Privacy Policy

1.1 We provide a platform that analyses websites and web applications, identifies the obstacles that stop visitors from signing up or converting, and delivers a report containing prioritised tasks, remediation guidance and ready made prompts for software fixes. Parts of the analysis are performed by artificial intelligence models. Parts are performed by human beta testers.

1.2 That business model means we handle several distinct categories of information: information about you as a customer, information about the digital properties you ask us to test, information about individuals who apply to test, and information about visitors to our own website. This Policy addresses each of them.

1.3 We have written this Policy to be read and understood rather than to satisfy a formality. If anything in it is unclear, please contact us using the details in clause 25.

1.4 This Policy applies from the Effective Date shown above and replaces any earlier version.

2.1 The controller of the personal information described in this Policy, other than where clause 3.4 applies, is Save Your App LLC, a limited liability company organised under the laws of the State of Pennsylvania, with its principal place of business at 239 Fourth Avenue, Suite 1401 #8950, Pittsburgh, Pennsylvania 15222.

2.2 You can reach us about privacy matters by email at legal@saveyourapp.com or by post at the address in clause 2.1.

2.3 We have not appointed a data protection officer, and are not required to appoint one under the laws currently applicable to us. If that position changes, we will update this Policy and publish the relevant contact details at https://www.saveyourapp.com.

3.1 This Policy covers our website at https://www.saveyourapp.com, the web application accessible through it, our reports and downloads, and our email and support communications.

3.2 This Policy does not cover any third party website, service, application or tool that you reach through a link in our platform or in a report. Those are governed by the privacy notices of their own operators.

3.3 This Policy does not cover the privacy practices of the websites and applications we analyse. If we analyse a property that belongs to a business you deal with, that business remains responsible for its own privacy notice and its own handling of your information.

3.4 Where we analyse a property at a customer's instruction and, in doing so, encounter personal information relating to that customer's own users, we handle that information on the customer's behalf, as a processor or service provider. In that situation the customer is the controller or business, its own privacy notice governs, and this Policy describes only what we do with the information as its service provider.

4.1 Account and identity information. Your name, email address, password in hashed form, company or product name, role, country, and any profile details you choose to add.

4.2 Billing information. Your billing name, billing address, country, tax identifiers where applicable, your chosen plan, your billing history, and the last four digits, card brand and expiry date of your payment card as supplied to us by our payment processor. We do not receive or store your full payment card number or your card security code. Full card details are collected and processed by our payment processor directly.

4.3 Submitted content. The URLs and descriptions of the properties you submit, any testing brief, any files, screenshots, notes or instructions you upload, and any test credentials, staging links, application programming interface keys or access tokens you supply so that we or a tester can reach a protected area.

4.4 Communications. The content of emails, support tickets, in product messages and any other correspondence with us, including any attachments, and records of what was requested and how it was resolved.

4.5 Marketing and preference information. Your subscription status for our emails, your cookie and tracking preferences, and your interaction with our messages.

4.6 We do not seek special categories of data, sensitive personal information, health information, biometric identifiers, government identification numbers, precise geolocation, or information about children. Please do not send us that information. If it reaches us in a submission or an attachment, we will delete it when we become aware of it unless we are required to retain it.

5.1 When you use the platform we collect device and connection information, including your internet protocol address, approximate location derived from that address at city or country level, browser type and version, operating system, device type, screen size, language and referring page.

5.2 We collect usage information, including the pages and features you view, the analyses you run, the models you select, the plans you view, the buttons you click, the reports you download, session duration, timestamps and error events.

5.3 We maintain security and diagnostic logs, including authentication events, access attempts, rate limiting events, application errors and abuse signals.

5.4 We use cookies, local storage, session storage and similar technologies to operate the platform, keep you signed in, remember preferences and measure usage. Our Cookie Policy at https://www.saveyourapp.com explains what we set, why, how long it lasts and how you can control it.

5.5 Because the platform is still in active development and the mobile experience is not yet optimised, we pay particular attention to error and diagnostic data so that we can identify and fix defects. That data may include the technical context in which an error occurred.

6.1 Our payment processor provides us with transaction status, the masked card details described in clause 4.2, fraud signals, chargeback notifications and refund records.

6.2 Where you sign in or connect through a third party identity or platform provider, that provider gives us the identifiers and profile fields you authorise it to share.

6.3 Our infrastructure, security and analytics providers supply us with aggregated and event level information about how the platform is being used and about threats directed at it.

