SaaSLayer

Privacy Policy

Effective date: · Last updated:

This Privacy Policy explains what information SaaSLayer collects, how we use it, and the choices you have. SaaSLayer is operated by David Wells, a sole proprietor, in San Rafael, CA, United States ("SaaSLayer", "we", "us").

What this policy covers

SaaSLayer is a platform built on Amazon Web Services (AWS). It provides user accounts, sign-in, permissions, and deployments of SaaSLayer services into AWS accounts that our customers own.

This policy covers the SaaSLayer website (https://saaslayer.com), the SaaSLayer console, command-line tool, and APIs, and the accounts people create to use them.

When a customer uses SaaSLayer to run sign-in and permissions for their own application, that customer decides what information about their own users is collected and how it is used. The customer's own privacy policy applies to those users. Where a SaaSLayer service runs inside a customer's AWS account, the data it stores lives in that customer's account.

Information we collect

  • Account information. Your email address, and your name or organization name if you provide them.
  • Phone number. If you choose to sign in or verify your account with your phone, we collect your mobile phone number.
  • Sign-in and security data. Records of sign-ins, verification attempts, and security events, including timestamps, IP address, and browser or device information.
  • Audit data. Records of actions taken in your account, such as permission changes and deployments, including who took the action and when.
  • Deployment information. Details about the AWS accounts you connect and the services you deploy, such as AWS account IDs, regions, deployment settings, and deployment status.
  • Messages you send us. If you email us, we keep the message and your contact details.

The SaaSLayer website does not use advertising or analytics trackers. It stores your light or dark theme choice in your browser.

How we use information

  • To create and secure your account, and to sign you in.
  • To send account verification and sign-in codes by email or SMS.
  • To run the deployments and services you ask for.
  • To keep audit records so you can see who did what in your account.
  • To detect and prevent fraud, abuse, and security incidents.
  • To respond to your messages and provide support.
  • To meet legal obligations.

We do not sell your personal information.

SMS messaging

If you provide a mobile phone number, we use it only to send account verification and sign-in codes.

  • Mobile numbers and SMS opt-in data are not sold or shared with third parties or affiliates for marketing purposes.
  • Message frequency varies with how often you sign in or verify your account.
  • Message and data rates may apply.
  • Reply STOP to opt out. Reply HELP for help.

Text messages are sent through AWS, which delivers them to your mobile carrier. See the SMS messaging program page for how you opt in.

Who we share information with

We share information only as needed to run SaaSLayer:

  • Service providers. AWS hosts SaaSLayer and the SaaSLayer website, and delivers our email and text messages. They process information on our behalf.
  • Customers you belong to. If you are a member of a customer's organization in SaaSLayer, that customer can see your account and audit information within their organization.
  • Legal reasons. We may disclose information if required by law, or to protect the rights, safety, and security of our users, the public, or SaaSLayer.

Data retention

  • We keep account information for as long as your account is open.
  • When you close your account, we delete or de-identify your account information, including your phone number, within 90 days, unless we must keep it longer to meet a legal obligation.
  • We keep sign-in, security, and audit records for up to 1 year, so they are available for security investigations.
  • If you opt out of SMS, we stop sending you text messages. Your phone number stays on your account until you remove it or close your account.

Security

We use AWS security controls, including encryption of stored data and of data in transit, and access limited to the people who need it. No system is perfectly secure, and we cannot guarantee that information will never be accessed without authorization.

Your choices and rights

You can:

  • Ask for a copy of the personal information we hold about you.
  • Ask us to correct or delete it.
  • Remove your phone number from your account, or reply STOP to stop text messages.
  • Close your account.

Depending on where you live, including California, you may have additional rights under local law. We will not treat you differently for exercising them. To make a request, email us at the address below. We may need to verify your identity before acting on it.

Children

SaaSLayer is not directed to children under 13, and we do not knowingly collect personal information from them.

Changes to this policy

If we change this policy, we will update the "Last updated" date above. If a change is significant, we will notify you by email or in the SaaSLayer console before it takes effect.

Contact