My SaaS has no backend — the limitation became the entire value prop. Lessons from selling privacy to compliance buyers