Privacy Policy
Effective Date: [DATE]
Version: 1.0
Undersight, Inc. ("Undersight", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.
1. Information We Collect
1.1 Information You Provide
Account Information: When you create an account, we collect:
- Name and email address
- Company name and billing information
- Phone number (optional)
- Password and authentication credentials
Customer Data: Data you submit to or process through our Services, which may include business data, financial information, and other content you choose to upload.
Communications: Information you provide when contacting our support team, responding to surveys, or communicating with us.
1.2 Information Collected Automatically
Usage Data: We automatically collect information about how you interact with our Services:
- Features accessed and actions taken
- Session duration and frequency
- Device and browser information
- IP address and general location
Cookies and Tracking Technologies: We use cookies, pixels, and similar technologies to:
- Maintain your session and preferences
- Analyze usage patterns
- Improve our Services
1.3 Information from Third Parties
We may receive information from:
- Identity verification services
- Payment processors
- Integration partners (with your authorization)
2. How We Use Your Information
We use collected information for the following purposes:
2.1 Service Delivery
- Provide, maintain, and improve our Services
- Process transactions and send related information
- Respond to your requests and support inquiries
2.2 Communication
- Send service-related notices and updates
- Provide information about features, products, or services
- Send marketing communications (with your consent)
2.3 Security and Compliance
- Detect, prevent, and address fraud and security issues
- Comply with legal obligations
- Enforce our terms and policies
2.4 Analytics and Improvement
- Analyze usage trends and patterns
- Develop new features and services
- Conduct research and analytics
3. How We Share Your Information
We do not sell your personal information. We may share information in the following circumstances:
3.1 Service Providers
We share information with third-party vendors who perform services on our behalf, including:
- Cloud hosting and infrastructure
- Payment processing
- Customer support tools
- Analytics services
All service providers are bound by contractual obligations to protect your information.
3.2 Legal Requirements
We may disclose information if required by law or in response to:
- Court orders or legal process
- Government requests
- Protection of our rights or safety
3.3 Business Transfers
In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
3.4 With Your Consent
We may share information for other purposes with your explicit consent.
4. Data Retention
4.1 Retention Periods
We retain your information for as long as:
- Your account is active
- Needed to provide Services
- Required by legal obligations
- Necessary for legitimate business purposes
4.2 Customer Data
Upon account termination, Customer Data will be:
- Available for export for 30 days
- Deleted from active systems within 90 days
- Removed from backups within 180 days
5. Data Security
We implement appropriate technical and organizational measures to protect your information:
- Encryption: Data encrypted in transit (TLS 1.2+) and at rest (AES-256)
- Access Controls: Role-based access with principle of least privilege
- Monitoring: Continuous security monitoring and logging
- Assessments: Regular security audits and penetration testing
- Compliance: SOC 2 Type II certified infrastructure
6. Your Rights and Choices
6.1 Access and Portability
You can access and export your data through our Services or by contacting us.
6.2 Correction
You can update your account information through your account settings.
6.3 Deletion
You can request deletion of your personal information by contacting us. Note that we may retain certain information as required by law or for legitimate business purposes.
6.4 Marketing Communications
You can opt out of marketing emails by:
- Clicking "unsubscribe" in any marketing email
- Updating your communication preferences
- Contacting us directly
6.5 Cookies
You can manage cookie preferences through your browser settings. Note that disabling cookies may affect functionality.
7. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:
- Standard contractual clauses
- Data processing agreements
- Compliance with applicable data protection laws
8. Children's Privacy
Our Services are not intended for children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us.
9. California Privacy Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know: Request disclosure of personal information collected
- Right to Delete: Request deletion of personal information
- Right to Opt-Out: Opt out of sale of personal information (we do not sell personal information)
- Non-Discrimination: We will not discriminate against you for exercising your rights
To exercise these rights, contact us at privacy@undersight.com.
10. European Privacy Rights
If you are in the European Economic Area (EEA), UK, or Switzerland, you have rights under GDPR including:
- Access to your personal data
- Rectification of inaccurate data
- Erasure ("right to be forgotten")
- Restriction of processing
- Data portability
- Object to processing
- Withdraw consent
Legal Basis for Processing: We process personal data based on:
- Performance of contract
- Legitimate interests
- Compliance with legal obligations
- Your consent
Data Protection Officer: For GDPR-related inquiries, contact dpo@undersight.com.
11. Third-Party Links
Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy on our website
- Sending an email notification
- Providing notice through the Services
Your continued use after such notice constitutes acceptance of the updated policy.
13. Contact Us
For questions about this Privacy Policy or our privacy practices:
Undersight, Inc. Privacy Team [ADDRESS]
Email: privacy@undersight.com
For data protection inquiries (EU/UK): dpo@undersight.com
Last Updated: [DATE]