time, and doing so does not affect processing that happened before you withdrew it.
Cookies and similar technologies
We use a small number of cookies. Essential cookies keep you signed in and remember your light or dark theme. Analytics cookies, which are only set if you accept them, tell us which pages are useful so we can improve them. We do not use advertising cookies and we do not sell data to ad networks.
You can change your choice at any time from the cookie settings link in the footer, or block cookies in your browser. Some parts of the product may not work without essential cookies.
How we share information
We never sell your personal information. We share it only in these situations:
- with service providers that host our infrastructure, send email, process payments or provide support tooling, under written contracts that limit their use of the data;
- with your workspace administrators, who can see account details for the people in their organization;
- with authorities when the law requires it, after we have checked that the request is valid and as narrow as possible;
- in a business transfer such as a merger, in which case we will tell you before your data is subject to a different policy.
International transfers
We operate in several regions, so your information may be processed outside the country where you live. When we transfer data out of the European Economic Area or the United Kingdom, we use approved safeguards such as the Standard Contractual Clauses and additional technical measures like encryption in transit and at rest.
Business and Enterprise customers can choose the region in which workspace content is stored.
Data retention
We keep personal information only as long as it is needed for the purposes above. Account data is kept while your account is active. When you delete your workspace, content is removed from live systems within 30 days and from encrypted backups within 90 days. Billing records are retained for seven years because tax law requires it. Support conversations are deleted after 24 months.
Security
We protect your data with encryption in transit (TLS 1.2 or higher) and at rest (AES-256), role-based access controls, mandatory multi-factor authentication for staff, regular third-party penetration tests and an annual SOC 2 Type II audit.
No system is perfectly secure. If we ever become aware of a breach that affects your personal information, we will notify you and the relevant authorities without undue delay and in line with the law.
Your rights and choices
Depending on where you live, you may have the right to:
- access the personal information we hold about you and receive a copy;
- correct information that is inaccurate or incomplete;
- delete your information, or restrict how we use it;
- object to processing based on legitimate interests, including direct marketing;
- receive your data in a portable, machine-readable format;
- lodge a complaint with your local data protection authority.
To use any of these rights, email our privacy team or use the export and delete tools in your account settings. We will respond within one month and may need to verify your identity first.
Children’s privacy
SaaSyTech is built for businesses and is not directed at anyone under 16. We do not knowingly collect personal information from children. If you believe a child has given us their information, contact us and we will delete it promptly.
Changes to this policy
We may update this policy as our product or the law changes. When a change is significant, we will email account owners and show a notice in the app at least 14 days before it takes effect. The date at the top of this page always shows when the policy was last revised, and earlier versions are available on request.
Contact us
If you have questions about this policy or how we handle your data, our Data Protection Officer is happy to help. You can reach the team using the details below, or through our contact page.