Privacy Policy

Introduction and Scope

This Privacy Policy explains how SaasBillingGuide ("we," "us," or "our") collects, uses, discloses, and protects personal information when you visit saasbillingguide.com, use our subscription billing and revenue analytics platform, or otherwise interact with us. It applies to all users of our website, products, and services (collectively, the "Services"), including businesses that use our platform to manage recurring billing, track SaaS metrics, and process subscription payments, as well as their customers whose payment data we may handle as a service provider.

This policy does not cover the practices of third parties, including payment processors, analytics providers, or other services you may connect to our platform. We encourage you to review their privacy policies.

Information We Collect

We collect information in three ways: information you provide directly, information collected automatically, and information from third parties.

Information You Provide

Account and business details: When you register, we collect your name, email address, company name, job title, billing address, and phone number.
Payment and billing data: To process subscription payments, we collect payment card details (stored by our PCI-DSS compliant payment processors), bank account information for ACH transfers, and billing transaction records. We do not store full payment card numbers on our servers.
SaaS metrics and usage data: You may input or connect data such as monthly recurring revenue (MRR), churn rates, customer lifetime value, and subscription plan details. This data may include personal information about your customers (e.g., names, emails, subscription status).
Communications: When you contact support or sales, we collect the content of your messages and any attachments.

Information Collected Automatically

When you use the Services, we automatically collect:

Device and log data: IP address, browser type, operating system, referring URLs, pages viewed, and timestamps.
Usage data: Features accessed, actions taken within the platform, and performance metrics.
Cookies and similar technologies: See the "Cookies and Tracking Technologies" section below.

Information from Third Parties

We may receive information from payment processors (e.g., transaction confirmations), analytics providers, and publicly available sources. If you connect third-party services (e.g., Stripe, QuickBooks), we receive data authorized by you through those integrations.

How We Use Information

We use personal information for the following purposes:

Providing the Services: To create and manage accounts, process subscription payments, generate invoices, and deliver billing and revenue reports.
Analytics and improvement: To analyze usage trends, calculate SaaS metrics (such as MRR and churn), and improve our platform's features and performance.
Customer support: To respond to inquiries, troubleshoot issues, and provide technical assistance.
Billing and account management: To send invoices, collect payments, and manage subscription renewals.
Legal compliance: To comply with applicable laws, regulations, and contractual obligations, including tax and financial reporting requirements.
Security and fraud prevention: To detect and prevent fraudulent transactions, unauthorized access, and other illegal activities.
Communications: To send service-related notices (e.g., changes to this policy) and, with your consent where required, marketing communications about our products. You may opt out of marketing emails at any time.

We do not sell your personal information. We do not use your data for automated decision-making that produces legal or similarly significant effects without human review.

Data Security Measures

We implement administrative, technical, and physical safeguards designed to protect personal information. These include:

Encryption of data in transit using TLS 1.2 or higher and at rest using AES-256.
Access controls, role-based permissions, and multi-factor authentication for our personnel.
Regular security assessments, penetration testing, and vulnerability scanning.
PCI-DSS compliance for payment processing, with card data tokenized and stored by our processors.
Incident response procedures and employee training on data protection.

No method of transmission or storage is completely secure. If we become aware of a data breach affecting your personal information, we will notify you and relevant authorities as required by law.

User Rights (Access, Correction, Deletion, and More)

Depending on your location, you may have the following rights regarding your personal information:

Access: Request a copy of the personal information we hold about you.
Correction: Request correction of inaccurate or incomplete information.
Deletion: Request deletion of your personal information, subject to legal retention obligations.
Restriction: Request that we limit the processing of your information.
Portability: Request a machine-readable copy of your data.
Objection: Object to processing based on legitimate interests or for direct marketing.
Opt-out of marketing: Unsubscribe from marketing communications at any time.

To exercise these rights, contact us using the details in the "How to Contact Us for Privacy Inquiries" section. We will respond within the timeframes required by applicable law (e.g., 45 days for California residents under the CPRA, with possible extension).

California Residents (CPRA)

If you are a California resident, you have additional rights under the California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete, the right to correct, the right to opt out of the sale or sharing of personal information (we do not sell or share your personal information as defined by the CPRA), and the right to limit the use of sensitive personal information. To exercise CPRA rights, contact [email protected]. You may designate an authorized agent to make a request on your behalf. We will not discriminate against you for exercising your rights.

Other U.S. State Privacy Laws

Residents of other states with comprehensive privacy laws (e.g., Colorado, Connecticut, Virginia) may have similar rights. Contact us to exercise them.

Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to operate the Services, remember your preferences, analyze usage, and support marketing. The types of cookies we use include:

Strictly necessary: Required for authentication, security, and core functionality (e.g., session management).
Performance and analytics: Collect aggregated data on how users interact with the platform (e.g., Google Analytics).
Functionality: Remember settings such as language and region.
Advertising: Used to deliver relevant ads and measure campaign effectiveness (e.g., LinkedIn Insight Tag).

You can manage cookies through your browser settings. For more information about interest-based advertising, visit the Digital Advertising Alliance's opt-out page. We honor Global Privacy Control signals as required by applicable law.

Third-Party Services and Integrations

We share personal information with third parties who help us provide the Services, including:

Payment processors: Such as Stripe and PayPal, to process subscription payments and manage billing. These processors are PCI-DSS compliant and handle card data under their own privacy policies.
Cloud hosting and infrastructure: Such as AWS, to store and process data securely.
Analytics providers: Such as Google Analytics, to understand usage patterns.
Customer support and communication tools: Such as Intercom, to manage inquiries.
Professional advisors: Lawyers, accountants, and auditors as necessary.

We require these third parties to protect personal information consistent with this policy and applicable law. We do not sell personal information to third parties.

We may also disclose information if required by law, to protect our rights or safety, or in connection with a merger or acquisition (in which case we will notify you before your data is transferred and becomes subject to a different policy).

Data Retention

We retain personal information for as long as your account is active or as needed to provide the Services. We also retain information to comply with legal obligations (e.g., tax and financial records for at least seven years), resolve disputes, and enforce agreements. When data is no longer needed, we delete or anonymize it.

International Data Transfers

We are based in the United States and process data primarily in the U.S. If you access the Services from outside the U.S., your data may be transferred to and processed in the U.S., where data protection laws may differ. For transfers from the EEA or UK, we rely on appropriate safeguards such as Standard Contractual Clauses.

Children's Privacy

The Services are not intended for individuals under 18. We do not knowingly collect personal information from children. If we learn we have collected such information, we will delete it promptly.

Changes to This Privacy Policy

We may update this policy from time to time. We will post the revised policy on this page and update the "Last Updated" date. If changes are material, we will notify you by email or through the Services. Your continued use after the effective date constitutes acceptance of the revised policy.

How to Contact Us for Privacy Inquiries

For questions, concerns, or requests regarding this Privacy Policy or your personal information, contact us:

Privacy email: [email protected]
Phone: +1 (415) 555-0183
Mailing address: One Sansome Street, Suite 3500, San Francisco, CA 94104

We will respond to your inquiry within 30 days or as required by applicable law.

Last Updated: October 29, 2026