A plain-language summary of what SaaSMaestro keeps and how it’s protected. The privacy policy has the full details.
What is stored
- Your account: name, email address, a one-way hash of your password, and your preferences.
- Your workspaces: websites, groups, team members, notes, actions, report schedules and settings.
- From Google: aggregated daily totals and top lists (channels, landing pages, searches, devices) for the websites you add.
- From monitoring: uptime results, outages and recent snapshots of watched pages.
- A security log of sign-ins and important changes.
SaaSMaestro never requests event-level or personal data about the visitors to your websites, so it can’t identify them.
How it’s protected
- Google access is read-only and can be revoked from SaaSMaestro or from your Google account at any time.
- Google tokens, the OAuth client secret and two-factor secrets are encrypted with a dedicated key kept apart from the rest of the application.
- Passwords and recovery codes are stored only as one-way hashes.
- Two-factor authentication is available (and recommended) for everyone, and sensitive changes ask for your password again.
- Each workspace’s data is only visible to its own members.
How long it’s kept
| Data | Kept |
|---|---|
| Website data, notes and actions | Until you delete the website, the workspace or your account |
| Security log | 365 days |
| Page snapshots from monitoring | 30 days |
Removing your data
- Delete a website to remove everything stored for it.
- Disconnect a Google account to revoke access and delete its token.
- Delete your account to remove your workspaces. See Password, security log and deleting your account.
For any other privacy request, choose “Privacy or data request” on the contact page.