Legal

Privacy Policy

Last updated: March 1, 2026 · Effective Immediately

Data We Read Security Retention Your Rights Contact

At DeadSaaS ("we", "our", or "us", operated by Tèmporia Inc.), we take customer confidentiality with clinical seriousness. This Privacy Policy details how we access, process, and safeguard metadata when you connect your Google Workspace or Microsoft 365 tenant for SaaS audit and auto-cancellation services.

1. Data We Read & Scope of Permissions

DeadSaaS operates under strict read-only metadata scopes. We do not inspect personal emails, internal communications, attachments, chat threads, or drive files.

check_circle
Invoice & Billing Metadata: Sender headers (e.g., invoices@stripe.com), subject lines containing receipt indicators, timestamp, currency, and line amounts.
check_circle
SSO & Directory Timestamps: User login timestamps and activity status to flag inactive or vacated seats.
cancel
What We Never Touch: Full email message bodies, personal attachments, confidential correspondence, customer records, or credentials.

2. Security & Zero-Knowledge Architecture

All OAuth access tokens are encrypted in transit and at rest using AES-256. We read only message headers and metadata — never message bodies — and you can revoke access at any time.

Audit heuristics execute in ephemeral worker environments that discard parsed email payloads immediately after extracting billing key-value pairs (vendor, subscription tier, cost cadence).

3. Data Retention & Revocation

We retain audit records and savings metrics for as long as your workspace is active, or for up to 12 months following account closure unless you request immediate hard deletion.

You may disconnect DeadSaaS directly from your Google or Microsoft security admin console at any second, which immediately invalidates all active tokens.

4. Your Rights (GDPR & CCPA)

Under applicable privacy frameworks (including GDPR, UK Data Protection Act, and CCPA/CPRA), you have the right to access, export, rectify, or purge all company subscription metadata held by DeadSaaS.

Use the in-app Data & Privacy settings tab or reach our Data Protection Officer at privacy@deadsaas.temporia.org to trigger an immediate zero-trace purge.

5. Contact Information

For legal inquiries, security reviews, or vendor questionnaires:
Tèmporia Inc. / DeadSaaS Legal Operations
548 Market St, Suite 39100, San Francisco, CA 94104
Email: privacy@deadsaas.temporia.org