Privacy notice

This notice describes how Sigmaviu handles personal information on our marketing site, account sign-in, and product. It is an operational notice, not a substitute for a lawyer-reviewed privacy policy or a certified audit attestation. Super admins can update this copy in Admin → Pages.

Who we are

Sigmaviu provides a hosted project-delivery workspace. For privacy questions, use our contact form with intent “privacy”. Paying customers can request a data processing addendum via Contact (DPA). That form request is not itself a signed DPA.

What we collect

Marketing site: pages you visit, language preference, and messages you send through Contact or Careers (name, email, company, message, and any resume you attach).
Accounts: identity and organisation membership through our authentication provider (email, name, organisation). We do not name that vendor in customer Settings copy.
Product data: project, document, and operational records your organisation stores in the workspace, plus usage needed to run the service (for example AI credit totals).
Payments: billing details processed by our checkout provider. We do not store full card numbers on Sigmaviu servers.
Cookies: essential session, security, and language cookies only. See the cookie notice. We do not set analytics cookies today.

Why we use it

To provide the service, respond to inquiries and job applications, secure accounts, bill subscriptions, improve reliability, and meet legal obligations. We do not sell personal information.

Who processes it

Infrastructure and subprocessors typically include hosting, database, authentication, email delivery, error monitoring (when configured), and (when you use AI features) model providers through our AI gateway. Super Admin can publish a legal entity name and postal address in Admin → Settings. A current processor list is available on request via the contact form — this page is not a certified subprocessor register.

Retention

Account and workspace data is kept while the organisation is active, then deleted or anonymised according to our retention practices after closure. Contact and career records are kept only as long as needed to respond, recruit, or meet record-keeping duties.

Your choices

You can request access, correction, or deletion of personal information we hold about you, and object to or restrict certain processing where the law allows. Organisation admins control member access inside the product. For GDPR-specific rights, see GDPR.