Privacy Policy

This Privacy Policy explains how Utku Dereli(“Sightl”, “we”, “us”) collects, uses, and protects personal data when you use Sightl, our influencer-campaign management platform at sightl.com. We are the data controller for the personal data described here. Contact us at utku@sightl.com.

Sightl is built EU-first: your data is stored and processed within the European Union (see “Where your data is processed” below).

Data we collect

• Account data you provide: email address, first and last name, optional profile photo, organization/workspace details, and (if you use Google sign-in) the basic profile information Google shares (name, email, profile picture).
• Workspace content you create in the app: creators and their public social handles, campaigns, deliverables, posts and the performance metrics you enter or import, clients, and reports.
• Technical data generated automatically: IP address, device/browser information, and security and diagnostic logs.
• Cookies strictly necessary to run the service — see our Cookie Policy.

We do not use advertising or cross-site tracking, and we do not sell personal data.

How we use your data

• To provide, secure, and maintain the Sightl service and your account.
• To authenticate you (passwordless email codes or Google sign-in) and prevent abuse.
• To send service and account emails (e.g. login codes, invitations).
• To comply with legal obligations and enforce our terms.

Legal bases (GDPR)

We process personal data to perform our contract with you (providing the service), on the basis of our legitimate interests (security, service improvement, preventing abuse), where you have given consent (e.g. optional cookies/communications), and to meet legal obligations.

Where your data is processed (sub-processors)

We use the following processors, under data-processing agreements, to run Sightl:

• Neon — PostgreSQL database (EU region).
• Cloudflare R2 — image/file storage (EU region).
• Upstash — rate-limiting cache (EU region).
• Vercel — application hosting; functions run in Frankfurt (fra1).
• Resend — transactional email delivery.
• Google — only if you choose “Continue with Google” (sign-in).

Application data and compute are located in the EU. Where a processor may handle limited data outside the EU (e.g. email delivery), we rely on appropriate safeguards such as EU Standard Contractual Clauses. [Confirm exact processor locations/DPAs with counsel.]

Retention

We keep your personal data for as long as your account is active and as needed to provide the service. When you delete your account or organization, we delete or anonymize the associated personal data, except where we must retain it to meet legal obligations. [Specify retention periods.]

Your rights

Subject to applicable law, you may request access to, correction of, deletion of, or a copy of your personal data; object to or restrict certain processing; and withdraw consent. You also have the right to lodge a complaint with your local data protection authority. To exercise your rights, contact utku@sightl.com.

Security

We apply industry-standard measures including encryption in transit, hashed credentials, tenant isolation, and access controls. No method of transmission or storage is perfectly secure, but we work to protect your data.

Children

Sightl is intended for business use and is not directed to children under 16.

Changes to this policy

We may update this policy from time to time; we will update the date above and, where appropriate, notify you.

Contact

Utku Dereli — utku@sightl.com. Data protection contact: Utku Dereli (utku@sightl.com).