Data controller
The controller is Saaspare. Contact us about any data protection matter at hello@saaspare.com. We are a small team and have not appointed a Data Protection Officer; privacy requests are handled directly by the people who run the site.
What we process and on what basis
We do not use personal data for advertising, profiling or automated decisions with legal or similarly significant effects, and we do not rely on consent for any processing — there are no analytics or marketing cookies to accept.
| Purpose | Lawful basis |
|---|---|
| Creating and running your account | Contract — needed to provide the account you asked for |
| Publishing reviews you submit | Contract — you asked us to publish them |
| Handling vendor submissions and listing claims | Contract, or steps taken at your request |
| Recording outbound referral clicks (salted IP hash, device type, referring page) | Legitimate interests — measuring referrals we are paid for and detecting click fraud |
| Moderation, spam and abuse prevention (including salted IP hashes on reviews) | Legitimate interests — keeping reviews genuine and the site secure |
| Server logs kept by our host | Legitimate interests — delivering and securing the website |
| Replying to your emails | Legitimate interests — responding to you |
| Keeping records required by law | Legal obligation |
Where we rely on legitimate interests, you can object at any time and we will stop unless we have compelling grounds to continue.
Processors
These providers process personal data on our instructions, under data processing agreements:
- Vercel Inc. — hosting, content delivery and server logs.
- Supabase Inc. — database, authentication and file storage.
We will update this list before adding a new processor.
Transfers outside the EEA and UK
Our processors may handle data in the United States and other countries. Those transfers are covered by the processors' data processing agreements, which incorporate the European Commission's Standard Contractual Clauses (and the UK addendum) where required.
Your rights
- Access — get a copy of the personal data we hold about you.
- Rectification — have inaccurate or incomplete data corrected.
- Erasure — have your data deleted, including your account and reviews.
- Restriction — ask us to pause using your data while a concern is resolved.
- Portability — receive data you gave us in a machine-readable format.
- Objection — object to processing based on legitimate interests.
- Complaint — lodge a complaint with a supervisory authority.
How to make a request
Email hello@saaspare.comfrom the address linked to your account, and say which right you want to exercise. It is free. We'll reply within one month, or tell you within that month if we need up to two more because the request is complex. If we can't confirm the request comes from you, we may ask for a little more information before acting on it.
Note that salted IP hashes can't be linked back to you by us, so we can't locate referral-click records from your name or email alone.
Complaints
We'd like the chance to fix a problem first, so please contact us. You also have the right to complain to the data protection authority where you live or work — in the UK, the Information Commissioner's Office; in the EU, your national supervisory authority.