Privacy Policy
Last updated 21 August 2026
This notice explains what personal data Sighted collects, why we process it, who we share it with, and what you can do about it. It covers www.getsighted.ai and the marketplace behind it.
1. Who is responsible
[COMPANY NAME], [STREET, POSTCODE CITY, COUNTRY], registered under company number [COMPANY NUMBER], is the controller of the personal data described here.
For anything in this notice, write to privacy@getsighted.ai.
2. What we collect
When you create an account
Your email address. That is all signing in requires, because we use a one-time link instead of a password, so we never hold one.
Your company profile
Company name, company domain, logo URL and a default description, if you fill them in. These are business details, though for a one-person company they can identify a person.
When you buy
Stripe collects and holds your payment details. We store a Stripe customer reference and the amounts, terms and status of your subscriptions. We never receive your card number.
Listing content
Whatever you write for a listing, along with the automated moderation verdicts recorded against it.
Technical logs
Our hosting provider records IP addresses and request metadata, which we use to keep the service secure and working.
Crawler traffic
On the content domains we record which automated crawlers (GPTBot, ClaudeBot, Googlebot and similar) fetch which pages. That is bot traffic, not visitor tracking, and it holds no personal data about readers.
Advertising and analytics
We advertise, and we measure whether it works. When you arrive from an ad we record the click ID that platform added to the link, along with any campaign parameters, against a first-party visitor ID we set in your browser. If you then sign up or buy, we report that back to the platform concerned — Google, Meta, Reddit or LinkedIn — so it can be credited to the right campaign.
Those reports are sent from our servers as well as from your browser. They carry your email address only as an irreversible hash, never in readable form, plus your IP address and browser user agent, which the platforms use to match the conversion to an account of theirs. They do not carry your listing content, what you wrote, or what you paid beyond the order total.
We also keep our own record of the campaign that brought you here, against the same visitor ID, and attach it to your account when you sign up. That record is used to understand which channels work for us. It is not shared with anyone.
The content domains in our publisher network do not carry these tags by default. Individual content domains may carry a site analytics tag of their own, disclosed on the site concerned.
Emails from us
Beyond the sign-in links you request, we may send you a welcome email when you create an account, and at most one reminder if you have created an account but have not claimed a listing. Reminders carry an unsubscribe link; using it stops them and nothing else. We use Resend to deliver email and to tell us whether a message was delivered and opened.
3. Why we process it, and on what basis
| Purpose | Data | Legal basis |
|---|---|---|
| Giving you an account and running your listings | Email address, company profile, listing content | Performance of a contract |
| Taking payment and handling renewals | Billing records, subscription status | Performance of a contract |
| Screening listing content before it publishes | Listing text, link anchor and destination | Legitimate interest: keeping the publications credible and lawful |
| Keeping the service secure and available | IP address, request logs | Legitimate interest: security and reliability |
| Measuring our advertising, and reporting sign-ups and purchases back to the ad platform that produced them | A first-party visitor ID, ad click IDs, campaign parameters, page views, IP address, browser user agent, and your email address in hashed form | Consent, where required for the cookies involved |
| Emailing you about your account, and reminding you once about a listing you started but did not finish | Email address, the website you told us about, what is in your basket, and whether our emails were delivered and opened | Legitimate interest: running the service. Every reminder carries an unsubscribe link |
| Answering your questions | Whatever you put in your message | Legitimate interest: customer support |
| Meeting accounting and tax obligations | Invoices and payment records | Legal obligation |
4. Who we share it with
We use the following processors, each under a data processing agreement and only for the purpose shown:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Authentication and database hosting | Email address, account and listing records |
| Vercel | Application hosting and content delivery | IP address and request logs |
| Stripe | Payment processing, subscriptions and invoicing | Email address, billing details, payment method (held by Stripe, never by us) |
| Resend | Delivering sign-in links and the emails we send you | Email address, message content, delivery and open events |
| Anthropic | Generating editorial copy and screening listing content | Listing text submitted for generation or moderation |
| logo.dev | Fetching company logos by domain | Company domain name |
| Google (Analytics and Ads) | Website analytics and advertising measurement | Page views, a first-party visitor ID, IP address, browser user agent |
| Meta | Advertising measurement and audiences | Page views, ad click IDs, IP address, browser user agent, hashed email address |
| Advertising measurement and audiences | Page views, ad click IDs, hashed IP address, browser user agent, hashed email address | |
| Advertising measurement and audiences | Page views, ad click IDs, hashed email address |
We do not sell personal data, and we do not share it for advertising. We disclose data to authorities only where the law requires it.
Some of these providers process data outside the European Economic Area. Where that happens, the transfer is covered by the European Commission’s standard contractual clauses or by an adequacy decision.
5. How long we keep it
- Account and profile: while the account exists, then up to 12 months.
- Listing content: while published, plus archived copies of the page afterwards.
- Invoices and payment records: as long as accounting and tax law requires, typically seven years.
- Technical logs: up to 12 months.
- Crawler records: up to 24 months.
One thing we cannot undo. A published listing is public. Search engines, AI systems, archives and other third parties may copy, cache or train on it, and we have no way to retrieve those copies once made. Deleting a listing removes it from our sites; it cannot remove it from everywhere else.
6. Your rights
Under the GDPR you can ask us to:
- give you a copy of the personal data we hold about you;
- correct it if it is wrong;
- delete it, subject to the archiving and legal-retention limits above;
- restrict or object to how we process it; and
- hand it over in a portable format.
Write to privacy@getsighted.ai and we will respond within one month. If you are not satisfied, you can complain to [SUPERVISORY AUTHORITY].
7. Cookies
Strictly necessary: the session cookies that keep you signed in, and the cookies Stripe sets on its own payment pages for fraud prevention.
Advertising and analytics: a first-party visitor ID (sighted_vid, one year) and a record of the campaign you arrived from (sighted_attr, ninety days), plus the cookies set by Google Analytics, the Meta Pixel, the Reddit Pixel and the LinkedIn Insight Tag. These are what let us tell which advertising brought a customer.
Neither of our own two cookies is readable by JavaScript, and neither holds your name, your email address or anything you have typed.
8. Children
Sighted is a business service and is not directed at anyone under 18. We do not knowingly collect their data.
9. Changes to this notice
We will update this page when our processing changes and move the date at the top. Material changes are announced by email.