Privacy Policy

SaaS Detective is built with privacy as a core design principle, not an afterthought. This policy explains exactly what we collect, why, and what we never do.

1. What we do NOT collect

• We do not collect, store, or transmit your browsing history.
• We do not record which websites you visit or what tools they use.
• We do not collect your name, email address, or any personally identifying information unless you voluntarily provide it (e.g., for a Pro license purchase).
• We do not sell any data to any third party. Ever.

2. How detection works

All technology detection happens entirely within your browser on the active tab. When you click the SaaS Detective icon, the extension scans the current page's HTML and JavaScript — locally, on your device — using bundled signature definitions. No page content is transmitted to any external server.

3. Anonymous analytics

To improve the extension, we collect anonymous, non-personal usage events such as:

• Extension install and update events
• Scan completion events (tool count only — not which sites or tools)
• Feature interactions (button clicks, upgrade prompts)

These events are tied to a randomly generated, non-identifiable client ID stored locally on your device. This ID cannot be used to identify you or linked to your browsing activity. Analytics are sent to a Cloudflare Workers endpoint operated by Venom Industries LLC.

4. License validation (Pro users only)

If you have a Pro license, the extension periodically sends your license key to our validation server to confirm it remains active. No browsing data, no page content, and no personally identifying information is included in this request.

5. Permissions explained

• activeTab — Grants temporary access to the current page only when you click the extension icon. Required for scanning.
• scripting — Allows the extension to inject a detection script into the active tab. Required for JavaScript global variable detection.
• storage — Saves your category preferences and license status locally. Nothing is shared.
• alarms — Used for periodic license revalidation (Pro only). No browsing data involved.
• host_permissions (http/https) — Required for the extension to scan any website you choose to visit.

6. GDPR / EU users

Because we do not collect personal data, Venom Industries LLC does not act as a data processor under GDPR with respect to SaaS Detective's core functionality. The anonymous client ID stored locally on your device is not considered personal data as it cannot identify you.

7. Contact

Questions about this policy: grayson@venom-industries.com