Privacy notice

Who is responsible

VettedSaaSBlueprint is a South African sole proprietorship operating from 3 Wagner Lane, Sagewood, Johannesburg, Gauteng, South Africa. VettedSaaSBlueprint is the responsible party for the personal information processing described in this notice.

Information this site may process

Application analytics launch disabled. If they are enabled after the required retention control is verified, the site may record only five first-party events: page_view, cta_click, affiliate_click, link_error, and faq_expand. An event may include the page URL, referring page, user agent, page slug, link identifier, and event time.

The application stores no raw IP address and no IP hash. It does not use fingerprinting, advertising pixels, remarketing, profiling, newsletter capture, or public account registration.

Purposes and lawful basis

Where application analytics are enabled, VettedSaaSBlueprint relies on legitimate interests to keep the site secure, identify broken or unreliable links, understand aggregated page usefulness, and improve review quality. These limited interests are balanced against visitor privacy by data minimisation, short retention, and privacy-signal suppression.

Hosting, storage, and destinations

Vercel hosts the website and may process network, security, and operational metadata under its own infrastructure duties even when application analytics are disabled. Oracle provides storage and worker processing for approved first-party application data. If you follow an affiliate link, PartnerStack and the destination software vendor process the separate visit under their own privacy terms.

Retention and privacy signals

If application analytics are enabled, raw events are retained for no more than 90 days and daily aggregate statistics for no more than 24 months. Global Privacy Control and Do Not Track signals suppress nonessential application analytics. Network providers may still process operational metadata needed to deliver and protect the site.

Cookies

Public pages set no nonessential analytics or advertising cookies. An essential owner-session cookie may be used only for the private administration area and is not a public tracking mechanism.

International processing and safeguards

Vercel, Oracle, PartnerStack, or a vendor destination may process information outside South Africa. VettedSaaSBlueprint limits the application data it controls and uses service-provider safeguards intended to support confidentiality, integrity, availability, and applicable POPIA cross-border requirements.

Your POPIA rights

Where applicable, you may request access to your personal information, correction of inaccurate information, deletion where lawful, or object to processing based on legitimate interests. You may also ask for details about the information held and lodge a complaint with the South African Information Regulator.

Send a privacy request to vettedsaasblueprint@proton.me. The Information Regulator provides complaint guidance at inforegulator.org.za and receives general enquiries at enquiries@inforegulator.org.za.

Security and children

Reasonable technical and organisational safeguards are used to protect the limited information processed. This publication is intended for business software research and is not directed at children. VettedSaaSBlueprint does not knowingly collect children's personal information through public forms because no public forms exist.