6.4 Where you are referred to us by an existing customer, a partner or a public professional profile, we may receive your name, business email address and role in that context.

7.1 When you submit a property, our systems request, render, crawl and evaluate its pages in the way a visitor's browser would, and record what is returned. That record can include page content, markup, scripts, styles, headers, response codes, timing data, screenshots, form structures, cookies set by that property and, where you have supplied credentials, content behind a login.

7.2 That captured material may contain personal information, for example names, email addresses, testimonials, staff biographies, support chat transcripts, or data belonging to your own users if it is displayed in an area we are asked to reach. We do not seek that information and we do not use it to build profiles of the individuals concerned. We process it only to produce your report, to secure our systems and to meet legal obligations.

7.3 We ask you not to give us access to production data belonging to your own users. Please use test accounts and test data. Our Terms and Conditions require you to have the authorisation necessary to have a property tested, and to have a lawful basis for any personal data you expose to us.

7.4 Where we identify what appears to be a security issue affecting a property, we record that finding, include it in your report, and retain it so that we can evidence what was reported and when. We treat such findings as confidential.

7.5 If you tell us that material captured from a property should be deleted, we will delete it, subject to clause 18.

8.1 If you apply to be a beta tester, we collect your name, contact details, country, languages, device and browser environment, relevant experience, availability, the answers you give in the application, and any sample feedback you provide.

8.2 If you are accepted, we additionally collect the records needed to manage the engagement and to pay you, including your assignments, the feedback you submit, quality and completion records, timestamps, communications with us, and the payment or remittance details and tax information required by law and by our payment provider.

8.3 We use this information to assess applications, match testers to assignments, operate and quality assure the testing service, make payments, prevent fraud and duplicate accounts, and comply with our legal and tax obligations.

8.4 We share with our customers the feedback and observations a tester produces. We do not disclose a tester's identity or contact details to a customer unless the tester agrees. Testers should not include their own personal information in feedback.

8.5 Applications that are unsuccessful are retained for the period stated in clause 18 so that we can consider you for future opportunities and defend any claim, after which they are deleted. You may ask us to delete an unsuccessful application sooner.

9.1 To create and administer your account, authenticate you and provide the platform.

9.2 To perform the analyses you request, generate reports, remediation guidance and prompts, and make them available to you.

9.3 To arrange, deliver and quality assure human beta testing, including matching testers to assignments and relaying feedback.

9.4 To take payment, manage subscriptions, renewals, downgrades, refunds and chargebacks, and to keep accounting records.

9.5 To provide support, respond to enquiries and investigate issues you report.

9.6 To operate, monitor, secure, debug and improve the platform, including diagnosing errors, understanding which features are used and testing changes. Because the platform is pre release, this purpose is a significant part of what we do.

9.7 To detect, investigate and prevent fraud, abuse, circumvention of usage limits, unauthorised access and other conduct that breaches our Terms and Conditions or the law.

9.8 To send you service messages, including confirmations, renewal and billing notices, security notices, and notices of material changes to our documents. You cannot opt out of service messages while you hold an account.

9.9 To send you marketing about our own services where you have subscribed or where applicable law otherwise permits it. You may unsubscribe at any time using the link in the message or by contacting us.

9.10 To produce aggregated and de identified statistics about how the platform is used and how properties typically perform. Once information is aggregated or de identified so that it no longer identifies you, your account or a property, we may use it without restriction and we will not attempt to re identify it.

9.11 To establish, exercise or defend legal claims, to comply with law, and to respond to lawful requests from public authorities.

9.12 We do not use the personal information described in this Policy to train our own general purpose artificial intelligence models, and we do not authorise our model providers to use it to train theirs.

10.1 The full analysis and other artificial intelligence features are delivered using large language models supplied by a third party artificial intelligence provider, configured and tuned by us for the analysis tasks the platform performs. Where the platform offers a choice of model, you select which model runs your analysis.

10.2 To generate your report, the content captured from your property together with the instructions we construct is transmitted to the model provider, processed by the model, and returned to us as output. The provider processes that content on our behalf and under contract.

10.3 We do not authorise our model providers to use your content to train general purpose models. Providers may retain content for a limited period for abuse monitoring and to meet their own legal obligations, in accordance with their published terms.

10.4 Model providers may process content outside the country in which you are located. Clause 17 explains how we address international transfers.

10.5 Please do not paste sensitive personal information, credentials for production systems, or confidential third party information into free text fields that feed the artificial intelligence features. Content you submit becomes part of the input to the model.

