Privacy Policy

Solvidity LLC ("we," "us," or "our") operates SaaSalyst ("the Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our scanning service.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

Information you provide:

• URLs you submit for scanning — used to perform publicly accessible web page analysis
• Email address — if you create an account, subscribe to notifications, or purchase a report
• Contact form submissions — name, email, and message content
• Payment information — processed securely by our payment processor (Stripe); we do not store credit card numbers

Information collected automatically:

• Usage data — pages visited, features used, timestamps, referring URLs
• Device information — browser type, operating system, screen resolution
• IP address — used for rate limiting, security, and approximate geographic location
• Cookies and similar technologies — for session management and analytics

• To provide the Service — scanning publicly accessible web pages and generating business readiness reports
• To process transactions — handling payments and delivering purchased reports
• To communicate with you — responding to inquiries, sending transactional emails (scan results, purchase confirmations)
• To improve the Service — analyzing usage patterns and aggregated scan data to enhance our analysis capabilities
• To maintain security — detecting abuse, preventing fraud, enforcing rate limits

Paid reports may include content generated with the assistance of third-party artificial intelligence services. When you submit a URL for a paid scan, your scan data (URL, publicly detected signals, and scan results) may be processed by third-party AI providers to generate analysis and recommendations. AI-generated content may be reviewed or supplemented by human analysis. We do not send your email address, payment information, or account credentials to AI providers.

With your explicit consent, we may send you marketing emails including weekly score digests, score drop alerts, product updates, and tips. You can opt out of marketing emails at any time by clicking the "Unsubscribe" link in any marketing email or by contacting us.

Transactional emails — such as scan results, purchase confirmations, and account notifications — are not marketing and will continue regardless of your marketing preferences.

We comply with the CAN-SPAM Act. All marketing emails include our physical mailing address and a clear unsubscribe mechanism. Unsubscribe requests are honored within 10 business days.

We may use aggregated, de-identified scan data to improve our scoring models, publish industry benchmarks, and enhance the Service. Aggregated data cannot be used to identify any individual user or specific website.

If you wish to opt out of aggregate data use, contact us.

We share information with the following third-party service providers, solely for the purposes described:

• Supabase — database hosting and authentication
• Vercel — website hosting and serverless functions
• Stripe — payment processing
• Resend — transactional email delivery
• Inngest — background job processing for scan orchestration
• Google PageSpeed Insights API — performance and accessibility analysis as part of our scanning process
• Anthropic — AI-powered analysis for paid report generation
• PostHog — product analytics including usage patterns, feature adoption, and session replay
• Microsoft Clarity — heatmaps and session replay for usability improvement
• Sentry — error tracking and performance monitoring

Each provider processes data according to their own privacy policies. We do not sell, rent, or trade your personal information to any third party.

Structured scan results (detection signals, scores, and analysis) are retained for the duration of your account so you can revisit them. Account data is retained for the duration of your account.

When processing a scan, SaaSalyst temporarily retains a copy of publicly accessible HTML content (excluding images and embedded media, which are stripped and not retained). Raw HTML is retained for up to 90 days to support service quality and scoring calibration, after which it is automatically deleted.

If you request deletion of your account and associated data, contact us and we will process your request within 30 days.

We do not store your source code, credentials, or any non-public information. SaaSalyst only analyzes publicly accessible web pages.

We use the following types of cookies:

Essential cookies — session management and authentication (Supabase). Required for the Service to function.

Analytics cookies — PostHog and Microsoft Clarity use cookies and similar technologies to collect usage data, including session recordings and interaction patterns, for the purpose of improving the Service.

You may disable cookies in your browser settings, though some features of the Service may not function properly without essential cookies. The Service does not respond to "Do Not Track" browser signals, as there is no industry-standard method for honoring these signals across analytics providers.

The Service is hosted in the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your personal data
• Portability — request your data in a machine-readable format
• Opt-out — opt out of marketing communications at any time
• Opt-out of aggregate data use — request exclusion from aggregated benchmarking data

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect and how it is used, the right to request deletion, and the right to opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information as defined under the CCPA. To exercise your rights, contact us.

European Economic Area Residents (GDPR)

If you are located in the EEA, our legal bases for processing your personal data are: contract performance (providing the Service you requested), legitimate interest (analytics, security, service improvement), and consent (marketing communications). You may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us. We will respond within 30 days.

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us and we will promptly delete the information.

We implement commercially reasonable security measures to protect your data, including encryption in transit (TLS), access controls, and regular security reviews. No method of electronic storage or transmission is 100% secure, however, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy, contact us.

Solvidity LLC

1500 N Grant St #7963, Denver, CO 80203

support@saasalyst.com