Privacy Policy

Who is responsible

Sansora is operated by Sansavision, a division of Sansa Group AB, organisation number 559111-9507, Soldathemsgatan 20, 415 28 Göteborg, Sweden. We are the controller for our website, support correspondence and any account or billing records we hold. Contact support@sansavision.com for privacy questions. When a business asks us to process customer content through an enabled hosted service, the processing arrangement is covered separately by our Data Processing Addendum.

Your local workspace

The desktop app stores app records, keywords, market settings, rank observations, listing history, drafts, plans and job history in a local SQLite database. This build does not automatically sync that database to Sansora. Your operating system, backups and any software you allow to read local files can affect its privacy. Uninstalling the application may leave its data directory behind.

Network requests you initiate

• Store searches, rank checks, search suggestions and listing lookups send the relevant app identifier, phrase, market and request metadata to Apple from your connection. Those services receive your IP address. Public store results can include developer names, reviews and other personal data.
• When you explicitly connect App Store Connect, the desktop app sends authenticated API requests to Apple for the app information and metadata you request. Credentials are kept in the desktop protected-key store, outside the research database; this build does not send them to our cloud.
• Agents and CLI tools you connect can read or change the local workspace according to their access. Data you provide to your own AI provider is governed by your agreement with that provider. Check its settings before sharing confidential research.

Information we receive

• Website requests: our hosting provider can process IP addresses, request URLs, browser metadata and security events to deliver and protect the site.
• Support: the contact details, message and attachments you choose to send. Do not send passwords, private keys, access tokens or unredacted databases. Logs are not attached automatically.
• Commercial records: if you purchase an offered product, the information needed to administer the purchase, such as contact, invoice, licence and payment-status details. The checkout identifies its payment provider before you buy. We do not need your full card number.

Purposes and legal bases

• Providing a service or responding to a request: performance of a contract or steps you ask us to take before one (GDPR Article 6(1)(b)).
• Protecting the site, investigating misuse and handling ordinary support: legitimate interests (Article 6(1)(f)), balanced against your rights. You may object to this processing.
• Optional analytics or promotional communications, if introduced: prior consent where required (Article 6(1)(a)); refusing or withdrawing does not prevent ordinary use.
• Required accounting and responses to valid legal obligations: Article 6(1)(c). We do not use local research to make solely automated decisions with legal or similarly significant effects on you.

Analytics, AI and future cloud features

This site includes no analytics collector, advertising tracker or marketing cookie. The current desktop build does not provide hosted AI, cloud sync, cloud publishing or Paywalls event collection. A roadmap entry is not permission to upload data. Before a hosted feature becomes available, we will describe the data it sends, its providers, retention and controls. We do not use your local workspace or support attachments to train AI models.

Providers and transfers

Cloudflare supplies the configured cloud infrastructure. Its network can process website traffic globally; EU placement of D1 and R2 storage does not mean all request processing stays in the EU. Our Subprocessors page distinguishes configured infrastructure from planned services. We do not sell or rent personal data. We disclose data when legally required, and use an applicable lawful transfer mechanism when transferring personal data outside the EEA. You may request details of the safeguards from us.

How long information stays

Local records remain under your control until removed from the workspace or data directory; backups may retain earlier copies. We retain support correspondence only while needed to resolve and follow up the issue or meet legal requirements. Commercial records follow applicable accounting duties. Exact hosted-content and operational-log retention periods will be stated before those services are launched. Ask us about a specific record; we will explain any legal reason that prevents deletion.

Your rights and choices

You may request access, correction, erasure, restriction, portability where applicable, or object to processing. You may withdraw consent without affecting earlier lawful processing. Write to support@sansavision.com; we may need proportionate verification of your identity. We normally respond within one month and explain any lawful extension. The website cannot read or delete your local database. Use the desktop exports and local file controls for data kept only on your device.

You can complain to the Swedish Authority for Privacy Protection, IMY, or your local supervisory authority. You do not have to contact us first.

Children and updates

Sansora is a professional app-development tool and is not directed to children under 13. Contact us if a child has supplied personal information. We will publish revisions here and give appropriate notice of material changes before new processing begins.