Privacy Policy

Effective Date: March 4, 2026

This Privacy Policy describes how PawlicaWeb Mateusz Pawlica (“we,” “us,” or “our”) collects, uses, and shares personal information when you use SaaS Cubes (saascubes.com, the “Service”). We are committed to protecting your privacy and handling your data transparently.

1. Data Controller

2. Information We Collect

Account Data

When you create an account, we collect your name and email address. We use email-based authentication (magic links) so we do not store passwords unless you choose to set one.

Listing Data

When you submit a product listing, we collect the product name, URL, short and long descriptions, category, display preferences (color, letter, images), contact email, social media URLs (Facebook, Twitter, GitHub, LinkedIn, Discord), tags, uploaded screenshots, logos, and background images.

Payment Data

Payment processing is handled entirely by Stripe. We do not store your credit card number, CVC, or other payment card details on our servers. We store only your Stripe checkout session ID and subscription ID for order management.

Technical Data

When you use the Service, we automatically collect your IP address, user agent (browser and device information), session tokens, and timestamps. This data is stored in our session logs.

Analytics Data

With your consent, we use Google Analytics 4 to collect anonymized usage data such as pages visited, time on site, and general interaction patterns. We also track listing-level engagement (views and clicks) for users on paid plans.

Contact Form Data

When you use our contact form, we collect your name, email address, subject, and message content.

AI-Processed Data

When you submit a URL for listing, our system fetches and analyzes the publicly available content of that URL using AI services to generate suggested listing metadata. The fetched page content is processed temporarily and not stored beyond a 7-day analysis cache.

3. How We Use Your Information

We use the information we collect to:

• Authenticate your account and manage sessions.
• Display and manage your product listings in the directory.
• Process payments and manage subscriptions via Stripe.
• Send transactional emails (authentication links, listing moderation notices).
• Analyze submitted URLs using AI to generate listing suggestions.
• Provide engagement analytics for paid plan listings (views, clicks).
• Respond to contact form inquiries.
• Monitor and improve the security and performance of the Service.
• Maintain audit logs for security and compliance purposes.

4. Legal Bases for Processing

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data based on the following legal grounds:

• Contract performance: Processing necessary to provide the Service (account management, listing display, payment processing).
• Consent: Analytics cookies and tracking are only activated after you give explicit consent through our cookie banner.
• Legitimate interest: Security monitoring, fraud prevention, audit logging, and Service improvement.

5. Third-Party Services

We share data with the following third-party service providers, each acting as a data processor on our behalf:

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

6. Cookies and Tracking Technologies

Essential Cookies

We use session cookies (prefixed with “sc_”) to authenticate your account and maintain your login session. These cookies are strictly necessary for the Service to function and do not require consent.

Analytics Cookies

We use Google Analytics 4 cookies (such as “_ga” and “_gid”) to understand how visitors interact with the Service. These cookies are only set after you explicitly accept cookies through our cookie consent banner. By default, all analytics tracking is disabled until consent is given.

Local Storage

We store your cookie consent preference (“granted” or “denied”) in your browser's local storage under the key “cookie-consent” so we do not ask you again on every visit.

You can manage cookies through your browser settings. Disabling essential cookies may prevent the Service from functioning properly.

7. Data Retention

We retain your personal data for as long as necessary to provide the Service and fulfill the purposes described in this policy:

• Account data: Retained until you request account deletion.
• Listing data: Retained until you delete your listing. Deleted listings are soft-deleted (hidden from the directory but retained in our database for record keeping).
• Payment records: Retained as required by applicable tax and accounting laws.
• Session data: Retained until session expiration.
• URL analysis cache: Automatically purged after 7 days.
• Audit logs: Retained indefinitely for security and compliance purposes.
• Analytics events: Retained indefinitely in aggregated form.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data, subject to legal retention requirements.
• Restriction: Request that we limit the processing of your data in certain circumstances.
• Data portability: Request a machine-readable copy of your data.
• Objection: Object to processing based on legitimate interest.
• Withdraw consent: Withdraw your consent for analytics cookies at any time by clearing your browser's local storage or cookies.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

9. International Data Transfers

Your data may be processed in countries outside of your country of residence, including the United States and the European Union, through our third-party service providers (Stripe, Google, Cloudflare, Browserless, Resend). These providers maintain appropriate safeguards for international data transfers in compliance with applicable data protection laws.

10. Data Security

We implement reasonable technical and organizational measures to protect your personal data, including:

• HTTPS encryption for all data in transit.
• Secure, httpOnly session cookies with SameSite protection.
• Rate limiting to prevent abuse.
• Webhook signature verification for payment processing.
• Input validation on all API endpoints.

While we strive to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

11. Children's Privacy

The Service is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe that we have collected data from a child under 16, please contact us immediately and we will take steps to delete such information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at: