Legal
Privacy notice
1. Who we are
The controller of the personal data described here is SIA “DryBits”, the operator of saasland.io, registered at Irbenaju iela 19-1, Upesciems, Garkalnes nov., LV-2137, Latvia. A monitored privacy contact will be confirmed before this notice is final. The planned contact is support@saasland.io (mailbox being set up).
2. What this notice covers
This notice covers the public website at saasland.io, its early-access list, and saasland.io developer accounts in the portal at app.saasland.io.
It does not cover the applications our customers build and run on saasland.io. For those, the developer of the application decides how your data is used and is responsible for it; we process it on their behalf. Please read that application’s own privacy notice and contact its developer.
3. The early-access list
When you submit the early-access form, we store exactly these items:
| Item | Required | Why |
|---|---|---|
| Email address | Yes | To contact you about early access. Stored in lower case. |
| “What are you building?” text | No | To understand which capabilities matter and to prioritise invitations. Leave it empty if you prefer. |
| Consent and consent timestamp | Yes | The date and time you ticked the consent box, as a record that you agreed to be contacted. |
We also store when the entry was created and last updated, and the fixed label source: "web" showing that the sign-up came from this website. If you sign up again with the same email address, we update the consent time and project text instead of creating a second entry.
Please do not include confidential information or personal information about other people in the optional text field.
4. Developer accounts (app.saasland.io)
When you create and use a saasland.io account, we process:
- Account details: your name and email address. Your password is managed by Amazon Cognito, our sign-in service; we do not store it ourselves. If you sign in with Google, we receive your name, email address and Google account identifier from Google.
- Agreement records: which version of the Terms you accepted and when, and whether you opted in to occasional product news.
- Organisation data: organisations you create or join, your role, and invitations you send (including the invitee’s email address).
- Security and activity records: sign-in sessions, your IP address (used to protect sign-in against abuse) and an audit trail of actions in your organisation (who did what, and when).
- Billing data: once paid hosting is available, your billing profile (name, address, VAT number), top-ups, statements and invoices. Card details are handled by our payment provider (Stripe); we never receive your full card number.
- Support messages: what you send us and our replies.
The portal uses only strictly necessary cookies: __Host-sl_session (keeps you signed in), __Host-sl_csrf (protects your requests from forgery) and __Host-sl_oauth (temporary, during Google sign-in). It stores your theme choice (saasland-theme) and last selected organisation (saasland-portal-org) in your browser’s local storage. There are no analytics or advertising cookies.
5. This website
- No cookies, analytics, advertising pixels or third-party trackers.
- No fonts, scripts or images loaded from other companies’ servers.
- If you use the light/dark switch, your choice is saved in your browser’s local storage under
saasland-theme. It never leaves your device.
Like any website, our hosting infrastructure (Amazon Web Services) may record standard request information, such as IP address, time and browser type, for security and abuse prevention. This is not added to the early-access list. The retention period of these request logs is to be confirmed.
6. Why we use your data and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Early-access list and invitations | Your consent, Art. 6(1)(a) |
| Providing your account and the Platform | Performance of our contract with you, Art. 6(1)(b) |
| Security, abuse prevention and audit trails | Our legitimate interest in protecting the Platform and its users, Art. 6(1)(f) |
| Accounting and tax records | Legal obligation, Art. 6(1)(c) |
| Optional product news | Your consent, Art. 6(1)(a) |
7. Who processes it and where
- Amazon Web Services: hosting, storage and sign-in (Amazon Cognito) in the Frankfurt region (eu-central-1). The website is delivered through Amazon CloudFront, whose edge locations can be outside the EU.
- Google: only if you choose to sign in with Google.
- Stripe: payment processing for hosting top-ups, once paid hosting is available.
- GitHub: only if you connect repositories through the saasland.io GitHub App.
If we use an email delivery service, it will be listed here before use. The complete list of processors and the safeguards for any transfers outside the EU are to be confirmed. We do not sell your data or share it with marketers.
8. How long we keep it
| Data | Kept for |
|---|---|
| Early-access list entry | Until you withdraw consent or ask for deletion, or the early-access programme ends (maximum period to be confirmed) |
| Account details | While your account exists; deleted within 30 days after you delete your account |
| Sign-in sessions | Until they expire (at most 30 days), then 7 more days |
| Audit records | 2 years |
| Terms acceptance records | Life of your account plus 3 years (to be confirmed) |
| Invoices and accounting records | 10 years from the end of the financial year (to be confirmed per jurisdiction) |
| Backups | Expire on their own schedule, within 90 days |
9. Your rights
You can ask for a copy of your personal data, its correction or deletion, restriction of its use, or a portable copy, and you can object to processing based on legitimate interests. You can withdraw consent at any time, for example by replying to any of our emails or writing to support@saasland.io; this does not affect contact made before you withdrew. We may need to verify your identity before acting on a request.
You also have the right to complain to your local data protection supervisory authority.
10. Changes to this notice
The version and date at the top of this page change whenever we update this notice. We will tell account holders about material changes by email or in the portal.