Privacy Policy

SaaSrooms Group

Last Updated: November 1, 2025 | Effective Date: November 1, 2025

SaaSrooms strives for the highest standards. Find key information about terms, privacy, policy and compliance.

1. INTRODUCTION

Company Information

This Privacy Policy is issued on behalf of the SaaSrooms Group, which includes the following entities:

SaaSrooms Ltd (UK Holding Company)

  • Registered Address: SaaSrooms, 308 High Street Croydon, Surrey. CR0 1NG
  • Company Registration: England and Wales
  • Role: Parent holding company and data controller for UK/EEA residents

SaaSrooms LLC (US Operating Company)

  • Registered Address: SaaSrooms, 8 The Green Suite #5702, Dover, DE 19901, USA
  • State of Formation: Delaware
  • Role: US operating subsidiary and data controller for US residents

Website: https://saasrooms.com/

Email: info@saasrooms.com | Phone: +1-404-474-7755

About This Privacy Policy

This Privacy Policy describes how the SaaSrooms Group (“SaaSrooms,” “we,” “us,” or “our”) collects, uses, shares, and protects your personal information when you use our services, including our website and SaaSrooms platform (collectively, the “Service”).

This Privacy Policy applies to:

  • Residents of the United Kingdom and European Economic Area (covered under UK GDPR and EU GDPR)
  • California residents and residents of other US states with comprehensive privacy laws (covered under CCPA/CPRA and other state privacy laws)
  • All other users of our Service

We are committed to transparency and protecting your privacy rights under applicable laws, including the UK General Data Protection Regulation (UK GDPR), the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other US state privacy laws.

For UK/EU Residents: SaaSrooms Ltd acts as the data controller for the personal information we collect.

For US Residents: SaaSrooms LLC acts as the data controller for the personal information we collect. This policy provides specific disclosures required under US state privacy laws, including information about your privacy rights and how to exercise them.

2. INFORMATION WE COLLECT

2.1 Categories of Personal Information Collected

We collect personal information that you provide directly to us, that we collect automatically when you use our Service, and that we receive from third-party sources. Below are the categories of personal information we have collected in the preceding 12 months:

A. Identifiers and Contact Information

  • Examples: Name, email address, postal address, phone number, company name, job title, unique identifiers (such as account ID or customer number)
  • Collection: Directly from you when you create an account, contact us, or use our Service
  • Purpose: Account creation, service provision, customer support, communication

B. Commercial Information

  • Examples: Transaction history, purchasing patterns, subscription details, billing information, records of software and services purchased or considered
  • Collection: Directly from you and through your use of our Service
  • Purpose: Processing transactions, managing subscriptions, analyzing usage patterns, providing recommendations

C. Financial Information

  • Examples: Payment card information, billing address, bank account details (if provided)
  • Collection: Directly from you when you make purchases; processed through our payment service providers
  • Purpose: Payment processing, fraud prevention
  • Note: We do not store complete payment card numbers; these are processed by our third-party payment processors

D. Internet or Network Activity Information

  • Examples: IP address, browser type and version, device information, operating system, pages visited, time and date of visits, clickstream data, cookies and similar tracking technologies data
  • Collection: Automatically when you use our Service
  • Purpose: Service functionality, analytics, security, personalization, fraud prevention

E. Professional or Employment Information

  • Examples: Company name, job title, business email address, information about your company’s technology stack and software usage
  • Collection: Directly from you and through your use of our Service
  • Purpose: Providing our procurement and tech spend management services, account management, business communications

F. Inferences and Analytics

  • Examples: Profiles reflecting preferences, characteristics, behavior, and attitudes derived from your usage of our Service
  • Collection: Created from analysis of other information we collect
  • Purpose: Service personalization, recommendations, product improvement, analytics

G. Contents of Communications

  • Examples: The content of messages you send to us through customer support, email, chat, or other communication channels
  • Collection: Directly from you when you contact us
  • Purpose: Responding to inquiries, providing customer support, improving our Service

2.2 Sensitive Personal Information

We do not intentionally collect sensitive personal information as defined under CPRA and other state privacy laws, including: Social Security numbers, driver’s license numbers, passport numbers, or other government identifiers; financial account login credentials; precise geolocation data (more specific than city level); racial or ethnic origin, religious or philosophical beliefs, or union membership; genetic data or biometric information for unique identification; health information; and information concerning sex life or sexual orientation.

