Privacy Policy

1. Introduction

SendSight ("we", "our", or "us") is operated by Retention Machine. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and services. Please read this policy carefully. By using SendSight, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect information that you provide directly to us, as well as information collected automatically when you use our service.

Information You Provide

• Account information: name, email address, and password when you create an account
• Billing information: payment details processed securely through our payment provider (Stripe)
• API keys: Klaviyo private API keys that you provide to connect your accounts
• Brand information: brand names and configuration settings

Information Collected Automatically

• Usage data: pages visited, features used, and actions taken within the platform
• Device information: browser type, operating system, and device identifiers
• Log data: IP addresses, access times, and referring URLs

3. How We Use Your Information

• To provide, maintain, and improve our services
• To sync and display your email marketing data from Klaviyo
• To process transactions and send billing communications
• To send service-related notices, including updates and security alerts
• To respond to your comments, questions, and support requests
• To generate AI-powered insights and analytics based on your marketing data
• To detect, prevent, and address technical issues

4. Cookies

We use essential cookies to maintain your session and authenticate you across the platform. We do not use advertising or tracking cookies. Essential cookies are required for the service to function and cannot be disabled.

Under UK GDPR, essential cookies do not require explicit consent as they are strictly necessary to provide the service you have requested. We do not use any cookies that track your behaviour across other websites or for advertising purposes.

5. Third-Party Services

We use the following third-party services to operate SendSight:

• Supabase: Authentication and database hosting
• Stripe: Payment processing
• Klaviyo: Data source integration (via your provided API key)
• Railway: Application hosting
• OpenAI: AI-powered insights generation based on your aggregated marketing performance data

Each of these services has its own privacy policy governing their use of your data. These third-party providers act as data sub-processors under our data processing agreements.

6. Data Security

We implement industry-standard security measures to protect your personal information. All data is encrypted in transit using TLS and at rest using AES-256 encryption. API keys are stored using encryption and are never exposed in plain text. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your account information for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes. Aggregated, anonymised data may be retained indefinitely.

8. Your Rights

Under UK GDPR and other applicable data protection laws, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a machine-readable format
• Objection: Object to processing of your personal data
• Restriction: Request restriction of processing in certain circumstances

To exercise any of these rights, please contact us at hello@sendsight.io. We will respond to your request within one month. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the service after changes constitutes acceptance of the revised policy.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at hello@sendsight.io.