10.6 Model output is probabilistic and may be inaccurate. Our Terms and Conditions explain the limits of what you may rely on. Where output refers to an identifiable individual and is inaccurate, you may ask us to correct or delete the record of that output under clause 20 or clause 21.

11.1 The platform generates automated analysis of digital properties. That analysis evaluates software and content. It does not evaluate individuals and does not produce decisions about individuals.

11.2 We do not carry out automated decision making that produces legal effects concerning an individual, or that similarly significantly affects an individual, within the meaning of applicable data protection law. We do not engage in profiling for the purposes of targeted advertising.

11.3 We use automated signals, such as duplicate account detection, velocity checks and abuse heuristics, to protect the platform. Where such a signal would result in suspension or refusal of an account, a member of our team reviews the matter before the decision takes effect, and you may contest the outcome by contacting us using the details in clause 25.

11.4 Beta tester applications may be filtered automatically by objective criteria such as device environment, language and availability. A decision to reject an application is reviewed by a person before it is communicated.

12.1 This clause applies where the General Data Protection Regulation of the European Union, the United Kingdom General Data Protection Regulation, or a comparable law that requires a legal basis applies to our processing.

12.2 Performance of a contract. Creating and administering your account, running the analyses you request, delivering reports, arranging human testing, taking payment and providing support.

12.3 Legitimate interests. Securing and debugging the platform, preventing fraud and abuse, improving and developing our services, understanding how the platform is used, marketing to business contacts where permitted, and establishing, exercising or defending legal claims. In each case we have considered the impact on you and have concluded that our interests are not overridden by your rights and freedoms. You may object as described in clause 21.

12.4 Consent. Setting non essential cookies and similar technologies where consent is required, and sending marketing where consent is required. You may withdraw consent at any time, without affecting processing carried out before withdrawal.

12.5 Legal obligation. Retaining accounting and tax records, responding to lawful requests, and meeting sanctions and export control requirements.

12.6 Where we act as a processor on a customer's behalf under clause 3.4, the customer is responsible for identifying the legal basis for the underlying processing.

13.1 With service providers who process information on our behalf and under contract, as described in clause 14.

13.2 With artificial intelligence model providers, as described in clause 10.

13.3 With beta testers, to the extent necessary for them to carry out an assignment. Testers receive the brief, the property to be tested and any access instructions you supply. Testers are bound by confidentiality obligations and must not retain or disclose what they encounter.

13.4 With our customers, where you are a beta tester, in the form of the feedback you produce and subject to clause 8.4.

13.5 With professional advisers, including lawyers, accountants and insurers, where necessary and under a duty of confidence.

13.6 With law enforcement, regulators, courts and other public authorities where we are required to do so by law, or where disclosure is necessary to establish, exercise or defend legal claims, to prevent harm, or to protect the rights, property or safety of any person.

13.7 With an acquirer or prospective acquirer in connection with a merger, financing, reorganisation, or sale of all or part of our business or assets, subject to appropriate confidentiality protections. We will notify you if your personal information becomes subject to a different privacy notice as a result.

13.8 With any other person where you direct or authorise us to do so.

13.9 We do not disclose your account information or the content captured from your property to any other customer.

14.1 We use service providers to deliver the platform. The categories are: cloud hosting and infrastructure; artificial intelligence model provision; payment processing and subscription billing; transactional and marketing email delivery; customer support tooling; product analytics and error monitoring; security, logging and fraud prevention; and business productivity and storage tooling.

14.2 Each service provider is engaged under a written contract that limits it to processing on our documented instructions, requires confidentiality and appropriate security measures, and restricts onward transfer. Service providers are not permitted to use information we disclose to them for their own purposes.

14.3 We will supply a current list of the sub-processors that handle personal information on our behalf on request legal@saveyourapp.com. Where you have entered into a data processing addendum with us, we will notify you of changes to that list in accordance with the addendum.

15.1 We do not sell personal information in exchange for money.

15.2 We do not share personal information for cross context behavioural advertising, and we do not process personal information for targeted advertising as that term is used in United States state privacy laws. We do not currently operate an advertising programme on the platform.

15.3 We do not collect or process sensitive personal information for the purpose of inferring characteristics about an individual.

15.4 We have not sold or shared personal information, and have not processed it for targeted advertising, in the twelve months before the Effective Date of this Policy.

15.5 If this position changes, we will update this Policy before the change takes effect and will publish the notices, opt out mechanisms and preference signals required by the law that applies to you.

