Privacy Policy

This Privacy Policy explains how SaaS Starter ("we," "us," or "our") handles personal information when you visit our website, create or use an account, purchase or manage a subscription, contact us, or otherwise use our services. It does not govern third-party products or websites that have their own privacy notices.

We collect information you provide, information generated through your use of the service, and limited information received from service providers.

• Account information, such as your name, email address, profile image, password hash, email-verification status, and linked sign-in provider.
• Authentication and security information, such as session identifiers, IP address, user agent, verification records, and rate-limit records.
• Subscription and billing information, such as your Stripe customer identifier, plan, subscription status, billing interval, and transaction references. Payment card details are collected and processed by Stripe, not stored by us.
• Service information, such as credit balance, credit history, account settings, support communications, and actions needed to operate and secure the service.
• Usage and device information collected by optional analytics services when they are enabled, including browser, device, approximate location derived from IP address, pages viewed, and interaction data.

We use personal information to provide and maintain the service, authenticate users, send verification and password-reset messages, manage subscriptions and credits, process support requests, prevent abuse, troubleshoot problems, understand service performance, comply with legal obligations, and enforce our Terms of Service. We do not sell personal information or use it for cross-context behavioral advertising.

Where applicable law requires a legal basis, we process information as necessary to perform our contract with you, pursue legitimate interests such as security and service improvement, comply with legal obligations, and obtain consent where required. You may withdraw consent at any time without affecting processing already completed.

We use essential cookies or similar storage to keep you signed in, remember language preferences, protect account flows, and maintain security. If Microsoft Clarity or Google Analytics is configured, those services may set additional cookies or collect similar identifiers to help us understand use of the service. Where required, we will request consent before activating non-essential technologies. You can also control cookies through your browser settings, although disabling essential cookies may prevent account features from working.

We disclose information only as needed to operate the service, complete transactions, comply with law, protect rights and safety, or complete a business transfer. Our providers may include cloud hosting and database services, Better Auth and Google for authentication, Stripe for payments and subscriptions, Resend or Cloudflare Email Service for transactional email, Cloudflare Turnstile for abuse prevention, Sentry for configured error monitoring, and Microsoft Clarity or Google Analytics when configured. These providers process information under their own terms and privacy commitments. We may also disclose information when legally required or with your direction.

We and our providers may process information in countries other than where you live. Where required, we use recognized safeguards for international transfers, such as adequacy decisions, standard contractual clauses, or another lawful transfer mechanism.

We retain information for as long as needed to provide the service, maintain security, resolve disputes, enforce agreements, and meet legal, tax, and accounting obligations. Session, verification, rate-limit, and webhook records may be retained for shorter operational periods. When you delete your account, associated application data is deleted or de-identified unless we must retain particular records by law, for fraud prevention, or to establish or defend legal claims. Active subscriptions must be canceled or otherwise reach a terminal state before account deletion can be completed.

We use reasonable administrative, technical, and organizational measures designed to protect personal information, including access controls, encrypted transport, password hashing, session controls, rate limiting, and restricted provider credentials. No system is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and notify us if you suspect unauthorized account access.

Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of your information; object to certain processing; withdraw consent; or appeal a decision. You may update profile information and request account deletion from account settings. You may also contact us to exercise a right. We may verify your identity and may deny or limit a request where permitted by law. You may complain to your local data-protection authority. We will not discriminate against you for exercising a privacy right.

The service is not directed to children under 13, or a higher minimum age where local law requires it, and we do not knowingly collect their personal information. If you believe a child has provided information to us, contact us so we can investigate and delete it where appropriate.

We may update this policy to reflect changes to the service, our practices, or applicable law. We will post the revised policy with a new effective date and provide additional notice when required. Material changes apply prospectively unless law permits otherwise.

SaaS Starter is responsible for the personal information described in this policy. For privacy questions or requests, contact us at support@325810.xyz.