Privacy Policy | aaas.market

1. Introduction

At aaas.market, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website or use our tools.

aaas.market is a set of micro tools for the entire marketing process for solo founders, marketers and creators, including a social media scheduler and AI writers that run in your browser. By accessing or using aaas.market, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy.

2. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any changes will become effective when posted on this page with an updated "Last updated" date. We recommend that you review this Privacy Policy periodically to stay informed about our data practices.

3. Information We Collect

3.1 Information You Provide to Us

We collect information that you provide directly to us when you:

Register for an account — see Section 3.4 for what we collect and where it is stored
Use the aaas.market Chrome extension — see our Chrome Extension Privacy Policy
Contact us
Use the tools or the social media scheduler — see Section 3.6

3.2 Information We Collect Automatically

When you access or use our services, we automatically receive certain technical information. We do not run third-party analytics or advertising trackers:

Device information: Browser type, operating system, screen resolution, and device type
IP address: Used for security, fraud prevention, and approximate geographic location

For detailed information about the specific cookies we use, please refer to our Cookie Policy.

3.3 Information from Third-Party Sources

If you log into your account through a third-party authentication service (such as Google or Apple), we receive the profile information that service shares with us according to its authorization screen — typically your email address and, where available, your display name and profile photo.

3.4 Data Collected When You Register

Most tools work without an account. If you create an aaas.market account, we collect the information below. This section describes what is gathered during sign-up and where it is stored or processed.

3.4.1 Authentication data

What: Email address, internal account identifier, sign-in method (Google, Apple, or email link), and profile name or photo if your provider shares them
Where: With the third-party authentication provider you choose (for example Google or Apple); our servers verify your sign-in when you register
Why: To create your account, authenticate you, and send service-related emails

3.4.2 Account profile on our servers

What: Approximate country code (derived from IP/geo at registration), account status, and default email subscription preferences
Where: Our secure application database, linked to your account
Why: To operate your account, localize features, and send product updates you can unsubscribe from later

3.4.3 Traffic and device attribution

What: Referrer URL, landing page URL, timestamp, browser user-agent, device type, and operating system — if you visited aaas.market before signing up
Where: Temporarily in a browser cookie; after you sign in, saved to your account profile on our servers — see our Cookie Policy
Why: To understand how users find us and prevent abuse

3.4.4 Session tokens

What: Session access and refresh tokens issued after successful registration or login
Where: Your browser storage on your device
Why: To keep you signed in and authorize API requests

How to delete this data: You can remove your account and the personal data we store about you as described in Section 7 (Data Retention and Account Deletion) on this page or in the Account Deletion section of our Terms of Service. If you cannot use self-service deletion, reach us through the Contacts page.

3.5 Chrome Extension Data

Data handling for the aaas.market Chrome extension is described separately in our Chrome Extension Privacy Policy. That page explains extension-specific data collection, handling, storage, sharing, permissions, user consent, user choices, and Chrome Web Store Limited Use compliance.

3.6 Tools and Scheduler

3.6.1 Tools

What: The values you type into a tool (for example post text, numbers or a handle)
Where: Most tools (calculators, counters, checkers, previews) work entirely in your browser and do not send what you type to us. When a tool needs to look up public data on a social network, only the value needed for that lookup is sent
Why: To show you the tool result

3.6.2 AI writers

What: AI tools download open-source model files (once) and generate text on your device
Where: Model files are downloaded from Hugging Face (huggingface.co) and kept in your browser cache. What you type and the generated text stay on your device; they are not sent to us or to the model provider. Hugging Face receives standard request data, such as your IP address, when your browser downloads the model files
Why: To run the AI tools without accounts, API keys or credits
Ratings: If you rate a result with thumbs up or down, that generated result, your rating, the tool page, the network and a random identifier stored in your browser are sent to us so we can improve the tools. What you typed into the tool is not sent. If you are signed in, the rating is linked to your account
Schedule: The Schedule button copies the result into the scheduler in your browser; it is handled as described in Section 3.6.3

3.6.3 Social media scheduler

Without an account: Posts you plan are stored only in your browser storage on your device. They are not sent to us until you sign in
With an account: We store your planned posts (text, hashtags, networks and formats, date, time and time zone), media files you upload (with our cloud storage provider), publish status and the links you add when you mark a post as published. When you sign in, posts planned without an account move to your account
Reminders: If you turn them on, we store the email address and, if you link Telegram, your Telegram chat ID. Reminders are sent through our email delivery provider and through Telegram, and include your post content and a private link to its publish page. Anyone with that link can open the publish page until it expires, so do not share it
Why: To keep your calendar and send the reminders you asked for. We do not connect to your social media accounts and do not publish on your behalf
Control: You can delete any planned post or media file at any time, turn reminders off, and unlink Telegram in the scheduler settings

4. Use of Cookies and Similar Technologies

We use cookies and browser local storage to collect and store information about your interactions with our services. These include necessary cookies for site functionality, functional cookies for enhanced user experience, analytics cookies for understanding usage patterns, and advertising cookies for measuring ad campaign effectiveness. For full details, see our Cookie Policy.

5. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our services
Send you technical notices, updates, security alerts, and support messages
Respond to your comments, questions, and requests
Monitor and analyze trends, usage, and activities in connection with our services
Detect, investigate, and prevent abuse and other illegal activities
Operate the tools and the social media scheduler, including storing your planned posts and sending the reminders you turn on by email or Telegram
Personalize and improve the services and provide content that matches user interests
Measure the effectiveness of our advertising campaigns
Log account activity — including login sessions

6. Sharing of Information

We may share information about you as follows:

Service providers: Providers that help us host, secure, store, process, and operate aaas.market.
Reminder delivery: Our email delivery provider and Telegram, only to deliver the scheduler reminders you turn on.
Legal requirements: If required by law, regulation, or legal process.
Protection of rights: If we believe your actions are inconsistent with our terms or to protect the rights, property, and safety of aaas.market or others.
Business transfers: In connection with any merger, transfer of assets, or acquisition.

We do not sell your personal information to third parties.

7. Data Retention and Account Deletion

We retain your information for as long as your account is active or as needed to provide you services, comply with our legal obligations, resolve disputes, and enforce our agreements.

7.1 Self-service account deletion

You can delete your aaas.market account at any time from the account menu (Delete account). You must type DELETE to confirm.

7.2 What we delete when you delete your account

When deletion completes, we remove or anonymize personal data associated with your account, including:

Your profile and API keys
Registration metadata stored on your profile (country code, referrer and landing URLs, device and browser attribution)
Scheduler posts, uploaded media files, reminder settings, and your linked Telegram chat
Your ability to sign in (your authentication record is disabled)

7.3 What we may keep

Some data may be retained where we have a lawful basis, including:

Minimal fraud-prevention records (for example, hashed email or IP) if the account was terminated for policy violations
Blog posts you authored, which may be reassigned to an internal placeholder author so public URLs remain available without identifying you as the author
Aggregated or anonymized analytics that can no longer identify you

Posts you already published on third-party social networks remain on those platforms; we only remove our records of your activity on aaas.market.

7.4 Timing

Most account data and uploaded files are deleted promptly when deletion succeeds. Residual copies in encrypted backups, if any, are overwritten on a normal backup rotation cycle and are not used to restore your account.

If you cannot use self-service deletion, reach us through the Contacts page.

8. Data Security

We take reasonable measures to help protect information about you from loss, theft, misuse, and unauthorized access. Our security measures include:

SSL/TLS encryption for all data transmitted between your browser and our servers
Secure cloud hosting and encrypted storage for account and file data
Regular monitoring for unauthorized access

However, no internet or electronic communications transmission is ever fully secure or error-free. Therefore, you should take special care in deciding what information you send to us electronically.

9. Your Rights and Choices

You may update, correct, or delete information about you at any time by logging into your account or by contacting us through the Contacts page. You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your personal data (see Section 7)
Request restriction or object to certain processing where applicable law provides these rights
Request a copy of your data in a portable format where applicable law requires it
Manage cookie preferences through your browser settings
Opt out of promotional communications

10. GDPR and UK GDPR (EEA & UK Users)

If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction with similar data protection laws, aaas.market processes your personal data as a data controller for the purposes described in this Privacy Policy.

10.1 Legal bases for processing

We rely on the following legal bases, depending on the activity:

Contract: to create and manage your account, provide the tools, the scheduler, and support
Legitimate interests: to secure the platform, prevent fraud and abuse, and improve our services
Legal obligation: to comply with tax, accounting, and regulatory requirements
Consent: where required for non-essential cookies, analytics, or marketing (you may withdraw consent at any time)

10.2 Your GDPR rights

Subject to applicable law, you have the right to access, rectify, erase, restrict processing, object to processing, and data portability. You also have the right to lodge a complaint with your local supervisory authority. We will respond to verified requests within the timeframe required by applicable law (typically one month under GDPR).

10.3 Right to erasure

You may exercise your right to erasure by using in-app account deletion (Section 7) or by contacting us through the Contacts page. When erasure is completed, we delete account data and user-uploaded files stored on our systems, except where retention is required by law or permitted for fraud prevention as described in Section 7.3.

10.4 International transfers

We use service providers (including hosting) that may process data outside your country. Where required, we implement appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms offered by our providers.

11. International Data Transfers

Our services are hosted globally, and information we collect may be stored and processed in the United States and other countries where our service providers operate. By using our services, you consent to the processing and transfer of your information in accordance with this Privacy Policy.

12. Children's Privacy

Our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information of a child under 13, we will take steps to delete such information as soon as possible.

13. Contact Us

If you have any questions about this Privacy Policy, please reach us through the Contacts page.