Privacy Policy
Last updated October 30, 2026. We collect as little as we can, use it only to run One Dollar SaaS, and never sell it.
1. Who we are
One Dollar SaaS is operated by [LEGAL ENTITY NAME], [COUNTRY] is responsible for the personal data described here. Contact: hello@onedollarsaas.app.
2. What we collect
When you browse (no account needed):
- Basic technical data your browser sends: IP address, browser type, pages visited, referring page. Used for security, rate limiting and aggregate statistics.
- Clicks to listed apps, counted per app and per day. Used to show popularity and, later, to give makers their numbers. Not tied to your identity.
- Apps you save, stored in your own browser (local storage) until you sign in.
When you sign in:
- Your email address, used to send sign-in codes and messages about your listings, claims and reviews.
- Anything you add: name, X/GitHub handles, saved apps, reviews and replies.
- Session records (a random session ID, browser user agent, expiry), so you stay signed in and can be signed out.
When you list or claim an app: the listing details you submit, reviewer access notes you choose to give us (seen only by our reviewers), and claim records (method, domain email used, verification result).
When you request removal or contact us: your name, email and message.
Newsletter: your email and where you signed up, only if you subscribe.
We don’t collect passwords, and we don’t process payments. Payments happen on makers’ own sites.
3. Why we use it (and our legal basis)
- To run the service you asked for: sign-in, listings, reviews, saved apps, claims (contract).
- To keep the site safe and working: security, abuse prevention, rate limits, debugging, aggregate statistics (legitimate interests).
- To verify listings: checking apps, and rechecking public pricing pages and uptime (legitimate interests).
- To send the newsletter: only with your consent, which you can withdraw any time.
- To meet legal obligations, when required.
4. Cookies and local storage
We use a small number of strictly necessary cookies: two to keep you signed in (a short-lived access token and a longer-lived refresh token). We use local storage to remember apps you save before signing in. We don’t use advertising or cross-site tracking cookies. If we add analytics, we’ll prefer privacy-friendly tools and update this policy (and ask for consent where the law requires it).
5. Who processes data for us
We use trusted providers to run the site. They process data only on our instructions:
- Hosting for the website (Vercel) and for our servers and database (our VPS provider)
- Email delivery (ZeptoMail by Zoho)
- File storage for logos, screenshots and backups (Cloudflare R2)
- If enabled: an AI provider that reads makers’ public pricing pages to help detect price changes. No user personal data is sent to it.
- If enabled: analytics and error-monitoring tools
Some providers may process data outside your country, including in the United States. Where required, we rely on appropriate safeguards such as standard contractual clauses.
6. What’s public
Listings, maker names and handles you add to a listing, reviews (with the name on your profile) and maker replies are public. Your email address is never shown publicly.
7. How long we keep it
- Sign-in codes expire after 10 minutes and are deleted automatically; sessions expire after up to 30 days.
- Account data: while your account exists. Deleted within 30 days of a deletion request, except where we must keep some records (for example, to prevent abuse).
- Listings and their review history: while live, and for a reasonable period after removal for our records.
- Server logs: up to 30 days. Backups: up to 30 days.
- Newsletter: until you unsubscribe.
8. Your rights
Depending on where you live (for example under GDPR, UK GDPR or CCPA), you can ask to access, correct, export or delete your personal data, object to or restrict certain processing, and withdraw consent. You can edit your profile any time in your account. For anything else, email hello@onedollarsaas.app; we’ll respond within 30 days. You can also complain to your local data-protection authority.
We don’t sell or share personal data for targeted advertising.
9. Security
We use HTTPS everywhere, store sign-in codes and assistant (MCP) tokens only in hashed form, keep sessions in secure, http-only cookies, and limit access to our systems. No service can guarantee perfect security; if a breach affects you, we’ll tell you as the law requires.
10. Children
The site isn’t meant for children under 16, and we don’t knowingly collect their data. If you think a child has given us data, contact us and we’ll delete it.
11. Changes
We’ll update this policy as the site changes and update the date at the top. For significant changes, we’ll notify you on the site or by email.