Privacy Policy

Data controller

The data controller for your personal data is HUMAN ARTS S.R.L. (CUI: 55490457), a company registered in Romania. You can contact us at support@sightstack.app for any privacy-related inquiries.

What data we collect

When you use SightStack, we collect the following personal data:

• Email address — provided at checkout for report delivery and order communication.
• Website URL — the URL you submit for analysis. We capture publicly visible page content exactly as any web browser would.
• Payment information — processed entirely by Stripe. We never store your credit card details on our servers.
• Feedback and testimonials — if you submit feedback via our form, we collect the content of your response. Feedback is displayed publicly only with your explicit consent (opt-in checkbox on the feedback form).

How we use your data

We use your data for the following purposes:

• Generating and delivering your website intelligence report.
• Sending transactional emails related to your order (report delivery, payment confirmation).
• Sending marketing emails with tips and insights related to your report. You can unsubscribe at any time via the link in every email.
• Improving our analysis quality and service.

We do not sell, share, or rent your personal data to third parties for their marketing purposes.

Analytics

SightStack uses privacy-friendly, cookieless analytics. We do not use tracking cookies, and no cookie consent banner is required. For analytics purposes, we generate anonymous visitor identifiers using a one-way hash (SHA-256) of your IP address combined with a daily rotating salt. Your raw IP address is never stored. This approach makes it impossible to identify individual users or track them across days.

Third-party processors

We use the following third-party services to operate SightStack:

• Stripe (payments) — PCI DSS Level 1 certified. Handles all payment processing. Privacy policy: stripe.com/privacy
• Resend (email delivery) — used to send transactional and marketing emails.
• Anthropic (Claude AI) (analysis) — we send website screenshots and page data to Claude's API to generate the AI-powered analysis in your report.
• Hetzner (hosting) — all data is stored on servers in Germany (EU).

Data storage and retention

All data is stored on servers located in the European Union (Hetzner, Germany). Reports and associated screenshots are retained indefinitely to support re-audit comparisons and continued access to your report. Marketing email subscriptions can be cancelled at any time via the unsubscribe link.

Report access

Each report is accessible via a unique private link (UUID-based, non-guessable) shared only with you. We do not publish or share your reports. You control who has access by sharing (or not sharing) your report link.

Your rights under GDPR

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

• Right of access (Article 15) — request a copy of the personal data we hold about you.
• Right to rectification (Article 16) — request correction of inaccurate personal data.
• Right to erasure (Article 17) — request deletion of your personal data. We will process erasure requests within 30 days.
• Right to restriction (Article 18) — request restriction of processing of your personal data.
• Right to data portability (Article 20) — receive your personal data in a structured, commonly used format.
• Right to object (Article 21) — object to processing of your personal data, including for direct marketing.

To exercise any of these rights, contact us at support@sightstack.app. You also have the right to lodge a complaint with your local data protection authority.

Contact

For any privacy-related questions or data requests, contact us at support@sightstack.app.