If we need to collect any sensitive personal information for specific business purposes in the future, we will provide clear notice and obtain any required consent.

2.3 Usage Data

Usage Data is collected automatically when you use our Service and may include: device Internet Protocol (IP) address; browser type and version; pages of our Service that you visit; time and date of your visit; time spent on pages; unique device identifiers; operating system; mobile device information (when accessing via mobile device); and diagnostic data and performance metrics.

2.4 Aggregated and Anonymized Data

What We Create

In addition to processing Your Personal Data as described above, We create Aggregated and Anonymized Data from information collected through Our Services. This includes:

  • Usage Data: How software applications and SaaS tools are utilized within organizations
  • Spend Data: Anonymized pricing, licensing costs, and vendor contract terms
  • Operational Metrics: Software adoption rates, renewal patterns, and usage trends
  • Market Intelligence: Industry-wide patterns in technology procurement and utilization

How We Anonymize Data

We apply rigorous technical and organizational measures to ensure that Aggregated and Anonymized Data cannot reasonably be used to identify You, Your organization, or any individual user. Our anonymization methodology includes:

  • Removal of Direct Identifiers: All names, email addresses, company names, account identifiers, and other directly identifying information are permanently stripped from the dataset
  • Aggregation Thresholds: Data is only included in anonymized datasets when it represents a sufficient number of data subjects to prevent identification through isolation (minimum aggregation thresholds apply)
  • Generalization: Specific values are replaced with ranges or categories where necessary to prevent identification
  • Technical Safeguards: We employ industry-standard data anonymization techniques designed to render re-identification practically impossible through any means reasonably likely to be used

Once data has been anonymized in accordance with these standards, it no longer constitutes Personal Data under the UK GDPR, EU GDPR, or other applicable data protection laws.

How We Use Aggregated and Anonymized Data

We use Aggregated and Anonymized Data for the following purposes:

  • Service Improvement: Enhancing Our platform’s features, functionality, and performance
  • Benchmarking Services: Creating industry benchmarks that help organizations compare their software spend and usage against anonymized peer data
  • Market Research and Analytics: Generating insights about software industry trends, pricing patterns, vendor performance, and technology adoption
  • Product Development: Developing new features, tools, and analytical products
  • Commercial Analytics Products: Creating and licensing analytics reports, market intelligence products, and benchmarking tools for third parties
  • Industry Publications: Contributing to research papers, white papers, and industry reports

Third-Party Recipients of Anonymized Data

We may share, license, or sell Aggregated and Anonymized Data to the following categories of recipients:

  • Enterprise Customers: Organizations seeking benchmarking data to optimize their own software procurement
  • Software Vendors: Companies seeking aggregated market insights about their category or competitive landscape
  • Research Organizations: Academic institutions and market research firms conducting industry studies
  • Investment Firms: Private equity firms, venture capital firms, and financial institutions analyzing technology market trends
  • Industry Analysts: Technology analysts and consulting firms producing market reports

We do not sell or share Aggregated and Anonymized Data with advertising networks, data brokers engaged in targeted advertising, or any party for the purpose of re-identifying individuals or organizations.

Lawful Basis and Your Rights

The creation of Aggregated and Anonymized Data constitutes processing of Your Personal Data, for which We rely on Our legitimate interest under Article 6(1)(f) of the UK GDPR. Our legitimate interests include:

  • Developing valuable market intelligence that benefits the broader software industry
  • Generating revenue to sustain and improve Our Services
  • Creating benchmarking tools that provide value to all platform users
  • Contributing to industry transparency in software pricing and utilization

We have conducted a Legitimate Interest Assessment and determined that these interests are not overridden by Your rights and interests, particularly because:

  • The anonymization process eliminates risks to Your privacy
  • You benefit from improved Services and access to benchmarking insights
  • You retain full control over Your Personal Data through the rights described in this Policy

Your Right to Opt Out

You have the right to object to the inclusion of Your data in Our anonymization and aggregation processes. To exercise this right:

  • Contact Us at: https://saasrooms.com/contact/
  • Specify that You wish to opt out of data aggregation and anonymization
  • We will process Your request within 30 days

Please note that opting out:

  • Will not affect any Aggregated and Anonymized Data already created prior to Your request (as such data can no longer be linked to You)
  • May limit certain benchmarking features available to You within the Service
  • Does not affect Our processing of Your Personal Data for other purposes described in this Policy

Contractual Protections

Where We share Aggregated and Anonymized Data with third parties, We require recipients to:

  • Confirm that the data will not be used for re-identification purposes
  • Implement appropriate security measures to protect the data
  • Use the data only for the purposes for which it was provided
  • Not further distribute the data without Our authorization

Data Retention for Anonymized Data

Because Aggregated and Anonymized Data does not constitute Personal Data, it is not subject to the retention periods applicable to Personal Data. We may retain Aggregated and Anonymized Data indefinitely for analytical, historical, and commercial purposes.

