Scope and controller
This Privacy Policy explains how the operator of SaaSift collects, uses, discloses, and protects personal information when you use the website, account, research workflows, and reports.
During early access, privacy questions and requests should be sent through the support contact that provided your SaaSift access. The SaaSift operator acts as the controller of account and product-use information described below.
Information we collect
- Account information: email address, internal user identifier, authentication status, and account timestamps. Authentication credentials are handled by our authentication provider; SaaSift does not store a readable copy of your password.
- Research inputs: domains, URLs, target country, and analysis settings you submit.
- Workspace content: saved opportunities, notes, comparisons, refresh schedules, exports, and feedback you choose to create.
- Research records: crawl results, public page information, provider data, generated analysis, evidence, scores, and workflow status associated with a requested analysis.
- Technical information: necessary session cookies and operational records such as IP address, request time, browser or device information, error details, and security events that may be produced by the service or its infrastructure providers.
SaaSift does not currently collect payment-card information because billing is not enabled.
Where information comes from
We receive information directly from you, automatically from your use of the service, from publicly accessible websites you ask us to analyze, and from configured search, traffic, technology, discussion, launch, and other research-data providers.
How we use information
We use information to:
- authenticate users and maintain accounts;
- perform requested analysis and generate research reports;
- save notes, preferences, feedback, and scheduled refreshes;
- operate, secure, debug, and improve the service;
- monitor provider usage, reliability, and cost;
- enforce our terms and comply with legal obligations.
Where data-protection law requires a legal basis, processing is based on performance of our agreement with you, our legitimate interests in providing and securing SaaSift, compliance with law, or consent where specifically requested. You may withdraw consent where processing relies on it, without affecting prior lawful processing.
How information is shared
We disclose information only as reasonably necessary for the following purposes:
- Service providers: hosting, database, authentication, workflow, monitoring, AI, and research-data providers processing information on our behalf.
- Requested research: domains, URLs, public page content, keywords, and research context may be sent to configured providers to complete an analysis.
- Legal and safety: information may be disclosed when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or secure the service.
- Business changes: information may be transferred as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate protections.
We do not sell personal information or share it for cross-context behavioral advertising. We do not intentionally provide your account email or private notes to research-data or AI providers unless needed to resolve a support request you initiate.
Cookies and tracking
SaaSift currently uses cookies and similar storage required for authentication, session continuity, security, and core product operation. These are not used to serve targeted advertising.
Because we do not currently use cross-site advertising trackers, SaaSift does not respond differently to legacy browser “Do Not Track” signals. Where required, we will honor legally recognized browser or device opt-out signals for activities covered by those signals.
Data retention
We retain account and workspace information while your account is active and as reasonably needed to provide the service. Research records may be retained to preserve reports, comparisons, evidence history, scheduled refreshes, security, and workflow reliability. Information may remain for a limited period in backups or where retention is required for legal, fraud-prevention, dispute, or security purposes. We delete or de-identify information when it is no longer reasonably needed for these purposes.
Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information, including access controls, server-side secret handling, row-level database protections, and encrypted transport where supported. No system is completely secure, and we cannot guarantee that information will never be accessed, lost, or altered without authorization.
International processing
SaaSift and its providers may process information in countries other than the one where you live. Where required, we use recognized transfer mechanisms or other appropriate safeguards for international transfers. Data-protection laws in those locations may differ from those in your jurisdiction.
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of personal information; object to certain processing; withdraw consent; or appeal a decision concerning a request. You may also have the right to complain to a local data-protection authority.
Submit a request through the support contact supplied with your SaaSift access. We may need to verify your identity and authority before completing a request. We will not discriminate against you for exercising applicable privacy rights.
Children’s privacy
SaaSift is a business research service and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us so we can review and delete it where appropriate.
Changes to this policy
We may update this policy to reflect changes in the service, providers, or applicable law. We will update the date at the top and provide reasonable notice of material changes through the service or the contact associated with your account.
