Legal
Last updated 7 June 2026 · Effective 7 June 2026
This Privacy Policy explains how Saaslivery collects, uses, shares, and protects personal information when you visit our websites, create an account, and use our workspace and apps. It also explains your privacy choices and the rights available to you under the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and other applicable laws. Please read it alongside our Terms of Service and, for business customers, our Data Processing Addendum (DPA).
Saaslivery is a multi-tenant business-to-business software-as-a-service platform: an ecosystem of small, interconnected productivity apps that live under a single workspace. We replace sprawling office suites with modular micro-utilities that work on their own and better together. Our apps span communication (Chat, Calls, Audio Rooms, Mail), organisation (Calendar, Contacts, Files, Papers, Wiki, Tables, Tasks, Tickets, Feeds), business operations (CRM, Finance, Signatures), and people operations (Workers, Leaves), alongside a marketplace of third-party apps.
This policy applies to our websites and services at saaslivery.com, api.saaslivery.com, apps.saaslivery.com, account.saaslivery.com, your workspace at [workspace].saaslivery.com, and our real-time media service at rtc.saaslivery.com (together, the "Services").
Privacy law distinguishes between the party that decides why and how personal data is processed (the "controller") and the party that processes data on the controller's behalf and instructions (the "processor"). Saaslivery acts in both roles depending on the data:
If you are an individual user of a workspace and you want to access, correct, export, or delete Customer Content, or to understand how your employer or organisation uses that content, please contact your workspace administrator, who is the controller of that data. Where we receive such a request directly, we will refer you to the relevant controller and assist that controller in responding, as required by law.
We collect the following categories of information.
When you create or maintain a Saaslivery identity, we collect:
Payments are processed by our payment processor, Flutterwave. Saaslivery does not receive or store full card numbers. We store only:
When you use the Services, we automatically collect:
As a processor, we host and process the content that workspaces and their members create, including: messages and attachments (Chat); files and documents (Files, Papers, Wiki); tasks; CRM records and deals; finance documents such as invoices, expenses, and quotes; contacts; table data; calendar and leave data; feed posts; and call and audio-room media and metadata. Customer Content is handled on behalf of the customer organisation under our DPA, not under this policy's controller terms.
When you contact us for support, sales, or legal matters, or respond to a survey, we collect the contents of your message and any information you choose to provide so we can respond and keep a record of the interaction.
We use strictly-necessary session and authentication cookies, preference storage, and minimal first-party analytics. We do not use third-party advertising cookies. See Section 5 for details.
We obtain personal information from the following categories of sources:
Some personal information is necessary to enter into or perform our contract with you and to provide the Services. In particular, your email address and password are required to create and secure an account, and your name and workspace details are required to set up and operate a workspace. If you do not provide this information, we cannot create your account or provide the Services to you. Other details, such as your job title, avatar, phone number, and postal address, are optional and provided at your discretion; declining to provide them will not prevent you from using the core Services.
Where we obtain your personal information not from you directly but from a workspace organisation or its administrator (for example, when an administrator adds you to a workspace or a member invites you), the source of that data is the workspace organisation. The categories of data we receive in this way are typically your email address and, where provided, basic profile and role details. The workspace organisation is the controller of that data, and you can ask it about the information it has shared with us. We process it to set up your membership and provide the Services, as described in this policy.
As a controller, we use personal information for the following purposes:
We process Customer Content only to provide the Services and on the documented instructions of the customer organisation, as set out in our DPA.
Where the GDPR or UK GDPR applies and we act as a controller, we rely on the following legal bases under Article 6(1):
For Customer Content we process as a processor, the customer organisation (as controller) is responsible for establishing the applicable legal basis.
We engage the following sub-processors to help us provide the Services. We require each to maintain appropriate security and confidentiality and to process personal data only as needed to provide their service to us. Our internal event bus is first-party Saaslivery infrastructure and is not a third party.
| Sub-processor | Purpose | Data processed | Primary region |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting & infrastructure | All platform and customer data at rest and in transit | EU (Ireland) |
| Cloudflare, Inc. | CDN, edge security, object storage (files, avatars, attachments), and TURN relay for calls | Files, attachments, avatars, media, and network/connection data | Global / EU |
| LiveKit, Inc. | Real-time audio & video for group calls and audio rooms | Audio/video streams, participant and room metadata | Global |
| Flutterwave | Payment processing | Cardholder and payment data, billing contact details | Global |
| Resend | Transactional email delivery (sign-in codes, invitations, notifications) | Recipient email address and message content | United States / Global |
| New Relic | Application performance monitoring & observability | Technical logs, request traces, limited technical metadata | United States / Global |
We may update this list from time to time as our service providers change. Business customers may request advance notice of new sub-processors under our DPA.
We host platform and customer data in the European Union (AWS, Ireland). However, Saaslivery is operated by Cloudcamp Co. (a United States company) and its Nigerian subsidiary Microcessor, both established outside the European Economic Area and the United Kingdom, and some of our sub-processors operate in the United States or globally. As a result, your personal information may be transferred to, stored in, or accessed from countries outside the European Economic Area and the United Kingdom, whose data-protection laws may differ from those of your country.
We identify the specific transfer mechanism we rely on for each destination or category of recipient as follows:
Where required, we also carry out transfer impact assessments and apply supplementary technical and organisational measures. You have the right to obtain a copy of the safeguards we rely on — including the relevant Standard Contractual Clauses — by contacting us at hello@saaslivery.com or using the contact details in Section 17.