2.5 Tracking Technologies and Cookies

We use cookies, web beacons, pixel tags, and similar tracking technologies to track activity on our Service and store certain information. You can learn more about our use of cookies in our Cookie Policy.

Types of Cookies We Use:

  • Necessary/Essential Cookies: Session cookies essential for providing services available through the website and enabling you to use features such as authentication and account security. Administered by SaaSrooms.
  • Functionality Cookies: Persistent cookies that remember your choices and preferences (such as login details, language preference) to provide a more personalized experience. Administered by SaaSrooms.
  • Analytics Cookies: Persistent cookies that help us understand how visitors interact with our Service by collecting and reporting information. These are used internally by SaaSrooms for service improvement purposes only and are not shared with third-party advertising networks.

3. SOURCES OF PERSONAL INFORMATION

We collect personal information from the following sources:

3.1 Directly From You

When you create an account or register for our Service; when you make purchases or subscribe to our services; when you contact us for customer support or inquiries; when you provide information about your company’s technology stack; when you participate in surveys, webinars, or other events; when you sign up for our newsletter or marketing communications; and when you apply for a job with us.

3.2 Automatically Through Your Use of Our Service

Through cookies, web beacons, and similar tracking technologies; through log files and server data; through your interactions with our platform and features; and through device and browser information transmitted when you access our Service.

3.3 From Third-Party Sources

  • Business partners and affiliates: Information about potential customers and business contacts
  • Public sources: Publicly available information about companies and their technology infrastructure
  • Service providers: Information from our technology service providers that help us operate our business (e.g., Zoho CRM, AWS hosting services)
  • Social media platforms: If you choose to connect your social media accounts or log in using social media credentials

3.4 From Other Users

Information that other users of our Service provide about your organization (if you are part of the same company account).

4. HOW WE USE YOUR INFORMATION

4.1 Business and Commercial Purposes

We use the personal information we collect for the following purposes:

Service Provision and Account Management

To provide, maintain, and improve our Service; to create and manage your account; to authenticate users and prevent unauthorized access; to enable you to access and use the features of our Service; to provide customer support and respond to your inquiries; and to troubleshoot technical issues.

Transaction Processing

To process your payments and manage subscriptions; to fulfill orders and deliver services you have requested; to send transaction confirmations, receipts, and administrative information; and to manage billing and invoicing.

Communication

To contact you by email, phone, SMS, or other electronic communication regarding our Service; to send you service updates, security alerts, and administrative messages; to respond to your comments, questions, and customer service requests; and to provide technical support and assistance.

Marketing and Promotional Activities

To send you marketing communications about our products, services, offers, and promotions (with your consent where required); to provide you with information about similar services we offer; and to analyze the effectiveness of our marketing campaigns.

Note: We do not share your personal information with advertising networks or third-party analytics providers for advertising purposes.

Analytics and Service Improvement

To understand how users interact with our Service; to analyze usage patterns and trends; to conduct research and development to improve our Service; to develop new features, products, and services; to personalize your experience and provide recommendations; and to create aggregated, de-identified, or anonymized data for analytics and benchmarking.

Security and Fraud Prevention

To detect, prevent, and respond to security incidents, fraud, and illegal activities; to protect the rights, property, and safety of SaaSrooms, our users, and the public; to verify user identity and prevent unauthorized access; and to enforce our Terms of Service and other policies.

Legal Compliance

To comply with applicable laws, regulations, and legal processes; to respond to lawful requests from public authorities; to enforce our legal rights and defend against legal claims; and to comply with accounting, tax, and regulatory requirements.

