Privacy

Who is responsible

saasinator is a brand of Yallo Group. The legal entity acting as data controller is Yallo Management Consultancies L.L.C, Office G06, The Exchange Tower, Business Bay, PO Box 453176, Dubai, United Arab Emirates.

No data-protection officer or representative is appointed. Write to the address at the foot of this page and it reaches the people who can act on it.

What we collect, and when

Only what a visitor gives us, plus what a web server unavoidably sees. We do not buy data, and we do not enrich what you send with third-party profiles.

Contact form

Your name, work email, company, role and message. Stored as one row in our leads table and emailed to our team.

Newsletter sign-up

Your email address and which part of the site you signed up from.

Enquiry form

Your name, work email, company, and an optional note about what you are working with. Stored as one row in our leads table and emailed to our team.

Chat assistant

The messages you type. If you choose to share contact details in the conversation, they are stored as a lead along with the transcript of that conversation, so the person who replies can see the context.

Your browser

Your IP address reaches our server with every request, as it must. We use it in memory to rate-limit form submissions and abuse, and we do not store it in our database alongside your enquiry.

Booking a session

Bookings run inside a Calendly widget embedded on our booking page. What you type into that widget goes to Calendly, and Calendly's own privacy terms govern it.

What we do not do

We load no advertising or tracking tags, and we set no cookie for analytics or advertising. The site sets one cookie only, and only for a person who enters an access code to reach a restricted version of the site. It carries no identifier and it does nothing except let that person through.

We do not sell or rent anything you send us, and we do not use your enquiry to train models.

We do measure how the site is used, with one cookieless tool: Cloudflare Web Analytics. It counts page views and where they came from. It sets no cookie, builds no device fingerprint, and cannot follow you to any other site.

The chat assistant keeps a copy of your conversation in your own browser, in local storage rather than in a cookie, under two names: a randomly generated conversation identifier, and the messages themselves. That copy stays on your device. Ending the chat with the close control in the panel deletes the stored conversation; the random identifier is not removed by anything on the site, so it stays until you clear this site’s storage in your browser. What you type is separately sent to us to generate a reply — the chat assistant row above says what we keep of it.

Who else processes it

We keep the list short on purpose. Each of these is a supplier acting on our instructions, and each one is here because a specific feature needs it.

Neon

Our database. Hosted in Azure Germany West Central, so enquiry and session records rest in the EU.

Resend

Sends the notification email when an enquiry arrives.

DigitalOcean

Runs the application itself.

Cloudflare

Sits in front of the site for DNS, caching and attack protection, so it sees requests before we do.

Cloudflare Web Analytics

Our only analytics. Cookieless — it records the page, the referrer and coarse device and country information, with no cookie and no identifier that persists between visits.

Anthropic

Answers the chat assistant. What you type in the chat is sent to it to generate a reply.

OpenAI

Turns a chat search into a vector so the assistant can look things up in our own writing. When it searches, the text it searches for goes to OpenAI; our articles were indexed the same way beforehand.

Calendly

Runs the booking widget and holds the bookings made in it.

How long we keep it

We keep what we need for as long as we need it to answer you, and no longer. Each period below is enforced by a routine we run, not by intention alone.

Enquiries

24 months from the day you contact us, whether through a form or the chat assistant. Then the record is deleted.

Chat transcripts

12 months. After that the stored conversation is removed from the enquiry record, and the enquiry itself keeps its remaining 12 months.

Newsletter

We keep a subscriber’s email address until they ask us to remove it. Write to the address below and we will delete it.

Enforcement

A deletion routine runs quarterly and applies the periods above. It is part of the site’s own code, so the periods are executable rather than aspirational.

Your rights

You can ask us what we hold about you, ask for it to be corrected, ask for it to be deleted, or ask us to stop emailing you. Write to the address below and we will act on it. We answer within 30 days.

This policy is governed by the UAE Personal Data Protection Law — Federal Decree-Law No. 45 of 2021. If you are not satisfied with how we have handled a request, you can complain to the UAE Data Office.

Changes

This policy took effect on 22 August 2026. Material changes will be dated on this page.