Legal Reference

Privacy Policy

Last Updated: October 9, 2026

1. Introduction

WhatASaaS ("we", "us", "our") operates whatasaas.com. This policy describes how we collect, use, and protect data from factory accounts, generated apps, and the optional knowledge add-on.

2. Data We Collect

Account identity: Name, email, and billing details via Polar.
App data: Briefs, specs, generated source, and chat logs for apps you build on whatasaas.com.
Knowledge add-on: Documents you ingest, knowledge-graph data derived from them, and per-app query/ingest meters.
Usage metadata: Hosting events, gate results, and Polar usage events.

3. Knowledge isolation

If you enable the RAG add-on, documents are stored and queried scoped to your app id. You are responsible for having the right to ingest that content.

4. Data Usage & AI Training

We do not sell your documents or customer lists. Prompts and knowledge for an app stay scoped to that app. Model providers may process prompts to generate replies.

5. Sub-processors & data return

Neon: app, account, and usage storage (Postgres).
Knowledge plugin host: isolated per-app knowledge-graph storage and retrieval.
Google Gemini: chat replies; prompts are processed to generate replies.
Polar: reseller and merchant of record for Host and Studio. Those plans renew monthly until canceled in the Polar customer portal. Factory and Care are not self-serve Polar checkouts.
Resend: transactional email.
Vercel: hosting, cron, and request logs.
Cloudflare R2: file and image uploads.

On termination or eject you receive a database dump, knowledge re-ingest from your source documents, and transfer assistance within 14 days; platform copies are then purged per backup retention (90 days). Deletion requests propagate within 30 days. The full White-glove DPA is shared before setup calls and governs care engagements.

6. Security

Data in transit is protected with TLS. Data at rest is encrypted by our vendors (Neon for Postgres, Cloudflare R2 for object storage) according to their defaults. Sign-in is email and password, with optional Google sign-in.

7. Contact Us

For data deletion requests or privacy inquiries, contact our Data Protection Office at:
[email protected]

2. Data We Collect

Account identity: Name, email, and billing details via Polar.

App data: Briefs, specs, generated source, and chat logs for apps you build on whatasaas.com.

Knowledge add-on: Documents you ingest, knowledge-graph data derived from them, and per-app query/ingest meters.

Usage metadata: Hosting events, gate results, and Polar usage events.

5. Sub-processors & data return

Neon: app, account, and usage storage (Postgres).

Knowledge plugin host: isolated per-app knowledge-graph storage and retrieval.

Google Gemini: chat replies; prompts are processed to generate replies.

Polar: reseller and merchant of record for Host and Studio. Those plans renew monthly until canceled in the Polar customer portal. Factory and Care are not self-serve Polar checkouts.

Resend: transactional email.

Vercel: hosting, cron, and request logs.

Cloudflare R2: file and image uploads.