4.2 Lawful Bases for Processing (UK GDPR)

For users in the UK and EEA, we process your personal information based on the following lawful bases:

  • Consent: You have given clear consent for us to process your personal information for specific purposes (e.g., marketing communications). You can withdraw consent at any time by contacting Info@saasrooms.com.
  • Contract Performance: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
  • Legitimate Interest: Processing is necessary for our legitimate interests or those of a third party, including operating and improving our Service, conducting analytics, ensuring security, fraud prevention, internal administration, and marketing our products and services.
  • Legal Obligation: Processing is necessary to comply with legal obligations to which we are subject.

5. HOW WE SHARE YOUR INFORMATION

5.1 Categories of Third Parties

We may share your personal information with the following categories of third parties:

Service Providers and Vendors

We share information with third-party service providers who perform services on our behalf, including:

  • Customer Relationship Management (CRM): Zoho CRM (for managing customer relationships and communications)
  • Cloud Hosting and Infrastructure: Amazon Web Services (AWS) – Ireland region for European data, Virginia region for US data
  • Payment Processors: Third-party payment service providers (for processing transactions)
  • Email Service Providers: For sending service and marketing emails
  • Customer Support Tools: For providing customer service and support
  • Security Services: For fraud detection, prevention, and security monitoring

These service providers are contractually obligated to use your personal information only as necessary to provide services to us and to maintain appropriate security measures.

Important: We do not share personal information with advertising networks or third-party analytics providers for advertising or cross-context behavioral advertising purposes.

SaaSrooms Group Entities

We may share your personal information between SaaSrooms Ltd and SaaSrooms LLC for internal business purposes, including providing our Services, customer support, account management, and complying with legal obligations. Data sharing between group entities is governed by appropriate data transfer mechanisms as described in Section 12.

Business Partners and Affiliates

  • Companies within our corporate group for internal business purposes
  • Business partners with whom we jointly offer products or services (with your consent where required)

Legal and Regulatory Authorities

  • Law enforcement agencies, courts, regulators, and government authorities when required by law or to protect our rights
  • Professional advisors (lawyers, accountants, auditors) when necessary for legal or business purposes

Business Transferees

Potential or actual acquirers, investors, or merger partners in the event of a business transaction (merger, acquisition, asset sale, reorganization, or bankruptcy).

Other Third Parties With Your Consent

Any other third parties with your explicit consent or at your direction.

5.2 Sale of Personal Information (CCPA Disclosure)

We do not sell your personal information.

SaaSrooms does not sell personal information to third parties for monetary or other valuable consideration. We do not engage in the sale of personal information as defined under CCPA, CPRA, or any other applicable state privacy law.

5.3 Sharing for Cross-Context Behavioral Advertising (CCPA Disclosure)

We do not share your personal information for cross-context behavioral advertising purposes.

SaaSrooms does not disclose personal information to third parties for cross-context behavioral advertising (targeted advertising) purposes. We do not share your personal information with advertising networks or third-party analytics providers.

5.4 Disclosure Summary

Category

Sold?

Shared?

Third Parties

Identifiers and Contact Information

No

No

Service Providers only

Financial Information

No

No

Payment Processors only

Internet/Network Activity

No

No

Service Providers only

Professional/Employment Info

No

No

Service Providers only

Inferences and Analytics

No

No

N/A

Contents of Communications

No

No

Service Providers only

Note: We have not sold or shared the personal information of consumers under 16 years of age.

6. DATA RETENTION

6.1 Retention Periods by Category

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Category

Retention Period

Rationale

Account Information

Active account + 24 months

Service provision, legal obligations

Financial Information

Per payment processor + 7 years

Financial recordkeeping

Communication Records

Active account + 3 years

Customer service, disputes

Marketing Data

Until unsubscribe + 30 days

Marketing, consent compliance

Usage Data/Analytics

36 months from collection

Service improvement

Cookies/Tracking Data

Session to 24 months

Service functionality

6.2 Deletion Process

When personal information is no longer needed, we securely delete or anonymize it. Deletion methods include permanent deletion from active systems, secure overwriting of storage media, physical destruction of physical storage media, and anonymization that renders data no longer personal information. We may retain information beyond the stated periods if required by law, necessary for legal proceedings, to establish or defend legal claims, or to comply with regulatory requirements.

7. YOUR PRIVACY RIGHTS

Your privacy rights vary depending on your location. Below we outline the rights available under different privacy laws.

