Privacy Policy

1. Introduction

This Privacy Policy explains how we collect, use, disclose, and safeguard personal information across our web and mobile experiences, APIs, support channels, and backend services. It should be read together with our Terms & Conditions. By accessing or using any of our Services, you acknowledge that your information will be processed in accordance with this Policy.

2. Information We Collect

2.1 Information You Provide

• Account Details: Name, email address, and profile information collected through Apple Sign-In, Google Sign-In, or email-based authentication.
• Content: Prompts, messages, files, media uploads, and configuration settings submitted while using our Services.
• Support Requests: Information you provide when contacting customer support or submitting feedback.

2.2 Automatically Collected Information

• Usage Data: Interactions with features, session activity, and selections to help us improve performance and reliability.
• Device & Log Data: IP address, device identifiers, browser type, operating system, timestamps, and diagnostic logs.
• Cookies & Tokens: Authentication tokens and similar technologies required for sessions and security functions.

2.3 Information from Third Parties

• Authentication providers share basic profile attributes needed to create and secure your account.
• Payment processors such as Stripe, RevenueCat, Apple, and Google provide transaction identifiers, subscription status, and limited billing metadata. We do not store full payment card numbers on our systems.

3. How We Use Information

• Authenticate users and maintain secure sessions
• Deliver our Services and manage user accounts
• Process payments, subscriptions, and quota allocations
• Monitor performance, troubleshoot issues, and enhance product capabilities
• Detect, investigate, and prevent fraud, abuse, or harmful activity
• Comply with legal obligations and regulatory requirements
• Communicate updates, respond to support requests, and provide important notices

4. How We Share Information

4.1 Infrastructure Partners

To deliver our Services and maintain infrastructure, we share relevant data with partners such as OpenAI, Anthropic, Google, Firebase, and similar providers. These parties process information under their own privacy policies.

4.2 Payment & Analytics Vendors

We use vendors including Stripe, RevenueCat, Apple, Google, and Firebase Crashlytics for billing, analytics, and crash reporting. Only the data necessary to perform contracted services is shared.

4.3 Legal & Compliance

We may disclose information if required by law, to respond to lawful requests, enforce our agreements, or protect the rights and safety of Sagesight, our users, or the public.

4.4 No Data Sales

Sagesight does not sell personal information.

5. Data Security

We employ industry-standard safeguards including encrypted transport (TLS), access controls, secure cloud infrastructure, and routine monitoring. No transmission or storage system is completely secure; use our Services with awareness of inherent risks.

6. Data Retention

• Account information remains while your account is active and for a limited period afterward as required by law or legitimate business needs.
• User-generated content persists until you delete it or close your account.
• Diagnostic logs typically persist for up to 90 days unless longer retention is needed for security or compliance.
• Following account closure, we delete or anonymize personal data within commercially reasonable timeframes unless retention is legally mandated.

7. Your Rights & Choices

• Access and export account information through our Services or by contacting us.
• Update profile details directly or request corrections.
• Delete your data or entire account by contacting [email protected].
• Manage marketing preferences via in-app controls or device settings.

Residents of the UK/EU have GDPR rights including access, rectification, erasure, restriction, objection, and portability. California residents have CCPA rights including access, deletion, and non-discrimination.

8. Cookies & Similar Technologies

We use essential cookies to maintain sessions and security. Analytics or performance cookies help us improve stability. You can manage cookies through browser settings, though disabling essential cookies may impair functionality.

9. Children's Privacy

Our Services are not intended for individuals under 18. If we learn that a child has provided personal information, we will take steps to delete it promptly.

10. International Transfers

Your information may be processed outside your country of residence, including in the United Kingdom, the European Union, and the United States. We rely on appropriate safeguards to protect personal data during cross-border transfers.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material updates will be communicated through our Services or by email, and the "Last Updated" date will reflect the latest revision. Continued use after changes indicates acceptance of the revised Policy.

12. Contact

For privacy inquiries, data requests, or questions about this Policy, contact Sagesight Ltd. at:

Email: [email protected]