Privacy Policy

Account information. When you sign up, we collect your email address and authentication identifiers. If you sign in with Google or Apple, we receive basic profile information (such as your email) from that provider. Passwords are handled by our authentication provider and are stored hashed — we never see them in plain text.

Listing information. The startup name, description, destination URL, logo image, and tile position you submit. This information is intentionally public and displayed on the grid.

Payment information. Payments are processed by Stripe. We receive confirmation of a payment, subscription status, billing period, and Stripe identifiers so we can keep your listing active. We never receive or store your full card number, CVC, or bank details.

Usage and analytics. We count clicks on listings and featured placements in aggregate so owners can see how their listing performs. We also process standard technical data (such as IP address, browser type, and timestamps) that is inherent to serving web requests and protecting the service from abuse.

Support submissions. If you contact us through the support form, we collect the email address, topic, message, optional listing reference, and any screenshots or files you attach.

• to create and secure your account and authenticate you;
• to publish, display, and maintain your listing or featured placement;
• to process payments, renewals, and cancellations, and to send billing-related messages;
• to provide click analytics to listing owners;
• to respond to support requests and feedback;
• to detect, prevent, and investigate fraud, abuse, and breaches of our Terms;
• to comply with legal obligations and enforce our agreements.

We do not sell your personal information, and we do not share it with advertisers or data brokers.

Where data-protection law such as the GDPR applies, we process personal data on the basis of: performance of a contract (running your account and listing), legitimate interests (security, abuse prevention, product improvement), consent (where we ask for it), and legal obligation (tax and accounting records).

We rely on a small number of providers who process data on our behalf:

• Stripe — payment processing, subscriptions, and invoicing.
• Our cloud backend provider — database, authentication, and file storage for logos and support attachments.
• Our hosting/CDN provider — serving the website and its assets.

These providers may process data outside your country. We only share what they need to deliver their service, and they are bound by their own contractual and privacy obligations.

SaaSBoard does not use advertising cookies or third-party ad trackers. We use essential browser storage only: a session token so you stay signed in, and a small preference value storing your light/dark theme choice. Blocking this storage will prevent you from signing in.

Click counts on listings are recorded as anonymous aggregate totals, not as personal browsing profiles.

When you click a listing, we append standard campaign parameters (such as a UTM source) to the outbound link so the listing owner can identify SaaSBoard traffic in their own analytics. Once you leave, the destination website’s own privacy practices apply.

Your listing’s name, description, logo, and link are public by design and can be seen, indexed, and copied by anyone. Please do not put personal information in these fields unless you intend it to be public. Your email address and billing details are never shown publicly.

We keep account data for as long as your account exists. Listing data is retained while the listing is live and for a limited period afterwards so it can be restored or renewed. Payment and invoice records are retained for as long as required by tax and accounting law. Support submissions and attachments are kept for as long as needed to resolve the issue and maintain a record of it. Aggregate, non-identifying analytics may be kept indefinitely.

Data is transmitted over HTTPS, access to the database is restricted by row-level access rules, and logo and support attachments are held in private storage. No system can be guaranteed perfectly secure, but we take reasonable technical and organisational measures to protect your information, and we will notify affected users of a serious breach as required by law.

You can access and edit your listing details and cancel subscriptions from your dashboard at any time. Depending on where you live, you may also have the right to request access to, correction of, a copy of, or deletion of your personal data, to object to or restrict certain processing, and to complain to your local data-protection authority.

To make a request — including full account and data deletion — use the support form and select “General Question / Other”. We will respond within a reasonable time. Note that we may need to retain certain billing records to meet legal obligations.

SaaSBoard is not intended for children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us with data, contact us and we will delete it.

We may update this policy as the service evolves. The “last updated” date above will always reflect the current version, and continued use of SaaSBoard after a change means you accept the updated policy.

Privacy questions can be sent through the support form.