This Privacy Policy explains how OhMySaaS LLC ("OhMySaaS", "we", "us") collects, uses, shares and protects personal information when you visit ohmysaas.com or use any product we operate, including wRanks, QuQi and NoBounz (each a "Service").

1. Who we are

OhMySaaS LLC is a Delaware limited liability company with its registered office at 1111B S Governors Ave, Suite 43066, Dover, DE 19904, United States. We are the controller of the personal information described in this policy. For privacy questions, write to hello@ohmysaas.com.

2. Scope

This policy covers our corporate website and the Services listed above. Individual products may publish supplementary notices describing product-specific processing; where they conflict, the product notice governs for that product. This policy does not cover third-party websites we link to.

3. Information we collect

Information you give us. Account details (name, email address, company, password hash), billing details processed by our payment processor, Stripe, support correspondence, and anything you choose to submit through forms on this website.

Information we collect automatically. IP address, browser and device type, referring page, pages viewed, timestamps, and diagnostic logs. We use cookies and similar technologies as described in our Cookie Policy.

Customer content. Data you upload or connect to a Service — for example the domains you track in wRanks, the sites QuQi crawls, or the address lists you verify with NoBounz. We process that content on your instructions and do not sell it.

4. How we use information

• To provide, maintain and improve the Services
• To create and administer accounts, and to authenticate users
• To process payments, invoices and renewals
• To respond to support requests and other enquiries
• To monitor for abuse, fraud, and security incidents
• To send service announcements and, where permitted, occasional product updates
• To comply with legal obligations and enforce our Terms of Service

5. We do not sell your personal information

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We do not use customer content to train third-party machine learning models.

6. How we share information

We share personal information only with: (a) service providers who process data on our behalf under written contract — see our Sub-processors page; (b) professional advisers such as accountants and lawyers, bound by confidentiality; (c) authorities where required by law or valid legal process; and (d) an acquirer in connection with a merger, financing or sale of assets, subject to this policy continuing to apply.

Payments. Payments are processed by Stripe, Inc. When you pay, your card details are collected directly by Stripe and are not stored on our systems; we receive only the information needed to manage your subscription, such as the last four digits, card brand, expiry, billing country and transaction outcome. Stripe processes this data as an independent controller under its own privacy policy.

Data processing agreement. Where we process personal data on your behalf as part of the Services, our Data Processing Agreement, incorporating the Standard Contractual Clauses, applies and is available on request at hello@ohmysaas.com.

7. Retention

We keep personal information for as long as your account is active and for a reasonable period afterwards. Account records and customer content are deleted or anonymised within 90 days of account closure unless we must retain them to comply with law, resolve disputes or enforce agreements. Backups roll off on a 35-day cycle. Invoices, payment records and tax records are retained for seven years, or longer where required by tax or anti-money-laundering law, notwithstanding the deletion timelines above.

8. Security

We use encryption in transit and at rest, least-privilege access controls, and continuous monitoring. Our practices are summarised on the Security page. No system is perfectly secure, and we cannot guarantee absolute security.

9. Your choices and rights

You may access, correct, export or delete your account information from within the relevant product, or by emailing hello@ohmysaas.com. You may unsubscribe from marketing email at any time using the link in the message; service and billing notices will still be sent. We will verify your identity before acting on a request and will respond within 45 days.

If you are in the EEA, UK or Switzerland. We process your personal data on the following legal bases: performance of our contract with you (providing and billing for the Services); our legitimate interests (securing the Services, preventing fraud, improving our products); compliance with legal obligations (tax and accounting records); and your consent, where we ask for it (marketing, non-essential cookies). You have the right to access, rectify, erase, restrict and object to processing of your personal data, and the right to data portability. Where processing is based on consent you may withdraw it at any time. To exercise any of these rights, email hello@ohmysaas.com; we respond within one month. You may also lodge a complaint with your local supervisory authority.

If you are a resident of California or another US state with comprehensive privacy legislation, you may request access to, correction of, or deletion of your personal information, and may request details of the categories we collect, use and disclose. We do not sell or share personal information for cross-context behavioural advertising. We will not discriminate against you for exercising these rights. Email hello@ohmysaas.com to make a request.

10. Children

Our Services are business tools and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. Location of processing

We operate from the United States and store data primarily in US data centres. If you access the Services from outside the United States, you understand that your information will be transferred to, stored and processed in the United States. Where we transfer personal data from the EEA, UK or Switzerland to the United States, we rely on the European Commission's Standard Contractual Clauses, together with the UK International Data Transfer Addendum where applicable, and we carry out transfer risk assessments. A copy of the relevant clauses is available on request.

12. Changes to this policy

We may update this policy from time to time. When we make material changes we will revise the date above and, where appropriate, notify account holders by email. Continued use of the Services after an update means you accept the revised policy.

13. Contact us

OhMySaaS LLC · 1111B S Governors Ave, Suite 43066, Dover, DE 19904, US · hello@ohmysaas.com