7.1 Rights for UK and EEA Residents (UK GDPR)

If you are located in the UK or EEA, you have the following rights under the UK GDPR:

  • Right of Access: You have the right to request access to the personal information we hold about you and receive a copy of that information.
  • Right to Rectification: You have the right to request correction of inaccurate or incomplete personal information.
  • Right to Erasure: You have the right to request deletion of your personal information in certain circumstances.
  • Right to Restriction: You have the right to request restriction of processing in certain circumstances.
  • Right to Data Portability: You have the right to receive your personal information in a structured, machine-readable format.
  • Right to Object: You have the right to object to processing for direct marketing or based on legitimate interests.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time.
  • Right to Lodge a Complaint: You may lodge a complaint with the Information Commissioner’s Office (ICO).

7.2 Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights:

  • Right to Know: Request disclosure of categories and specific pieces of personal information collected.
  • Right to Delete: Request deletion of personal information we collected from you.
  • Right to Correct: Request correction of inaccurate personal information.
  • Right to Non-Discrimination: You will not receive discriminatory treatment for exercising your rights.
  • Authorized Agents: You may designate an authorized agent to make requests on your behalf.

Note: Because we do not sell or share personal information for cross-context behavioral advertising, the “Right to Opt-Out” does not apply to our data practices.

7.3 Rights for Residents of Other US States

If you reside in one of the US states with comprehensive privacy laws (including Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Michigan, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and others), you may have similar rights including: right to confirm processing, right to access, right to correct, right to delete, right to data portability, and right to non-discrimination.

7.4 Cookie Preferences and Do Not Track

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or delete cookies.

Global Privacy Control (GPC): We recognize and honor Global Privacy Control signals as a valid privacy preference signal.

8. HOW TO EXERCISE YOUR RIGHTS

8.1 Methods for Submitting Requests

To exercise any of the privacy rights described above, you may contact us using any of the following methods:

  • Email: Info@saasrooms.com
  • Phone (UK): +44 7766 070164
  • Phone (US): +1-404-474-7755
  • Web Form: https://saasrooms.com/contact/
  • Postal Mail: SaaSrooms Ltd, Privacy Rights Request, SaaSrooms, 308 High Street
    Croydon, Surrey. CR0 1NG (for UK/EU) or SaaSrooms LLC, Privacy Rights Request, SaaSrooms, 8 The Green, Suite #5702, Dover, DE 19901, USA (for US)

8.2 Verification and Response Timeframes

To protect your privacy and security, we must verify your identity before fulfilling your request.

  • UK GDPR Requests: We will respond within one month, with possible two-month extension for complex requests.
  • CCPA/CPRA Requests: We will respond within 45 days, with possible 45-day extension.
  • Other US State Requests: Response times generally range from 45 to 60 days.

9. DATA SECURITY

The security of your personal information is important to us. We implement appropriate technical and organizational measures designed to protect your personal information from unauthorized access, use, disclosure, alteration, and destruction.

Technical Safeguards: Encryption of data in transit and at rest; Secure Socket Layer (SSL) technology; firewalls and intrusion detection systems; regular security vulnerability assessments; access controls and authentication mechanisms; and secure hosting environment (AWS with industry-standard security).

Organizational Safeguards: Employee training on data protection; confidentiality agreements; access limited to need-to-know basis; incident response procedures; and regular review of security practices.

Security Limitations: While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. If you believe your interaction with us is no longer secure, please contact us immediately at info@saasrooms.com.

10. INTERNATIONAL DATA TRANSFERS

10.1 Data Storage and Processing Locations

Your personal information is securely stored based on your location:

  • European Data: Stored and processed on Amazon Web Services (AWS) in Ireland (eu-west-1 region). AWS complies with GDPR and maintains ISO 27001 certification.
  • US Data: Stored and processed on Amazon Web Services (AWS) in Virginia (us-east-1 region). AWS maintains SOC 2 Type II certification and complies with applicable US privacy laws.
  • Zoho CRM: Our customer relationship management system. Zoho complies with GDPR and maintains data centers in the EU and US.

10.2 Transfers Between Group Entities

Personal information may be transferred between SaaSrooms Ltd (UK) and SaaSrooms LLC (US) for internal business purposes. Such transfers are governed by:

  • UK-US Data Bridge: The UK government has recognized the US as providing adequate protection under the UK Extension to the EU-US Data Privacy Framework for certified organizations.
  • Standard Contractual Clauses (SCCs): We use Standard Contractual Clauses approved by the UK ICO and/or European Commission for transfers to countries without adequacy decisions.
  • Intra-Group Data Transfer Agreement: SaaSrooms group entities are bound by internal data transfer agreements that ensure consistent protection of personal information.

