Who is responsible
Saaspare is the controller of the personal data described here. For anything about this policy or your data, email hello@saaspare.com. Full operator details are on our legal notice.
What we collect
Browsing without an account. You can read the whole site without signing in. We don't use analytics or advertising trackers. Our hosting provider keeps standard server logs (such as IP address, browser type and the page requested) to deliver and secure the site.
When you click through to a vendor. Links marked as outbound pass through a redirect that records which tool was clicked, when, the page you clicked from (without its query string), your device type (desktop, mobile or automated), and a one-way salted hash of your IP address. We use this to count referrals and detect click fraud. The hash is not reversible to your IP address and we store no cookie for it.
If you create an account. Your email address and password (stored hashed by our authentication provider), and a display name. You can optionally add a job title, company name, industry, company size and a LinkedIn URL.
If you write a review. The review itself — ratings, text, pros and cons, how long and how often you have used the tool, and any tool you switched from — plus the role, industry and company size you choose to show. We also store a salted hash of your IP address at submission, used only to spot duplicate or abusive submissions.
If you represent a vendor. Details you submit about a product (company name, website, product information), and for a listing claim, your work email address and any note you add.
If you email us. Your email address and whatever you choose to include in the message.
Why we use it
- To run your account and let you sign in.
- To publish reviews you submit, after moderation, with the details you chose to show.
- To process vendor submissions and listing claims.
- To count outbound referrals, which is how we earn affiliate commissions.
- To keep the site secure and prevent spam, fraud and abuse.
- To answer messages you send us.
Cookies and browser storage
We only set cookies that are strictly necessary: session cookies that keep you signed in. If you never sign in, they aren't needed. We set no analytics or advertising cookies, so there is nothing to consent to.
Some conveniences are saved in your browser's local storage and never sent to us: an unsent review draft, your recent searches, and tools you've added to the compare tray. Clearing your browser data removes them.
When you follow a link to a vendor's website, that site — and any affiliate network it uses — may set its own cookies under its own privacy policy.
Who we share it with
We don't sell personal data and don't share it for advertising. We use a small number of service providers who process data on our behalf:
- Vercel — website hosting, content delivery and server logs.
- Supabase — database, user authentication and file storage.
Reviews you publish are public, shown with the display name and details you chose. Vendors can see published reviews of their product like anyone else and may reply publicly. We may disclose information where the law requires it.
International transfers
Our service providers may process data outside your country, including in the United States. Where data from the EEA or UK is transferred, it is protected by the providers' data processing agreements, which include the European Commission's Standard Contractual Clauses where required.
How long we keep it
- Account and profile data: for as long as your account is open.
- Reviews: while published, or until you ask us to remove them or delete your account.
- Listing claims and vendor submissions: for as long as needed to decide them and keep a record of that decision.
- Referral click records and IP hashes: for as long as needed to reconcile affiliate commissions and investigate abuse.
- Emails: for as long as needed to deal with your message.
Your rights
Depending on where you live, you can ask to access, correct, delete or export your personal data, and object to or restrict how we use it. Email hello@saaspare.comand we'll respond within one month. We may need to confirm the request comes from the account holder.
If you are in the EEA or UK, the lawful bases we rely on and how to complain to a supervisory authority are set out on our GDPR page.
Security
Data is encrypted in transit, passwords are never stored in plain text, and access to our database is restricted by role. No system is perfectly secure; if we become aware of a breach affecting your data, we will notify you and the relevant authority as the law requires.
Children
Saaspareis a resource for businesses and is not directed at children. We don't knowingly collect data from anyone under 16. If you believe a child has given us personal data, contact us and we'll delete it.
Changes to this policy
If we change how we handle personal data, we'll update this page and the date at the top. Significant changes will be highlighted on the site before they take effect.