Privacy policy

SaaSwave. Contact: contact@saaswave.app.

• Account: your email address. If you sign in with Google: the email, name and profile picture that Google sends us.
• Questionnaire: your first name and your answers (situation, available time, timeframe, technical level, goals, social networks, budget…), as well as the SaaS idea chosen for you.
• Usage: the tasks you tick, your progress, your monthly plans and the sales you record in your tracker.
• AI assistant: the messages you exchange with the assistant.
• Subscription: your plan, its status, its dates, your subscription identifiers at Whop, and the date on which you accepted the waiver of the right of withdrawal.
• Consent: the date on which you accepted these terms when creating your account.
• Journey statistics: the main steps of your journey on the website (questionnaire started, completed, account created, payment…), a random identifier for your browser and the campaign that brought you here (UTM parameters).
• Security: your IP address, used only to limit the number of sign-in code requests.
• Only if you accept cookies: the Whop pixel records the pages you view on saaswave.app and identifiers for your browser (including a technical browser fingerprint), to link your visit to any purchase and measure the effectiveness of our campaigns.

Payment: your card details are entered and processed by Whop. We never see them.

• Creating your account, choosing your SaaS, calculating your plans, running the AI assistant and your tracker, managing your subscription — legal basis: performance of the contract.
• Keeping proof of your consent to immediate access and of your waiver of the right of withdrawal — legal basis: our legal obligations and our legitimate interest in being able to prove it.
• Securing the service and preventing abuse (limiting code requests per IP address) — legal basis: our legitimate interest.
• Measuring, internally and in aggregate, the journey steps and the campaigns that work, to improve the website — legal basis: our legitimate interest.
• Measuring visits and purchases linked to our campaigns with the Whop pixel — legal basis: your consent, which you can withdraw at any time.

We do not sell your data.

To reply to your messages and write your monthly plans, SaaSwave sends Anthropic (Claude models) your message, the latest exchanges and the relevant context of your project: first name, idea, available time, technical level, tasks for the day, total of your recorded sales.

Under Anthropic's commercial terms, this data is not used to train its models. Anthropic deletes it from its servers within 30 days, except in the cases provided for in its terms (for example in the event of a legal obligation or abuse).

• Account, answers, idea, plans, progress, recorded sales, assistant messages, subscription status and acceptance dates: for as long as your account exists. They are erased when you delete your account.
• Sign-in codes: 10 minutes.
• IP addresses used to limit requests: about 24 hours.
• Journey statistics: 25 months. When you delete your account, they are detached from your account.
• Statistics identifier in your browser: 13 months, after which it is renewed.
• Your cookie choice: 6 months, after which we ask you again.
• Whop pixel cookies and identifiers (if you accepted it): up to 400 days according to Whop's settings. We erase them from your browser as soon as you decline or withdraw your consent, or when your consent is more than 6 months old.
• Messages sent to Anthropic for the AI assistant and the plans: deleted by Anthropic within 30 days (see above).
• Payment data and invoices: kept by Whop in accordance with its own obligations.

We use providers who process data on our behalf, solely to run the service:

• Railway (Railway Corporation): hosting of the application (server located in the United States, US West region).
• Supabase (Supabase Pte. Ltd., Singapore): database and sign-in (accounts, sign-in codes) — data stored in Singapore.
• Whop (Whop, Inc., 300 Kent Ave #401, Brooklyn, NY 11249, USA): checkout page and subscription management (your card details are entered on Whop: SaaSwave never receives them) and, only if you accept it, a pixel measuring visits and purchases.
• Anthropic (Anthropic Ireland, Limited (Ireland) and Anthropic, PBC (USA)): Claude AI models for the AI assistant and the writing of your monthly plans.
• Resend (Plus Five Five, Inc., USA): sending emails (sign-in codes, subscription confirmation), sent from Ireland; account data and sending logs are stored in the United States.

If you choose to sign in with Google, Google acts as the provider of your Google account, under its own privacy rules.

Some data is processed outside the European Union: in the United States (Railway, Whop, Anthropic, Resend) and in Singapore (Supabase database).

For Railway, Supabase, Anthropic and Resend, these transfers are governed by the European Commission's standard contractual clauses, included in their data processing agreements. For payment, Whop applies the safeguards described in its own privacy policy (whop.com/privacy).

Exchanges with the website are encrypted (HTTPS). Each user can only access their own data, thanks to access rules enforced by the database. Technical access keys stay on the server.

You can at any time request access to your data, its rectification, its erasure, its portability, the restriction of its processing, or object to processing based on our legitimate interest.

Write to us at contact@saaswave.app. We reply within one month. You can also delete your account and all your data directly from My account.

If you believe your rights are not being respected, you can lodge a complaint with the French CNIL (cnil.fr).

The only optional tracker is the Whop pixel. It only loads after your consent, given in the “Cookies” banner: “Decline”, “Manage” and “Accept” are shown side by side, declining takes one click just like accepting, and nothing is loaded until you make a choice. You can change your mind at any time with the “Manage cookies” link at the bottom of every page. There is no Meta pixel, no TikTok pixel and no Google Analytics, and the website's fonts are served by our own server.

Essential (no consent needed, as they are necessary for the service):

• “sb-…” session cookies: keep you signed in to your account (and secure sign-in with Google). Essential. Deleted when you sign out, maximum duration 400 days.
• “saaswave-quiz” (local storage): keeps your questionnaire answers until your account is created, then is erased. Essential for the service you request.
• “saaswave-anon” (local storage): random identifier for our internal journey statistics, renewed after 13 months. If you create an account, it is linked to it to follow your journey up to the subscription. It is not shared with anyone.
• “saaswave-utm” (session storage): remembers the campaign that brought you here, for the duration of your visit.
• “saaswave-consent” (local storage): remembers your cookie choice for 6 months.
• “saaswave-lang” cookie: remembers the language picked with the FR · EN switcher, for 1 year.

Only with your consent — Whop pixel (Whop, Inc., USA), loaded from t.whop.tw:

• “_wuid” and “_wuid_link” cookies: identify your browser to link your visits to any purchase on Whop (up to 400 days according to Whop, erased by us if you withdraw your consent or after 6 months).
• Local storage “_wuid”, “_wsc”, “_wsc_probed_at”, “_wfp” and session storage “_wsc_probed”: identifiers and technical browser fingerprint used by the pixel.

During payment, you are on Whop's website, which applies its own cookie policy.

We update this page when our processing changes. The date of the last update is shown at the top of the page.