10.3 Your Rights Regarding International Transfers

UK and EEA residents can contact us to obtain information about the safeguards we have implemented for international transfers, copies of relevant transfer mechanisms, and the countries to which we transfer personal information.

11. CHILDREN’S PRIVACY

Our Service is not directed to children under the age of 13 (or under 16 in the EEA), and we do not knowingly collect personal information from children under these ages. If you are a parent or guardian and become aware that your child has provided us with personal information without your consent, please contact us at Info@saasrooms.com. If we become aware that we have collected personal information from a child under the applicable age without verification of parental consent, we will take steps to delete that information promptly.

CCPA Rights for Minors: We do not sell or share the personal information of consumers we know are under 16 years of age.

12. THIRD-PARTY LINKS AND SERVICES

Our Service may contain links to third-party websites, services, or applications that are not operated by us. We are not responsible for the privacy policies or practices of third-party websites or services. We strongly advise you to review the privacy policy of every website or service you visit. When we integrate third-party services into our Service (such as payment processors or customer support tools), we require these providers to implement appropriate privacy and security measures.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our data practices, applicable laws, new features or services, or organizational changes. When we make changes, we will update the “Last Updated” date and post the revised Privacy Policy on our website. For material changes, we will provide prominent notice and/or send you an email notification prior to the changes becoming effective.

Your continued use of our Service after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree to the revised Privacy Policy, you must stop using our Service and may request deletion of your account and personal information.

14. CONTACT INFORMATION AND COMPLAINTS

14.1 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For UK/EU Residents:

SaaSrooms Ltd – Privacy Team

308 High Street,Croydon, Surrey. CR0 1NG

Email: Info@saasrooms.com  |  Phone: +44 7766 070164

For US Residents:

SaaSrooms LLC – Privacy Team

8 The Green, Suite #5702, Dover, DE 19901, USA

Email: Info@saasrooms.com  |  Phone: +1-404-474-7755

14.2 Regulatory Authorities

For UK and EEA Residents: You have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Helpline: 0303 123 1113  |  Website: https://www.ico.org.uk

For California Residents: You may contact the California Attorney General’s office at https://oag.ca.gov/privacy. For residents of other US states, you may contact your state’s Attorney General office or consumer protection agency.

15. ADDITIONAL INFORMATION FOR SPECIFIC JURISDICTIONS

15.1 California Residents – Additional Disclosures

California “Shine the Light” Law: We do not share personal information with third parties for their direct marketing purposes without your explicit consent.

CalOPPA Compliance: Users can visit our site anonymously; this Privacy Policy is easily accessible on our homepage; users will be notified of changes; and users can change their personal information by logging into their account or emailing us.

15.2 Nevada Residents

Nevada residents have the right to opt out of the sale of certain covered information. We do not sell your covered information as defined under Nevada law.

15.3 Business Customers

If you use our Service as part of a business account, your organization’s administrator may have access to your account and information, your use may be subject to your organization’s policies, and your organization may be the controller of the information processed through your use of our Service.

SUMMARY OF KEY POLICY FEATURES

This Privacy Policy reflects the following key commitments:

  • Multi-subsidiary structure: SaaSrooms Ltd (UK holding) and SaaSrooms LLC (Delaware, USA)
  • Regional data storage: European data in AWS Ireland; US data in AWS Virginia
  • No sale of personal information: We do not sell personal information under any applicable law
  • No advertising sharing: We do not share personal information with advertising networks or analytics providers
  • Aggregated data use: We may use de-identified data for benchmarking and insights, but not for advertising
  • Comprehensive US state law compliance: CCPA/CPRA and 20+ other state privacy laws
  • UK/EU GDPR compliance: Full compliance with UK and EU data protection requirements

Thank you for trusting SaaSrooms with your information.

We are committed to protecting your privacy and being transparent about our data practices.

Identifying and Eliminating Waste in Your Technology Stack

Stop SaaS Waste. Boost ROI.

The SaaSrooms Audit Tool helps you cut costs, optimize licenses, and negotiate better contracts—with AI-powered insights.