Privacy Policy

Your trust and data security are our top priorities. Learn how we handle your personal information and SaaS submission data with complete transparency.

GDPR Compliant
CCPA Compliant
Zero Data Selling
Last updated: September 22, 2026 — Version 1.0

This Privacy Policy explains how ListingSaaS ("we", "us", or "our") collects, uses, protects, and discloses information when you use our SaaS directory submission platform. We are committed to transparency and compliance with global privacy regulations, including GDPR and CCPA.

1. Information We Collect

We collect only the information necessary to fulfill our directory submission services and provide an exceptional user experience:

  • Account Data: When you sign in using email or Google OAuth (managed securely via Better Auth), we receive your name, email address, and profile picture.
  • SaaS Submission Details: To submit your product to curated directories, you provide details about your software: product name, website URL, tagline, long and short descriptions, target categories, keywords, logos, and public social/contact links.
  • Billing Information: Payments are processed by Whop as our Merchant of Record. ListingSaaS never receives or stores your full credit card number, CVV, or banking credentials. Whop processes payment data under strict PCI-DSS Level 1 compliance.
  • Technical & Diagnostics Data: We collect standard technical logs including IP addresses, browser user agent, operating system, and diagnostic metrics via Sentry and PostHog.

2. How We Use Your Information

We process your data strictly for legitimate business and fulfillment purposes:

  • Order Fulfillment: Our team uses the product details and assets you provide to manually submit your SaaS to directories according to your purchased package.
  • Submission Proof: We capture verifiable screenshots of each completed submission and store them in your private dashboard for auditing.
  • Support & Communication: We send submission completion reports, order updates, and customer support messages via email and Crisp chat.
  • Platform Health & Security: We analyze aggregated, anonymized usage telemetry to maintain stability, prevent fraudulent submissions, and fix software defects.

3. Third-Party Sub-Processors

We work with vetted service providers who process data strictly under our contractual instructions:

  • Whop: Merchant of Record, payment processing, tax compliance, and fraud detection.
  • Cloudflare R2: High-security distributed cloud object storage for logos and verified submission screenshots.
  • Crisp: Customer messaging, live chat support, and helpdesk ticketing.
  • PostHog: Anonymous application telemetry and product analytics (EU Cloud hosted).
  • Sentry: Error tracking and exception monitoring to identify and resolve software bugs.
  • Target Directories: By ordering our service, you instruct us to transmit your public SaaS details (product name, URL, description, category, and public screenshots) to target public software directories for publication.

We never sell your data: ListingSaaS does not sell, lease, or monetize your personal information or submitted product data to data brokers, ad networks, or marketing agencies.

4. Data Retention & Security

We maintain industry-standard administrative, technical, and physical safeguards:

  • All communication is encrypted using modern TLS (HTTPS) in transit.
  • User authentication tokens and sensitive configuration parameters are encrypted at rest.
  • Your SaaS submission records and screenshot proofs are retained while your account remains active so you maintain an enduring audit log of all completed directory listings. You can request deletion at any time.

5. Your Privacy Rights (GDPR & CCPA)

Regardless of your geographic location, you enjoy full control over your personal data:

  • Right of Access: Request an export of all personal data and submission records we hold.
  • Right to Rectification: Correct or update inaccurate account information or SaaS details.
  • Right to Erasure ("Right to be Forgotten"): Request permanent deletion of your account, submission records, and stored screenshots.
  • Right to Object / Restrict: Restrict non-essential telemetry or communications.

6. Cookies and Tracking

We use strictly necessary cookies to keep you signed in securely and maintain session continuity across page reloads. We also use privacy-first, cookie-less analytics via PostHog to gauge site traffic and funnel performance without invasive cross-site tracking.

7. Contact Us

If you have questions regarding this Privacy Policy or wish to exercise your data rights, contact our privacy team directly:

Have questions about our privacy practices?

Our team is ready to assist with any questions, data export requests, or inquiries about how your SaaS details are submitted.