Privacy Policy

SaaSify is a business software platform operated by Sayge. We respect your privacy and are committed to handling personal information responsibly.

This Privacy Policy explains how information is collected, used, stored, and deleted when you visit the SaaSify website, create an account, use our products and modules, or contact our team.

SaaSify offers business tools, including point-of-sale (POS) and human resource management (HRMS) functionality. Depending on the modules you use, the platform may process information relating to business owners, employees, customers, suppliers, and other individuals.

By using SaaSify, you acknowledge that you have read this Privacy Policy. Where applicable law requires consent for particular processing activities, we will seek that consent separately.

The information we process depends on how you use SaaSify and which modules you enable.

We use information for purposes including:

• Creating and managing user accounts.
• Authenticating users and maintaining account security.
• Providing the SaaSify modules and functionality you select.
• Storing, processing, and displaying business information.
• Providing customer support and onboarding assistance.
• Monitoring application performance and diagnosing technical issues.
• Identifying crashes, errors, and reliability problems.
• Protecting the platform against misuse and unauthorised access.
• Meeting applicable legal obligations and resolving disputes.

We do not intentionally use business records or personal information for advertising profiles or behavioural advertising.

SaaSify uses Supabase as its backend database and authentication infrastructure.

Business records and other application data submitted through SaaSify are stored on Supabase-hosted servers. SaaSify is designed around server-side data storage rather than using the user's device as the primary persistent store for business records.

Access to stored information depends on the platform's functionality, account permissions, and applicable access controls.

Supabase and its underlying infrastructure providers may process information as necessary to provide hosting, database, authentication, backup, and related services.

The physical processing location of data depends on the configuration and hosting region of the relevant infrastructure. Please contact us if you require information about the applicable hosting region.

SaaSify relies on third-party providers to operate and maintain its services.

Current infrastructure and monitoring providers include:

• Supabase: Database hosting and email-based authentication.
• Firebase Analytics: Application usage analytics.
• Firebase Crashlytics: Crash reporting and diagnostic monitoring.

These providers may process information necessary to deliver their respective services.

Their processing activities are governed by their applicable terms, privacy policies, and contractual arrangements.

We do not intentionally transmit business-record contents or PII to Firebase Analytics or Crashlytics. We take reasonable steps to ensure that analytics events and crash reports do not contain such information.

Payments

If payment processing is enabled for a SaaSify plan or service, payment information may be processed by the relevant payment service provider.

Payment processing will be subject to the applicable provider's terms and privacy policy. We will update this section with the relevant provider and processing details when the payment integration is finalised.

We do not treat the business information or personal information you provide as publicly available information.

Information may be processed or disclosed in the following circumstances:

• To service providers that support SaaSify's operation.
• To authorised users and administrators within your business, according to the platform's functionality and access permissions.
• Where disclosure is required by applicable law or valid legal process.
• Where reasonably necessary to investigate security incidents, prevent misuse, or protect legal rights.
• In connection with a business restructuring or transfer, subject to applicable legal requirements.

We do not sell personal information to third parties.

SaaSify follows a seven-day retention period for account and associated business data following an account deletion or plan cancellation request.

Once the applicable deletion process is initiated:

1. The relevant account or subscription is marked for deletion.
2. Associated data is retained for up to seven days to allow the defined retention period to elapse.
3. At the end of the seven-day period, the associated data is scheduled to be permanently deleted from the applicable primary data stores.

Deletion may be subject to legal retention obligations or other requirements imposed by applicable law.

Copies held in backups, technical logs, or third-party systems may be subject to separate retention cycles and may not be erased at precisely the same time as the primary records. Where such copies exist, they should be handled in accordance with applicable retention and deletion requirements.

If you need assistance with account deletion, please contact us using the details in Section 14.

We take reasonable steps to protect information against unauthorised access, alteration, loss, or disclosure.

Security depends on the platform's implementation, infrastructure configuration, access controls, and operational practices. We aim to restrict access to authorised individuals and maintain appropriate safeguards for the information we process.

No method of transmission, storage, or processing is completely secure. We cannot guarantee absolute security.

Users are responsible for maintaining the confidentiality of their account credentials and ensuring that access is provided only to authorised individuals.

SaaSify uses Supabase infrastructure and is designed with attention to responsible data handling and security.

HIPAA compliance depends on more than the choice of database provider. It may require appropriate contractual agreements, technical configurations, administrative safeguards, access controls, monitoring, and operational procedures.

Where SaaSify is used in a context involving protected health information (PHI), such information must only be processed where the relevant service configuration, contractual arrangements, and applicable legal requirements permit it.

Users must not submit PHI or other sensitive personal information unless the relevant service is explicitly configured and authorised to support that use.

This Privacy Policy does not, by itself, constitute a certification or guarantee that every SaaSify module, integration, or customer deployment is HIPAA-compliant.

SaaSify may serve businesses located in different countries. Information may be processed in jurisdictions where our infrastructure and service providers operate.

The applicable hosting region and international transfer arrangements depend on the services and configurations used.

Where required, international transfers will be handled in accordance with applicable data-protection laws and relevant contractual safeguards.

Depending on your location and applicable law, you may have rights relating to your personal information, including the right to:

• Request access to personal information.
• Request correction of inaccurate information.
• Request deletion where applicable.
• Object to or request restriction of certain processing.
• Withdraw consent where processing is based on consent.
• Request information about how your personal information is handled.
• Lodge a complaint with the relevant regulatory authority.

These rights are subject to applicable legal conditions and exceptions.

If your information is managed through a business account, you may need to contact your business administrator first. Where Sayge processes information on behalf of a business, requests may need to be coordinated with that business.

To submit a privacy request, contact us using the details in Section 14.

SaaSify is primarily intended for businesses and their authorised users. It is not designed to be directed at children.

Business users must ensure that information about children is not submitted unless they have the necessary authority and lawful basis and the relevant use is permitted by the service and applicable law.

For questions, privacy requests, or concerns about how information is handled, contact:

SaaSify — a product of Sayge

Email: saasify@sayge.in
Phone: +91 87886 81499

Address:
Harsh Society,
Vivekanand Nagar,
Nagpur – 440015,
India

Website: https://sayge.in

We may update this Privacy Policy when our products, services, data practices, or legal requirements change.

The effective date at the beginning of this page will be updated when a revised policy is published. Where required by applicable law, we will provide additional notice or obtain consent for material changes.

We encourage users to review this page periodically.