We keep personal information only for as long as necessary for the purposes set out in this policy, and then delete or anonymise it. How long we keep data depends on its type and purpose:
We may retain certain information for longer where required by law or to establish, exercise, or defend legal claims.
We use technical and organisational measures designed to protect personal information, including:
No method of transmission or storage is 100% secure. While we work hard to protect your information, we cannot guarantee absolute security. If you believe your account or data has been compromised, please contact us immediately at hello@saaslivery.com.
If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights in relation to your personal data, subject to applicable conditions and exceptions:
Contact us at hello@saaslivery.com. We will respond within the timeframes required by law. We may need to verify your identity before acting on a request.
For data where Saaslivery is the controller (website, account, and billing data), we will handle your request directly. For Customer Content, where Saaslivery is a processor and your workspace organisation is the controller, please direct your request to your workspace administrator. If you contact us about such content, we will refer the request to the relevant controller and assist them in responding.
You may lodge a complaint with your local data protection supervisory authority. In the United Kingdom this is the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom — helpline +44 (0)303 123 1113, ico.org.uk. In the EEA it is the supervisory authority of your country of residence, place of work, or the place of the alleged infringement; you can find the relevant authority and its contact details via the European Data Protection Board's list of members at edpb.europa.eu. If you are in Switzerland, the competent authority is the Federal Data Protection and Information Commissioner (FDPIC), edoeb.admin.ch; for transfers from Switzerland we rely on the Standard Contractual Clauses together with the Swiss addendum recognised by the FDPIC. We would, however, appreciate the chance to address your concerns first.
If you are a California resident, the CCPA, as amended by the CPRA, gives you specific rights regarding your personal information. The categories of personal information we collect, the purposes for which we use them, and the categories of recipients with whom we share them are described in Sections 2, 3, 6, and 7. The categories we may collect include identifiers (such as name, email, IP address), commercial information (such as subscription and billing records), internet and network activity (such as usage and log data), geolocation (approximate, from IP address), audio and visual information (call and room media), professional information (such as job title and workspace role), and the contents of communications with us.
Sources of personal information. We collect personal information directly from you, automatically from your use of the Services, from your workspace organisation or its administrator, and from our payment processor (see Section 2.8). We collect and use each category for the business and commercial purposes described in Sections 3 and 6.
Sensitive personal information. The CPRA treats certain information as "sensitive". We collect a limited amount of sensitive personal information, namely account log-in credentials (your email and password) and the contents of communications such as messages and call or room media. We use sensitive personal information only as necessary to provide and secure the Services and for the limited purposes permitted by the CPRA — we do not use or disclose it to infer characteristics about you or for any purpose that would require offering a right to limit its use.
You have the right to:
How to exercise. Submit a request to hello@saaslivery.com. Saaslivery operates exclusively online and has a direct relationship with the consumers whose information it collects; accordingly, as permitted by the CCPA, we designate this email address as our method for submitting consumer requests. We will verify your request, and where required will respond within the statutory timeframe. You may use an authorized agent to make a request on your behalf, provided they submit proof of authorisation and we can verify your identity.
Opt-out preference signals. Because we do not sell or share personal information and do not engage in cross-context behavioural advertising, there is no sale or share for an opt-out preference signal such as the Global Privacy Control (GPC) to act upon. We do not engage in cross-context behavioural advertising regardless of any such signal.
Where Saaslivery processes information as a service provider on behalf of a business customer (our processor role over Customer Content), we will direct your request to that business, which is responsible for responding.
Shine the Light. California's "Shine the Light" law (Civil Code § 1798.83) permits California residents to request information about disclosures of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.
Residents of Virginia, Colorado, Connecticut, Utah, and Texas (and other states with comparable laws) have rights similar to those described above, which may include the right to confirm and access their personal data, to correct inaccuracies, to delete personal data, to obtain a portable copy, and to opt out of targeted advertising, the sale of personal data, and certain profiling. As noted, we do not sell personal data or use it for targeted advertising, and we do not engage in profiling that produces legal or similarly significant effects. To exercise these rights, contact hello@saaslivery.com. Where a state provides an appeal process for a declined request, we will inform you how to appeal.
Saaslivery is a business-to-business service intended for organisations and their workforce. It is not directed to children, and we do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us with personal information, please contact hello@saaslivery.com and we will take appropriate steps to delete it.
We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or that similarly significantly affect you. Some features may use automation to support and improve the Services, but meaningful human involvement remains part of any decision that would have such effects.
We may update this Privacy Policy from time to time to reflect changes in our practices, the Services, or applicable law. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice (for example, by email or an in-product notice). We encourage you to review this policy periodically. Your continued use of the Services after an update takes effect constitutes acceptance of the revised policy, to the extent permitted by law.
The controller responsible for the personal information described in this policy is Cloudcamp Co., a company incorporated in Delaware, United States, which operates the Saaslivery platform together with its subsidiary Microcessor (registered at 5 Lungi Street, Nigeria) for the African market. If you have questions, concerns, or requests regarding this policy or your personal information, please contact our privacy team:
Data protection contact. Saaslivery is operated by Cloudcamp Co. in the United States. If you are in the EEA or UK, you can contact us about this policy or your personal information at hello@saaslivery.com, and we will respond in accordance with applicable data protection law.
Right to complain. If you are in the EEA or UK and believe we have not handled your personal information properly, you have the right to lodge a complaint with your local supervisory authority, including the UK Information Commissioner's Office (ICO). We would welcome the opportunity to resolve your concerns directly first.