Privacy Policy

Last updated: February 13, 2026

1. Introduction

Welcome to SaaFee ("we", "us", "our"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at saafee.com. By using SaaFee, you agree to the practices described in this policy. If you do not agree, please discontinue use of our services.

2. Information We Collect

Account Information: When you register, we collect your name, email address, and password (stored in hashed form). If you sign up via a social login provider, we receive your name and email from that provider.

Payment Information: Premium subscriptions are processed through PayPal. We do not store your credit card details — PayPal handles all payment data securely. We only store your subscription ID and billing cycle.

Usage Data: We collect information about how you use SaaFee, including hashtags you copy, favorites you save, search queries, and pages you visit.

Uploaded Content: If you use our Image-to-Hashtag feature, uploaded images are temporarily stored for processing and automatically deleted after 7 days.

Device & Technical Data: We collect your IP address, browser type, operating system, and general location (country-level) for language detection purposes. We use cookies to remember your language preference and session.

3. How We Use Your Information

We use the information we collect to:
• Provide, operate, and maintain our services
• Process your Premium subscription and manage your account
• Personalize your experience (language, region-based content)
• Generate AI-powered hashtags and captions using OpenAI (your prompts and images are sent to OpenAI for processing)
• Detect your approximate location (country) for language detection using your IP address
• Send transactional emails (verification, password reset, subscription confirmations)
• Monitor usage to enforce rate limits and prevent abuse
• Improve our services based on aggregated, anonymized usage patterns

4. Cookies & Tracking

We use the following cookies:
• saafee_access_token: Authentication token (httpOnly, session)
• saafee_user: Basic user info for UI display (name, tier)
• language_preference: Your selected language (1=English, 2=Arabic, 3=Turkish)
• language_manual: Set when you manually switch language, prevents automatic GeoIP override

We do not use third-party tracking cookies, advertising cookies, or analytics platforms like Google Analytics. We do not sell or share your browsing data with advertisers.

5. Third-Party Services

We use the following third-party services to operate SaaFee:
• PayPal: Payment processing for Premium subscriptions. See PayPal's Privacy Policy.
• OpenAI: AI-powered hashtag and caption generation. Prompts and uploaded images are sent to OpenAI's API for processing. See OpenAI's Privacy Policy.
• ip-api.com: IP-based country detection for automatic language selection. Only your IP address is shared.
• SMTP2GO: Transactional email delivery (verification, password reset emails).

We do not sell, rent, or trade your personal information to any third party.

6. Data Retention

We retain your data as follows:
• Account data: Retained for as long as your account is active. You can request deletion at any time.
• Uploaded images: Automatically deleted after 7 days.
• Usage logs: Retained for up to 90 days for abuse prevention, then deleted.
• AI usage records: Monthly counters are retained for rate-limiting purposes and reset each month.
• Payment records: Retained as required by applicable tax and accounting laws.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:
• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your account and personal data.
• Data Portability: Request your data in a machine-readable format.
• Withdraw Consent: Withdraw consent for data processing at any time.
• Object: Object to processing based on legitimate interests.

To exercise any of these rights, contact us at support@saafee.com. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:
• Passwords are hashed using secure algorithms (never stored in plain text)
• JWT-based authentication with httpOnly cookies
• HTTPS encryption for data in transit
• Regular security reviews of our codebase

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Children's Privacy

SaaFee is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at support@saafee.com and we will promptly delete it.

10. International Data Transfers

SaaFee operates from servers located in Germany (EU). If you access our services from outside the EU, your data may be transferred to and processed in the EU. By using SaaFee, you consent to this transfer. We ensure that any data transfers comply with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of SaaFee after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:
• Email: support@saafee.com
• Contact Form: saafee.com/contact