Saasmetry

Privacy

Saasmetry reads data from the services you connect and shows it back to you. This page describes what is stored, for how long, and who can reach it.

Operator: this deployment is run by the organisation named in your agreement. Replace this paragraph with your legal entity, registered address and a contact address for data-protection questions before going live.

What is stored

  • Your account: name, email address, timezone, and a hash of your password if you use one. OAuth sign-ins store the provider's account id rather than a password.
  • Your workspace: the products you add, the services you connect, and the metrics, issues, deployments, incidents and events pulled from them.
  • Provider credentials: encrypted with AES-256-GCM under a key unique to your workspace, which is itself wrapped by a master key held outside the database. Only the last few characters are ever displayed.
  • An audit log: who changed members, credentials, products and settings, with a timestamp and the address the request came from.

What is not stored

  • Card details. Payments go through Stripe-hosted pages; no card number reaches this server.
  • The contents of your customers' accounts. Saasmetry reads aggregates and issue metadata, not personal records from your users.
  • Credentials in any recoverable form outside the encrypted store. Disconnecting a provider deletes the credential outright.

How long it is kept

Hourly detail is kept for 30 days and daily history for the window set in your workspace settings — 13 months by default, adjustable per plan. A retention job deletes anything past that window, including the matching activity feed entries. Sync logs are kept for 30 days.

Deleting a product deletes its metrics, issues, deployments, incidents and events. Deleting a workspace deletes everything belonging to it. Deleting your account deletes it and any workspace where you were the only member.

Getting your data out

Settings → Export workspace data produces a JSON file with everything the workspace holds. Credentials are excluded by design: an export is a file that ends up in a shared drive, and the point of encrypting them is that they do not leave in readable form.

Who else sees it

Members of your workspace, according to their role. Saasmetry calls the providers you connect using the credentials you supply; no data is sent to any third party you have not connected, other than the subprocessors below.

Subprocessors

  • Stripe — payments and subscription billing.
  • Resend — transactional email (verification, invitations, alerts, reports).
  • The European Central Bank — daily reference exchange rates. No personal data is sent; rates are fetched, not pushed.
  • Your hosting provider — replace this line with the provider and region this deployment runs in.

Your rights

Access, correction, export, deletion and objection, exercisable from Settings → Your account or by contacting the operator. Deletion is immediate and irreversible; export first if you want a copy.