Privacy notice
SaaS Health Score (saasCheck) privacy
Applies to the SaaS Health Score web app (repository name saasCheck): a web app hosted on Vercel that scores a software business from its public website and the answers you type, with the API and the database on our own server. The app’s /privacy and /terms pages link here.
This service is operated by llab08, Hong Kong, and these terms are governed by the laws of Hong Kong. The section below explains this product’s data handling and current availability.
PDF export and Pro are unavailable. The report service is online as of the date below, so the evaluation, AI analysis and chat paragraphs apply now. The PDF and purchase paragraphs describe processing when those features become available.
The website you submit
You submit a website URL and our server fetches the publicly accessible pages of that site to produce the report. The address is also sent to Google PageSpeed Insights and its domain to Mozilla HTTP Observatory for performance and security scores, and the domain is looked up in public WHOIS records to find its age. The fetched content and any questionnaire answers you type are then analysed by an AI model, as described below. Submit only sites and figures you are permitted to share.
AI analysis and chat
For each evaluation, our server sends the content of the fetched home, pricing, documentation and about pages, blog post titles and snippets, up to 20 page addresses from the site’s sitemap, links to review and social-media pages found on the site, the performance and security results, the detected technologies and domain age, the stage, sector and viewpoint you choose, and any questionnaire answers you type (for example revenue, churn or runway figures; the company name is not sent) to llab08’s own AI gateway at sub2api.llab08.com. A quick evaluation makes up to five such requests and a full evaluation up to seven; a request that fails briefly may be sent again. The gateway runs on our server, and connections to it pass through Cloudflare. It passes each request to a third-party AI model provider, which writes the analysis. When you chat about a report, your message, up to ten earlier messages of that chat (yours and the assistant’s) and the relevant parts of the report are sent the same way. Your e-mail address, account identifier and IP address are not sent to the gateway or the provider.
The AI model provider used through our gateway is Anthropic, with its Claude models. Another provider may be used later only after this section is updated. Anthropic processes the requests under its own terms; we make no promise on its behalf about how long it keeps the data or whether it uses it to train models. Our own copies of evaluations and chats are kept as described under “Account, evaluations and chat”.
Account, evaluations and chat
Limited evaluations may run without an account; for those we keep the IP address only to enforce the daily limit. If you sign in with Google or GitHub we receive the email address and provider user id — no password. Evaluation results and the chat sessions you hold about a report are stored with your account so you can reopen them; write to the address below to have them removed.
PDF reports
A report can be exported as a PDF file. The PDF is built from the stored evaluation and contains the same data as the on-screen report.
Purchases (Pro)
Pro is a subscription processed by Stripe. Card details are entered on Stripe’s checkout page and never reach us. We keep the Stripe customer and subscription identifiers and the plan status so that your plan can be shown in the app.
No ads, no analytics
The app shows no advertising and, as of the date below, loads no analytics or other third-party tracking script; error monitoring may use Sentry. If a future version adds a cookie-less analytics script, this section is updated first.
Hosting and retention
The web app runs on Vercel; the API, the database and authentication run on our own server. Hosts may keep short access logs; we do not use them to identify anyone. Evaluations, chat sessions and subscription records stay with your account until you ask us to delete it: write to the address below and we remove the account and its reports.
Contact: hello@llab08.com · Updated 25 September 2026 · All privacy notices