SigSense

Privacy Policy

Effective: February 16, 2025

This policy explains what data we collect, why, and your rights.

What we collect

We collect the following information to provide and improve our service:

Website content connection
  • Website URL provided during setup
Visitor interactions
  • Queries and questions visitors type into the assistant (if query logging is enabled)
  • Chat transcripts and conversation metadata (processed to provide responses)
Contact requests
  • Name and email address
  • Website URL (if provided)
  • Message content
Technical data
  • IP address hash (only if configured; stored as a salted hash for privacy)
  • User agent (browser and device information)
  • Basic logs for reliability, security, and debugging

How we use data

We use collected data for the following purposes:

  • Provide the service: Answer questions, improve relevance, and deliver accurate responses based on your website content
  • Respond to inquiries: Process contact form submissions and onboarding requests
  • Maintain security: Prevent abuse, detect fraud, and debug issues
  • Product improvement: Analyze aggregated usage patterns to improve our service (no individual profiling)

Data retention

We retain data for as long as needed to provide the service, comply with legal obligations, and maintain security.

  • Contact form submissions: We generally retain for 24 months or until no longer needed for follow-up
  • Conversations: We aim to retain for 90 days if conversation logging is enabled, then delete automatically
  • Website content and configuration: Retained for as long as your account is active

Third-party processors

We use reputable service providers to operate our infrastructure and deliver the service:

  • Hosting and infrastructure: Cloud hosting providers for application and database services
  • Search and content indexing: Search providers for finding and retrieving relevant content
  • AI and language processing: AI service providers (such as OpenAI and Anthropic) to generate responses
  • Workflow processing: Providers for managing automated tasks and background operations
  • File storage: Cloud storage providers for document and content storage

These providers process data on our behalf under strict contractual terms. We may use additional reputable subprocessors to provide infrastructure and processing. We update this page as providers change. We do not sell your data to third parties.

Your rights

You have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your personal data (subject to legal and operational requirements)
  • Objection: Object to processing of your data for certain purposes
  • Withdraw consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us using the method below. We may need to verify your identity before processing your request.

Security

We implement reasonable technical and organizational safeguards to protect your data:

  • Encryption in transit and at rest
  • Access controls and authentication
  • Regular security assessments
  • Secure infrastructure practices

While no system is completely secure, we work to maintain industry-standard protections.

International data transfers

Your information may be processed in countries outside your country of residence, including the United States and other jurisdictions where our service providers operate.

Where we transfer personal data internationally, we ensure appropriate safeguards are in place in accordance with applicable data protection laws. These safeguards may include:

  • Standard Contractual Clauses approved by relevant authorities
  • Data processing agreements with our service providers
  • Additional technical and organizational security measures

By using our services, you acknowledge that your information may be transferred and processed internationally as described in this policy.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you may request additional information about the safeguards we use for international transfers by contacting us.

Contact

For privacy requests, questions about this policy, or to exercise your rights, please contact us:

For privacy requests, submit via Contact Us and include "Privacy Request" in your message.

We will respond to your request within 30 days.