How SaasHub handles personal data. The service at https://saashub.tech is operated by CAPRIX AI LTD, which is the data controller for the personal data described below. We handle personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 and, where it applies, the EU General Data Protection Regulation (EU GDPR).
1. Who to contact
Reach us on privacy matters at [email protected]. If our response does not satisfy you, complain to the UK Information Commissioner’s Office (ICO, https://ico.org.uk) or, if you live or work in the EU, to the supervisory authority of that country.
2. What we collect and why
Account data — name, email, password hash, workspace name — so we can give you a login and a place to hold your power tokens.
Billing data — the transaction reference, currency, amount, VAT identifier if you supply one, and the last four digits of the card. Kept to issue receipts and invoices, to reconcile against the ledger and to satisfy tax and accounting law. Full card numbers never reach our servers.
Crew and Run data — the definitions of your Crews, the Inputs you route into them, the Outputs models produce, the connector calls made, the tokens metered, and the timestamps on the ledger. Kept so the service works, so the ledger stays trustworthy, and so we can investigate incidents.
Your model-provider API keys — supplied by you, held AES-encrypted at rest, decrypted only inside the run engine at the point a step needs to make a call.
Technical data — IP address, browser and device information, log timestamps and cookie identifiers. Needed to serve the platform, secure it and improve reliability.
Support data — the tickets, messages and attachments you send us, and our replies. Kept so we can help.
3. Legal bases
Performance of the contract with you to run the service, legitimate interests to keep it secure and improve it, legal obligations to keep tax and accounting records and to answer lawful requests from authorities, and consent for optional cookies and any marketing you actively opt in to.
4. Who we share it with
We use vetted providers to run the service — cloud hosting, email delivery, payment processing, error monitoring, product analytics. Each acts as our processor under a written agreement. Because SaasHub does not resell AI model calls, calls made from a Run travel from our infrastructure to the model provider whose key you supplied, and that model provider acts as a separate controller under its own terms. The same goes for the third-party connectors your Crew uses. We disclose personal data to comply with the law, to answer lawful requests, to protect the service and its users, and in connection with a corporate transaction. We do not sell personal data.
5. Model training
SaasHub does not use your Input or Output to train models. Because model calls hit the third-party provider whose key you supplied, whether that provider processes the request for its own training purposes is governed by that provider’s policy on the key or account you supplied. Where the provider offers a no-training setting through the API, we honour it if set on the key.
6. Retention
Account data lives while the account is open and up to twelve months after closure for legitimate follow-up. Billing records are kept for the period required by UK accounting and tax law (currently six years from the end of the relevant financial year). Crew definitions, Runs and ledger entries stay for the life of the account and are deleted on closure, except where retention is required by law or to defend a claim. Support tickets are kept for up to three years. Technical logs and security data are kept for up to twelve months. Your stored API keys are deleted when you remove them, or on account closure.
7. International transfers
If data moves outside the United Kingdom (or, for data covered by the EU GDPR, outside the European Economic Area) — for example because a connector or a support tool is hosted there, or because the model provider whose key you supplied processes the call outside the UK or the EEA — we cover our own transfers with recognised safeguards, typically the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses (and the EU Standard Contractual Clauses where the EU GDPR applies), paired with technical measures such as encryption in transit and at rest, or UK adequacy regulations or an EU adequacy decision where one applies.
8. Your rights
Access, rectification, erasure, restriction, portability, objection to processing based on legitimate interests, and withdrawal of consent for anything you consented to. Write to [email protected]. We answer within one month and may ask you to verify identity before we act.
9. Security
Encryption in transit and at rest, isolated tenancy per workspace, least-privilege access, monitoring, staff training and vendor reviews. Your stored API keys are AES-encrypted at rest and never returned to the client after they are saved. We do not promise perfect security — no online service can — but we treat protection of your data as a first-class concern.
10. Children
SaasHub is not intended for anyone under 18 and we do not knowingly collect data from children. Tell us if you believe a child has provided data through the service and we will remove it.
11. Cookies
Cookies and similar technologies have their own document — see the Cookie Policy.
12. Changes
We may update this policy as the service, our providers or the law change. Material updates will be flagged in advance.
Contact
CAPRIX AI LTD
Dept 6940, 43 Owston Road, Carcroft, Doncaster, United Kingdom, DN6 8DA
Company number 17352499
+44 7458 164952
Last updated: 7 October 2026