Privacy Policy

Data Controller

Open Sauce, Inc. ("we", "us", "our") is the data controller for personal data processed through SAUCEDOCS. For questions about data processing, contact us at contact@opensauce.com.

What We Collect

When you view a document shared via SAUCEDOCS, we may collect:

• Your email address, voluntarily provided before viewing (except for open-access documents)
• Viewing activity: which pages you viewed and time spent on each page
• Timestamp of your visit

We do not use tracking cookies, third-party analytics, or advertising pixels. The only cookies used are essential session cookies required for admin authentication.

Legal Basis for Processing

We process your personal data based on:

• Consent (Art. 6(1)(a) GDPR): By voluntarily entering your email address to view a document, you consent to the collection of your email and viewing analytics. You may withdraw consent at any time by contacting us.
• Legitimate Interest (Art. 6(1)(f) GDPR): We process viewing analytics to provide document owners with engagement insights about their shared materials.

How We Use Your Information

Your email address and viewing activity are shared with the document owner to help them understand engagement with their materials. We do not sell, rent, or share your information with any third parties beyond the document owner.

Data Storage & International Transfers

Your data is stored securely using Supabase, which provides enterprise-grade security with row-level security policies, encryption at rest, and encrypted connections. Data is hosted in the United States. If you are located in the EU/EEA, this constitutes an international data transfer. We rely on Standard Contractual Clauses (SCCs) as the legal mechanism for such transfers.

Cookies & Tracking

We do not use tracking cookies, advertising cookies, or any third-party analytics tools. Essential session cookies may be used solely for admin authentication and are strictly necessary for the service to function. These essential cookies are exempt from consent requirements under EU ePrivacy regulations.

Data Retention

We retain your viewing data for as long as the document owner maintains their account or until you request deletion. You may request deletion of your data at any time.

Your Rights (GDPR & Global)

Regardless of your location, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate personal data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Restriction: Request that we limit processing of your data
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interest
• Withdraw Consent: Withdraw your consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at contact@opensauce.com. We will respond within 30 days. If you are in the EU/EEA and believe your rights have not been addressed, you have the right to lodge a complaint with your local data protection authority.

Children's Privacy

SAUCEDOCS is not directed at children under 16. We do not knowingly collect personal data from children.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated date.

Contact

If you have any questions about this privacy policy or our data practices, contact us at contact@opensauce.com.