16.1 We use cookies, local storage and comparable technologies for authentication, security, preferences and analytics. Our Cookie Policy, available at https://www.saveyourapp.com, sets out each category we use, its purpose, whether it is first or third party, and its duration.

16.2 Where consent is required for non essential technologies, we request it before they are set and you can change your choice at any time through the cookie settings available at https://www.saveyourapp.com.

16.3 We honour the Global Privacy Control signal, where your browser or extension transmits it, as a request to opt out of sale and sharing where that right applies to you.

16.4 Cookies set by a property we analyse belong to the operator of that property, not to us. Where our systems record such cookies as part of an analysis, we do so in order to describe the property's behaviour in your report.

17.1 We are established in the United States and our platform is operated from there. Our service providers and model providers may process information in the United States and in other countries.

17.2 If you access the platform from outside the United States, you understand that your information will be transferred to, stored in and processed in the United States and in other countries whose data protection laws may differ from those of your own country.

17.3 Where a transfer of personal information from the European Economic Area, the United Kingdom or Switzerland is subject to the transfer rules of those jurisdictions, we rely on an appropriate transfer mechanism recognised under the applicable law. That is ordinarily the standard contractual clauses adopted by the European Commission, together with the international data transfer addendum issued by the United Kingdom Information Commissioner where the transfer concerns the United Kingdom, supplemented where necessary by additional technical and organisational measures.

17.4 You may request further information about the transfer mechanism applicable to a particular transfer, and a copy of the relevant safeguards where we are required to provide one, by contacting us at legal@saveyourapp.com.

18.1 We keep personal information only for as long as we need it for the purposes described in this Policy, and then delete it or de identify it.

18.2 Account information is retained for the life of your account and for twenty four months after closure, so that we can reinstate the account, handle disputes and evidence what was agreed.

18.3 Content captured from an analysed property, and the reports generated from it, are retained while your account is open and for twelve months after the analysis, unless you delete them sooner or ask us to delete them. Credentials, access tokens and staging links you supply are retained only for as long as needed to complete the analysis or testing cycle and are then deleted. You should revoke any credentials you issue to us when the engagement ends.

18.4 Billing, invoicing and tax records are retained for the period required by applicable tax and accounting law, which is ordinarily seven years.

18.5 Security, authentication and diagnostic logs are retained for up to twelve months, and longer where a log is relevant to an ongoing investigation or legal claim.

18.6 Beta tester application records are retained for twelve months from the decision. Records relating to an engaged tester are retained for the engagement and for the period required for tax, payment and dispute purposes.

18.7 Support correspondence is retained for twenty four months from the last message in the thread.

18.8 We may retain information for longer where it is subject to a legal hold, is required for the defence of a claim, or is contained in backups. Backup copies are overwritten on our standard backup cycle and information in them is not restored into live systems except for disaster recovery.

19.1 We maintain administrative, technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse and alteration. These include encryption of data in transit using current transport layer security, encryption of data at rest with our hosting provider, access control on a least privilege basis, hashing of passwords, logging and monitoring, separation of production and development environments, and background review of the people who handle customer material.

19.2 Access to the content captured from an analysed property, and to any credentials you supply, is restricted to the personnel and testers who need it to deliver the service you asked for.

19.3 We do not claim compliance with, or certification under, any information security standard or assurance framework. If we obtain a certification or complete an independent audit in future, we will say so at https://www.saveyourapp.com rather than imply it here.

19.4 No system is completely secure and no transmission over the internet can be guaranteed. You are responsible for keeping your account credentials confidential, for using a strong and unique password, and for notifying us promptly at legal@saveyourapp.com if you suspect unauthorised access.

19.5 If a security incident affects your personal information and applicable law requires us to notify you or a regulator, we will do so within the time and in the form that law requires.

20.1 Several United States states, including California, Virginia, Colorado, Connecticut, Utah and Texas, give residents rights over their personal information. The rights available to you depend on your state of residence and on whether the relevant law applies to us. Where a right applies, we honour it.

20.2 Subject to those conditions, you may have the right to: confirm whether we process personal information about you and access it; obtain a copy in a portable format; correct inaccurate personal information; delete personal information; obtain information about the categories of personal information we collect, the purposes for which we use it, the categories of source and the categories of recipient; opt out of the sale of personal information, of sharing for cross context behavioural advertising, and of targeted advertising, none of which we currently carry out as stated in clause 15; limit the use of sensitive personal information, which we do not collect for that purpose; and not be discriminated against for exercising a right.

