SaaSFound
Start free trial

Privacy policy

Last updated October 15, 2026

SaaSFound helps SaaS founders understand their Google Search Console data and decide which pages to fix and build. This policy explains what data we collect, why, who processes it, how long we keep it, and the choices you have.

Who we are

SaaSFound is operated by Jaya Srinivasan, India. We are responsible for the personal data described here. Contact us at hello@saasfound.app.

What we collect

Your account

Your email address, and a password if you sign up with email (stored hashed by our sign-in provider, never in plain text). If you sign in with Google, we receive your Google account's email address and account ID.

Data from Google, with your permission

  • Google Search Console (read-only access, webmasters.readonly): the list of sites your Google account can see, and for the sites you add, search performance data (searches, pages, clicks, impressions, click-through rate, position, by date, country and device), page indexing results from Google's URL Inspection, and your submitted sitemaps.
  • Google Analytics 4, only if you choose to connect it (read-only access, analytics.readonly): the list of your GA4 properties and key events, and for the property you pick, visits from organic search and the key events you choose (such as signups), per landing page and date.

We store a Google refresh token so the app can keep your data up to date. It is encrypted with AES-GCM before it is stored.

Your own PostHog project, only if you connect it

A read-only personal API key you provide (stored encrypted), and visits from organic search and the signup event you choose, per entry page and date.

Public pages of your website

We read the public text of your site's homepage and a few key pages (such as pricing or features), the same way a search engine would, to understand what your product does.

Billing

Payments are handled by Dodo Payments, which acts as the merchant of record. We never see or store your card details. We receive a customer ID, your plan, the status of your subscription and its dates.

How you use SaaSFound

Product analytics (which screens you open and which features you use, with our own account ID, never your site's data), error reports when something breaks, and a record of the emails we send you and your email preferences.

How we use it

  • To show you your dashboard, findings and next steps, keyword ideas and which pages bring signups.
  • To send the emails you can switch on or off in Settings: weekly and monthly summaries, alerts, and reminders when Google access needs reconnecting.
  • To run your trial and subscription, keep the service secure, and answer support requests.
  • To improve SaaSFound, using our own product analytics and error reports, never your Google data.

Google user data

SaaSFound's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

  • We use Google data only to provide and improve the features you see in SaaSFound.
  • We never sell Google data, and never use it for advertising.
  • We never use Google data to develop, improve or train AI or machine learning models.
  • We never send Google data (searches, page addresses, numbers or any other Search Console or GA4 data) to AI providers, analytics, error monitoring, email or keyword data providers. It is stored and processed only by our hosting and database providers, to run the app.
  • No person at SaaSFound reads your Google data unless you ask us to for support, or it is needed for security or to comply with the law.

AI

To understand what your product does and suggest searches worth targeting, an AI model from OpenAI reads the public text of your website's own pages (titles, headings, descriptions and short paragraphs, with web addresses and email addresses removed). It never receives your Google data. Under OpenAI's API terms, this data is not used to train their models, and we ask OpenAI not to store the requests.

Who processes data for us

We use these service providers. Each receives only what it needs:

  • Vercel (hosting) and Supabase (database and sign-in): store and serve the app and its data, including your Google data.
  • OpenAI (AI): public text from your website's own pages, as described above.
  • DataForSEO (keyword data): short search phrases, such as the keywords suggested for your product and phrases built from competitor names you typed. Never your Google data.
  • PostHog (our own product analytics): which screens and features are used, with our account ID. No Google data, no screen recordings.
  • Sentry (error monitoring): technical error reports with personal details and addresses removed.
  • Resend (email delivery): your email address and the emails we send you, which show totals and counts and never your page addresses or searches.
  • Dodo Payments (payments, merchant of record): your billing details and payment.

We do not sell personal data. Some of these providers are in the United States; where the law requires it, transfers rely on the providers' standard contractual clauses.

Cookies

The app uses cookies that keep you signed in, which it needs to work. It also uses PostHog, which stores an anonymous identifier in a cookie and in your browser's storage, so we can understand how the app is used.

How long we keep data

  • Your Google data and tokens are kept while the Google account is connected. Disconnecting it in Settings deletes its tokens and all data imported through it.
  • Deleting your account in Settings deletes your account and everything in it: sites, imported data, settings, email preferences and your plan.
  • Dodo Payments keeps payment records as the law requires. Analytics and error reports are kept by those providers for a limited period.

You can also remove SaaSFound's access to your Google account at any time at myaccount.google.com/permissions.

Your rights

Depending on where you live, you can ask to access, correct, export or delete your personal data, and object to or limit how we use it. Write to hello@saasfound.app. You can also complain to your local data protection authority.

Security

Data is sent over encrypted connections, Google tokens and third-party keys are encrypted at rest, and access to our database is restricted.

Children

SaaSFound is for businesses and is not meant for anyone under 16.

Changes

If we change this policy in a way that matters, we will tell you by email or in the app before the change applies, and ask for your consent where the law requires it.