SaaS Partner Co. is a trading name of Nemanja Janjić PR, Agencija za izradu veb portala Kron Design, Beograd (Zvezdara), registration no. 62455918, tax ID (PIB) 107039098, Vitezova Karađorđeve Zvezde 107 G, 11000 Belgrade, Serbia. Email: [email protected].
Last updated: November 1, 2026.
1. Who is responsible
Nemanja Janjić PR, Agencija za izradu veb portala Kron Design, operating under the trading name SaaS Partner Co., is the data controller for personal information described in this Policy. For privacy requests, email [email protected]. For other questions, email [email protected].
2. Information we collect
Depending on how you use the website and services, we may process your name, email address, Shopify app listing URL and app details, account and verification information, service inquiry and delivery details, order references and payment status, newsletter preferences, and technical information such as IP address, browser, device, and activity data.
If you create an account and connect a Shopify Partner account, you provide your organization and app identifiers and a Partner API client token. We use read-only Partner API requests to retrieve the information needed for account analytics and valuation features. This may include MRR, ARR, revenue history, growth, churn, installs, refunds, revenue concentration, and app performance information. We also read public ratings and reviews from the Shopify App Store listing you provide.
The Partner API token is stored with your account and reused to retrieve dashboard and report data; it is not used just once and discarded. Revoking the API client in Shopify prevents future API access but does not itself remove the stored token from our database. You may request deletion of the token and related account information by emailing [email protected].
If you enable a public share link, the link may show your app name and listing and the metrics enabled in your sharing settings. Anyone with the link may view the information displayed there. You can disable the link in your account; disabling it stops access to the shared page but does not itself delete your account data.
Dodo Payments provides hosted checkout. We receive order, checkout and payment identifiers, amount, product, customer contact details, and payment status; we do not receive or store full payment-card numbers through our website. Dodo may collect additional payment and billing information under its own terms.
3. How and why we use information
- To respond to inquiries, prepare for and deliver services, arrange sessions by email or calendar invitation, and communicate about orders.
- To create and secure accounts, verify email addresses, retrieve the Shopify Partner information you request, and provide dashboards, valuation estimates, and optional report-sharing features.
- To process orders and payments, maintain accounting records, handle refunds and disputes, prevent misuse, and meet legal obligations.
- To send newsletters or marketing email when you opt in. You may withdraw consent by using an unsubscribe option where provided or contacting us.
- To understand website use, maintain and protect the site, and improve our services.
No third-party booking or scheduling widget is embedded in the website. Sessions are arranged by email; if a calendar invitation is sent, the email and calendar provider used for that invitation may also process the contact and meeting details.
4. Cookies, analytics, and similar technologies
The website uses cookies or local storage for sign-in and security functions and to remember whether certain website prompts have been shown. Google Analytics and Hotjar scripts are also loaded on website pages to measure site use and understand visitor interactions. The website currently does not display a separate consent banner or preference tool for accepting or rejecting those analytics scripts; they load when a page loads. You can manage or delete cookies through your browser settings, although browser settings do not prevent the analytics scripts themselves from loading.
5. Legal bases and when we share information
Depending on the activity and the law that applies, we process information to take steps you request before entering a contract, perform a contract, comply with legal obligations, pursue legitimate interests in operating and securing our services, or act on your consent, including for newsletter communications.
We share information with providers that support our website and services, with Dodo Payments for checkout and payment administration, and with professional advisers or public authorities where required by law or necessary to establish or defend legal claims. We do not sell personal information.
6. Service providers and international transfers
- Cloudflare, Inc. (United States; global network): public DNS and network routing/proxy services for the website. Requests may pass through Cloudflare’s global network. See Cloudflare’s Data Processing Addendum.
- Google LLC / Google Analytics (global data centers): website analytics. Google states that Analytics uses regional data collection centers and that GA4 IP addresses are used to determine location and then discarded before being logged. See Google’s regional data collection information and Google’s data processing terms.
- Hotjar Ltd. (Ireland, EU-West-1): website interaction analytics. Hotjar’s published security information identifies its data hosting region as AWS EU-West-1 in Ireland. See Hotjar’s Data Processing Agreement.
- Resend, Inc. (United States): transactional email and email delivery for people who opt in to updates. Resend’s Data Processing Addendum identifies the United States as its primary processing location and includes Standard Contractual Clauses for applicable international transfers. See Resend’s Data Processing Addendum.
- Dodo Payments: hosted checkout and payment administration; Dodo may act as merchant of record for an order. Its public Data Processing Agreement provides for international transfers and Standard Contractual Clauses but does not specify one fixed country where all data is processed. Dodo’s processing is also governed by its Privacy Policy and Data Processing Agreement.
- Website hosting and database: the site uses a production web server and database to operate its pages and accounts. Public DNS identifies Cloudflare as the DNS/network provider, but does not identify the separate production origin host or the database data-center country.
Where personal information is transferred internationally, the relevant provider’s terms and data-processing agreements may use an adequacy decision or Standard Contractual Clauses and related contractual safeguards where required by applicable law. Google, Hotjar, Resend, Cloudflare, and Dodo publish privacy or data-processing terms describing their safeguards. The applicable provider terms govern their processing of information received directly by them.
7. How long we keep information
| Purpose | Information | Legal basis | Retention period |
|---|---|---|---|
| Inquiries and service delivery | Contact details, app information, service requests, session and delivery correspondence | Pre-contract steps and contract | While needed to answer the request and deliver the service, then as needed for related claims. |
| Accounts, analytics, and reports | Account details, password hash, Partner API token and organization ID, app data, metrics, and share settings | Contract and legitimate interests in account security | While the account and requested features remain active. You may request account and token deletion by contacting us; information required for legal obligations or claims may be retained for the applicable period. |
| Orders, payments, and accounting | Order references, service and payment status, transaction and accounting records | Contract and legal obligation | For the applicable statutory period. Under Serbian accounting rules, source documents are generally kept at least 5 years, business books 10 years, and financial statements 20 years, calculated from the end of the relevant business year; a longer or permanent period applies to specified record categories. |
| Newsletter and marketing | Email address, name where provided, and opt-in or unsubscribe status | Consent | Until you withdraw consent or ask us to remove the information, subject to any minimum record needed to respect your opt-out. |
| Website security and analytics | Session, device, browser, network and usage information | Legitimate interests in measuring and improving website use; the site currently has no on-page consent choice for analytics scripts | Cookies/local storage remain until their expiry or deletion in your browser. Google Analytics and Hotjar retention is governed by the settings in their service accounts and their own policies. |
We use reasonable administrative and technical safeguards to protect information. No method of transmission or storage can be guaranteed completely secure.
8. Your rights and complaints
Subject to the law that applies, you may request access to, correction or deletion of your information, restriction of or objection to processing, a copy of information you provided, or withdrawal of consent. Email [email protected]. We respond without undue delay and within 30 days. Where the law permits an extension, we will notify you within that period and explain the reason.
If you are in Serbia, you may lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia. If you are in the EU, you may also complain to your local data-protection supervisory authority.
9. Children and updates
Our services are intended for business users who are at least 18 years old and are not directed to children. We may update this Policy when our services or legal obligations change. The revised version will be posted here with a new “Last updated” date.