Privacy Policy

This Privacy Policy (the “Policy”) explains how SightShark (“SightShark”, the “Product”), provided by Prowiz Analytics (“Prowiz Analytics”, “we”, “us” or “our”), collects, uses and discloses personal data when you access or use the Product, including our website, application, dashboards, API and any other interface through which the Product is delivered (together, the “Product Interface”).

This Policy applies solely to the SightShark product and does not cover any other service provided by Prowiz Analytics.

Under the Digital Personal Data Protection Act, 2023 (the “DPDP Act”), Prowiz Analytics is the Data Fiduciary responsible for determining the purpose and means of processing personal data collected through SightShark.

General, data protection and grievance enquiries all reach us at the address above. Grievances are handled as described under Grievance redressal below.

The “Product User Register” comprises all customers, prospective users and stakeholders (each a “Data Principal” under the DPDP Act) who interact with SightShark. The information in this register is used solely to deliver and improve the services offered through the Product.

A. Types of personal data collected

When you use SightShark we may collect, directly or automatically, the following categories of personal data:

• Basic identification data: full name, unique user identifier and preferred language.
• Contact information: email address, phone number and postal address.
• Account and transaction data: registration details, login credentials, product usage history and billing or payment information.
• Usage and device data: IP address, device identifiers, browser type, operating system and cookie data, together with details of your interactions with the Product such as feature usage, session duration and navigation patterns.
• Feedback and communication data: information you provide through surveys, support requests or direct communication with our team.

B. Purposes of processing

We use your personal data to:

• Provide and improve the Product: deliver SightShark's services, tailor your experience and improve functionality.
• Manage accounts and support you: administer your account, process transactions and answer support enquiries.
• Analytics and research: analyse usage patterns and performance to guide product improvements.
• Compliance and security: meet contractual and legal obligations and protect the Product against fraud and unauthorised access.
• Marketing and communications: tell you about product updates, new features and offers, where you have consented.

C. Legal basis for processing

We process personal data on the following bases, consistent with the DPDP Act:

• Consent: where you have given free, specific, informed, unconditional and unambiguous consent for a specified purpose, such as optional features, analytics or marketing.
• Certain legitimate uses: in the limited circumstances permitted by Section 7 of the DPDP Act, for example where you have voluntarily provided data for a specified purpose, to comply with a legal obligation or judicial order, or to respond to a medical emergency.
• Contractual necessity: to perform our obligations under your agreement with us.

Most of the data SightShark touches is not collected by us at all. It is your own business data, drawn from the platforms you connect and landed in a warehouse you own, and it may contain personal data relating to your customers, your clients or their end users.

For that data you are the Data Fiduciary and we act as a Data Processor on your instructions. Specifically:

• We process it only to deliver the service you have asked for: ingestion, storage, modelling, reporting, alerting and the AI features you enable.
• It is written to your own data warehouse, in the region you choose. We do not sell it, we do not use it to train models, and we do not use it to build any product other than yours.
• You are responsible for having a lawful basis to send us the data you connect, and for the notices and consents your own users are owed.
• Where you enable AI features, prompts and results are handled under your own model provider key and that provider's terms.
• On termination it stays where it already is, in your warehouse. See Data retention below for what we delete on our side.

We obtain personal data from:

• Direct interactions: when you register for, use or interact with SightShark.
• Automated collection: through cookies, log files and similar technologies as you use the Product Interface.
• Third-party integrations: from partner systems or publicly available sources, where permitted by law.

We do not sell personal data. We may share it with the following categories of recipient, each bound by contractual or legal obligations to protect it and to process it only for the purposes we authorise:

• Service providers and processors: vendors who host our infrastructure, process payments, provide support tooling or perform analytics on our behalf, acting only on our instructions.
• Group companies and affiliates: for internal administration, consolidated reporting and product support.
• Legal and regulatory authorities: courts, law enforcement and government or regulatory bodies, where disclosure is required by applicable law or valid legal process, or to protect the rights, safety or property of Prowiz Analytics, our users or the public.
• Business transfers: a successor entity in a merger, acquisition, restructuring or sale of assets, subject to the protections described in this Policy.

A. Security measures

We apply technical, organisational and physical safeguards to protect personal data, including:

• Encryption in transit and at rest.
• Access controls and authentication, granted on a least-privilege basis.
• Regular security assessment and monitoring.

No system can guarantee absolute security. If a personal data breach occurs, we will notify the Data Protection Board of India and each affected Data Principal as required by the DPDP Act and the rules made under it, and we will tell you what happened, what data was involved and what we are doing about it.

B. Data retention

We retain personal data only for as long as necessary for the purposes described above or as required by law. Data in the Product User Register is typically kept for up to ten (10) years after termination of your account, unless a longer period is required by law or by an ongoing legal proceeding.

Data held in your own warehouse is not ours to delete. It remains in your cloud project under your control, and your own retention settings govern it.

Personal data may be stored, processed or transferred to servers outside India, including those operated by our service providers. Such transfers are made in accordance with the DPDP Act, which permits transfer outside India except to countries or territories restricted by the Central Government of India. Where transfers occur, we require recipients to protect the data through appropriate contractual safeguards.

SightShark uses cookies and similar technologies to remember your preferences, to analyse usage and improve performance, and to support optional marketing activity where you have consented.

You can control cookies from your browser settings: most browsers let you block or delete them for a site, and blocking them will not stop you reading this website, though it may affect how the Product Interface remembers your choices. Where consent is required for non-essential cookies, we ask for it before setting them, and you may withdraw it at any time.

SightShark is not directed to, and is not intended for use by, individuals under the age of 18. We do not knowingly collect personal data from children without the verifiable consent of a parent or lawful guardian, as required by the DPDP Act. If we learn that we have collected such data without the required consent, we will delete it promptly. If you believe a child has provided us with personal data, write to support@sightshark.com.

Under the DPDP Act you have the following rights in relation to your personal data:

• Access: obtain a summary of the personal data we process about you, the processing carried out, and the identities of any processors or other Data Fiduciaries with whom it has been shared.
• Correction and erasure: have inaccurate or misleading data corrected, incomplete data completed, your data updated, or data erased where it is no longer needed for the purpose it was collected for, subject to our legal retention obligations.
• Grievance redressal: raise a grievance about our handling of your data or our response to a request, as described below.
• Nomination: nominate another individual to exercise your rights in the event of your death or incapacity.
• Withdrawal of consent: withdraw consent at any time, with the same ease with which it was given. Withdrawal does not affect processing carried out before it.

To exercise any of these rights, write to support@sightshark.com. We may need to verify your identity before we act on a request.

If you have a grievance about how your personal data is processed, or about our response to a rights request, contact our Grievance Officer:

We will acknowledge and resolve your grievance within the timelines prescribed by the DPDP Act and the rules made under it. If you are not satisfied with our response, you may escalate the complaint to the Data Protection Board of India.

We may update this Policy from time to time. When we make a material change we will update the date at the top of this page and notify you through the Product Interface or by email. Continued use of SightShark after a change takes effect constitutes acceptance of the updated Policy.

For any question about this Policy or about how we handle data: