We built Dollar SaaS Club to keep things simple. That applies to privacy, too. This policy explains what we collect, why we collect it, and what you can do about it.
What we collect
When you sign up
- Your name, email, and profile image — pulled from Replit Auth when you log in.
- A user ID issued by Replit.
When you use the product
- Subscriptions: which tools you subscribe to, billing interval, payment method type.
- Simple CRM: contacts you create (name, email, phone, company, notes, value).
- Mini GPT: the conversations and messages you send + the AI responses.
- Flow Automator: workflow definitions + run history.
- Social Queue: drafts, scheduled posts, their status.
- Preferences: notification toggles.
When you pay
Payment is handled by Stripe. We store a Stripe customer ID and a Stripe subscription ID. We never see or store your card number, CVC, or bank account number.
Automatically
- Server logs (IP address, user agent, requested URL) for abuse prevention and debugging. Retained ~30 days.
- A session cookie so you stay logged in.
- Local storage on your device (e.g., the shopping cart).
How we use it
- Operate the product — show your data back to you, run the tools.
- Send transactional email (welcome, subscription receipts, cancellation).
- Process payments and manage subscriptions.
- Send your Mini GPT messages to OpenAI to generate responses.
- Prevent abuse, debug issues, and keep the service secure.
- Tell you about important product or policy changes.
We don't sell your data. We don't run behavioral advertising.
Cookies & local storage
We use a single session cookie (connect.sid) set by our auth layer, marked HTTP-only and same-site. We use browser local storage for the shopping cart and for your preferred payment method. No third-party analytics cookies at this time.
Third-party processors
We only share data with the services needed to run the product. As of this writing:
- Neon — PostgreSQL hosting. Stores the data above.
- Replit — hosting + authentication.
- Stripe — payment processing.
- Google (Gmail API) — sends our transactional emails.
- OpenAI — generates Mini GPT responses from your prompts + conversation history.
Each operates under its own privacy policy for the data it handles.
Data retention
We keep your data for as long as your account is active. When you delete your account, we delete your rows (contacts, chats, workflows, posts, subscriptions, preferences) within 30 days. Some records (e.g., payment history required for tax purposes) may be retained longer to meet legal obligations.
Data security
All traffic to the site is HTTPS-encrypted. Passwords never touch our servers — authentication is handled by Replit. Payment details never touch our servers — they go directly to Stripe. We restrict access to production data to the small team running the service.
Your rights
You can:
- Access your account data by logging in.
- Export data (email us and we'll help).
- Correct inaccuracies (contact fields you can edit directly; profile fields go through Replit).
- Delete everything via Settings → Danger Zone, or by emailing us.
Depending on where you live (e.g., EU, UK, California), you may have additional rights under GDPR / UK GDPR / CCPA. Email [email protected] to exercise them.
International data transfers
Our infrastructure runs in the United States. If you access the service from outside the US, your data will be transferred to and processed in the US. By using the service you consent to that transfer.
Children's privacy
Dollar SaaS Club isn't for people under 13 (or under 16 in the EU/UK). We don't knowingly collect their data. If you think a child has created an account, email us and we'll remove it.
Changes
We'll post updates here and change the "Last updated" date. Material changes will also be announced by email before they take effect.
Contact
Privacy questions or requests: [email protected].