PRIVACY NOTICE
How we handle your information.
This notice explains what personal data we collect when you visit this website, chat with our assistant, email us, book a call, message us on WhatsApp, work with us, or hear from us about our services. It also explains the choices and rights you have.
Last updated:
Who we are
SaaSAppStudio is a trading name of Fortuna Supply Ltd, a company registered in England and Wales, company number 15831822. Our registered office is 70 Oakley Square, Suite 6, London, NW1 1NJ, United Kingdom. We are the controller of the personal data described here.
Our team works from İzmir, Türkiye. For any privacy question or request, email hello@saasappstudio.com. We have not appointed a data protection officer; the founders handle privacy matters directly.
The short version
- The main pages of this website do not use analytics, advertising or tracking cookies.
- Our chat assistant sends what you type to AI providers so it can reply. Please do not share sensitive information in the chat.
- We use your details to answer you, deliver projects and run the studio. We do not sell your data or use it for advertising.
- You can ask us for a copy of your data, ask us to correct or delete it, or tell us to stop contacting you, at any time.
Visiting this website
The website is hosted by Cloudflare. To deliver pages and protect the site from abuse, Cloudflare processes technical information such as your IP address, browser details and the pages you request. We rely on our legitimate interest in running a secure website.
We set no cookies on our main pages. Cloudflare may set a strictly necessary security cookie if it needs to check for automated traffic. If you use the chat, it stores a chat reference in your browser's local storage so you can pick up the conversation for 24 hours. It also stores a note of which messages you have seen.
We also publish experimental design pages, such as the themed showcases and the standalone chat page. They are excluded from search engines and not linked from our main navigation. These pages load Google Fonts, which means Google receives your IP address. They also ask whether you accept Google analytics cookies. Google Tag Manager, and any analytics it runs, loads only if you click "Accept". We keep your choice in your browser for 12 months.
You can change your choice at any time. This button forgets it and removes any Google Analytics cookies already set on this site, and the question appears again on your next visit to those pages.
Chatting with our assistant
The "Ask the studio" chat runs on DMtoLead, our own chat system. When you use it, we process your messages and anything you choose to include in them, such as your name, email address, phone number or project details. We also keep the time of each message and the replies you receive.
Replies are generated automatically by AI models. Up to your last 30 messages and a summary of the conversation are sent with each request so the reply makes sense in context. The assistant may keep short notes about your enquiry, such as what you are looking for, to answer follow-up questions. The founders can read conversations and may take over and reply personally. When a new conversation starts, they get a notification on their phones and by email with a short preview of your message.
We use chats to answer your questions and to follow up on enquiries you start. We rely on our legitimate interest in responding to people who contact us and, where you ask about working with us, on taking steps at your request before a contract.
The AI does not make decisions about you that have legal or similarly significant effects. If you would rather speak to a person, say so in the chat or email us.
Email, bookings and WhatsApp
Email. Email sent to our addresses, and email we send, is handled through Resend and stored in our email system so the founders can read and reply to it. We keep the message content, addresses, attachments and delivery status.
Booking a call. Our booking link opens Calendly, which collects the details you enter and handles your data under its own privacy policy. We receive your booking details by email and use them to prepare for and hold the call.
WhatsApp. Messages to our WhatsApp Business number are delivered through Meta's WhatsApp Business platform and answered first by our DMtoLead assistant, in the same way as the website chat. We receive your WhatsApp name, number and messages. Meta handles your use of WhatsApp under its own terms and privacy policy.
We rely on our legitimate interest in answering enquiries, or on taking steps at your request before entering into a contract.
Clients and partners
When we work together, we process business contact details, project communications, meeting notes and the information needed to deliver, invoice and support the work. We rely on the contract between us, on our legitimate interests in managing the relationship, and on our legal obligations, for example for accounting.
If we contact you about our services
We sometimes introduce our services to people in relevant business roles. We collect their details from public sources such as company websites, professional profiles, public partner directories and job listings. For this we keep a business contact's name, role, company, work email address, where we found the details and when, and our messages to them.
We rely on our legitimate interest in offering relevant services to businesses. We send at most three messages in total, and any reply pauses follow-ups. Every message explains how to stop further contact, and you can object at any time by replying to any of our messages or emailing hello@saasappstudio.com. We then delete your details and keep only your email address on a do-not-contact list, so that we do not contact you again.
Who receives your data
We use the service providers below to run the studio. They process data on our behalf, except where noted as an independent service.
| Provider | Purpose | Location |
|---|---|---|
| Cloudflare | Website hosting and security, access control for our admin tools | Global network; United States company |
| Amazon Web Services | Hosting for the chat system (DMtoLead) and our older admin tools; backup email delivery for chat notifications | Germany (Frankfurt); United States for backup email |
| MongoDB Atlas | Databases for email and chat | Germany (Frankfurt) |
| Resend | Sending and receiving email, including chat notification emails | Our sending is set to its EU region (Ireland); United States company |
| OpenAI | Main AI model for chat replies | United States |
| Groq, Fireworks AI, SambaNova, Cerebras, OpenRouter and Google (Gemini) | Backup AI models, used only when an earlier provider is unavailable. OpenRouter passes requests to model providers including xAI, Alibaba (Qwen) and Anthropic. | United States |
| Apple and Google (Firebase) | Delivering new-chat notifications to the founders' phones | United States |
| Calendly | Call booking (independent service) | United States |
| Meta (WhatsApp) | WhatsApp messaging (independent service) | United States and other countries |
| Fonts on experimental pages, and Tag Manager and Analytics there only if you accept (independent service) | United States |
We may also share data with professional advisers, or where the law requires it.
International transfers
Our team accesses data from Türkiye, and some of the providers above process data in the United States and other countries. Not all of these countries are recognised by the UK as providing an adequate level of data protection.
Where a provider's terms include safeguards recognised under UK law, such as the UK International Data Transfer Addendum or the UK Extension to the EU–US Data Privacy Framework, we rely on them. The backup AI providers are used under their standard API terms. You can ask us which safeguards apply to a particular provider.
How long we keep it
| Data | Kept for |
|---|---|
| Chat and WhatsApp conversations | 12 months after the last message |
| Chat system logs, which may include message text | 3 days |
| Chat reference in your browser | 24 hours, or until you clear your browser storage |
| Your cookie choice in your browser | 12 months, or until you change it |
| Email correspondence and booking details | Up to 6 years after our last contact |
| Client and project records | 6 years after the project ends, or longer where the law requires it |
| Business contacts we have reached out to | 12 months from when we collected the details, unless you reply |
| Do-not-contact list | Your email address only, for as long as we do business outreach |
We may keep data for longer if we need it to establish, exercise or defend a legal claim.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of your personal data;
- correct data that is wrong or incomplete;
- delete your data;
- restrict how we use your data;
- transfer data you gave us to you or another organisation, where the law allows.
You also have the right to object to processing based on our legitimate interests. You can always object to direct marketing, and we will stop.
To make a request, email hello@saasappstudio.com. We will reply within one month, and we may need to confirm your identity first.
If you are unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Children and changes
Our services are for businesses and are not intended for children.
We will update this notice when our practices change. The date at the top shows when it last changed.