20.3 California residents may also request, under Cal. Civ. Code section 1798.83, information about disclosures of personal information to third parties for their direct marketing purposes. We do not make such disclosures.

20.4 To exercise a right, contact us at legal@saveyourapp.com with enough information for us to locate your records. We will verify your request by reference to the information we already hold, ordinarily by confirming control of the email address associated with your account. We may ask for additional information where a request concerns sensitive records, and we will not use that information for any other purpose.

20.5 An authorised agent may submit a request on your behalf where the agent provides proof of authorisation and, where required, you confirm the authorisation directly with us.

20.6 We respond within the period required by the applicable law, which is ordinarily forty five days, and we may extend that period once where the law permits, on notice to you.

20.7 If we decline a request, we will explain why. Where applicable law provides a right of appeal, you may appeal by replying to our decision and marking the message as an appeal. We will respond to the appeal within the period the law requires and, if we decline it, tell you how to complain to your state attorney general or other competent authority.

20.8 Where we act as a service provider for a customer under clause 3.4, requests about that customer's own users should be directed to the customer. We will assist the customer in responding.

21.1 Where the General Data Protection Regulation, the United Kingdom General Data Protection Regulation or Swiss data protection law applies to our processing, you have the rights set out in this clause.

21.2 You may request access to your personal information and a copy of it; rectification of inaccurate or incomplete information; erasure in the circumstances the law provides; restriction of processing; and portability of information you provided to us, in a structured, commonly used and machine readable format, where processing is based on consent or contract and is carried out by automated means.

21.3 You may object at any time to processing based on our legitimate interests, on grounds relating to your particular situation, and you may object at any time and without giving reasons to processing for direct marketing.

21.4 Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

21.5 To exercise a right, contact us at legal@saveyourapp.com. We will respond within one month, and may extend that period by up to two further months where the request is complex or numerous, telling you why within the first month. We do not charge a fee unless a request is manifestly unfounded or excessive.

21.6 You have the right to lodge a complaint with the supervisory authority in the country of your habitual residence, place of work or the place of the alleged infringement. In the United Kingdom the supervisory authority is the Information Commissioner's Office, https://www.ico.org.uk. We would ask you to contact us first so that we can try to resolve the matter.

21.7 We have not appointed a representative in the European Union or in the United Kingdom. If our activities come within the scope of Article 27 of either Regulation, we will appoint one and publish the details at https://www.saveyourapp.com.

22.1 The platform is available to users worldwide, and the properties we analyse may be operated anywhere. Data protection law in your country may give you rights that are not described in clauses 20 and 21.

22.2 We will honour a right that applies to you under the law of your country where that law applies to our processing. Please contact us at legal@saveyourapp.com and tell us which law you are relying on, so that we can respond appropriately.

22.3 Nothing in this Policy limits a right you have under a mandatory provision of the law of your country of residence.

23.1 The platform is a professional tool intended for businesses and for individuals acting in a developer or professional capacity. It is not directed to children, and you must be at least eighteen years old to create an account or to apply to be a beta tester.

23.2 We do not knowingly collect personal information from children under thirteen years of age, and we do not knowingly collect personal information from anyone under eighteen.

23.3 If we learn that we hold personal information collected from a child under thirteen in circumstances that engage the Children's Online Privacy Protection Act, 15 U.S.C. 6501 and following, or personal information collected from a person under eighteen, we will delete it promptly. A parent or guardian who believes that a child has given us personal information should contact us at legal@saveyourapp.com.

24.1 We may update this Policy to reflect changes to the platform, to our providers, or to the law. The current version is always published at https://www.saveyourapp.com with its Effective Date.

24.2 Where a change is material, we will give notice by email to account holders, or by a prominent notice on the platform, before the change takes effect. Where the change requires your consent, we will ask for it.

24.3 Because the platform is still being built, features may be added during the coming months. Where a new feature involves a new use of personal information, we will update this Policy at the same time as the feature is released.

24.4 We keep previous versions of this Policy and will provide a copy on request.

25.1 For any question about this Policy, about how we handle personal information, or to exercise a right, contact us by email at legal@saveyourapp.com.

25.2 You can also write to us at Save Your App LLC, 239 Fourth Avenue, Suite 1401 #8950, Pittsburgh, Pennsylvania 15222.

25.3 We aim to acknowledge privacy enquiries within five business days and to resolve them within the period required by the law that applies to you.

25.4 If you are not satisfied with our response, you may complain to the data protection or consumer protection authority with jurisdiction over you, as described in clauses 20.7 and 21.6.