Last updated:
Privacy Policy
This policy explains how Sigmon ("we", "us") handles personal data when you visit sigmon.app and when you use Sigmon Cloud. Questions or requests: [email protected].
1. Two roles
- Account and billing data (your name, email, company, billing details): we are the controller.
- Telemetry in your instance (events, errors, traces, LLM calls, feedback and anything else your applications send): you are the controller and we are your processor. See the Data Processing Addendum.
2. What we collect
- Account data: name, email address, company name, and authentication details.
- Billing data: handled by Stripe. We receive plan, status, country and the last digits and brand of the payment method, never the full card number.
- Service and support data: operational logs of the control plane, and the messages you send to support.
- Website data: the landing site does not use advertising trackers. Standard server logs (IP address, user agent, timestamps) are kept for security and abuse prevention.
3. Where your telemetry lives
Telemetry data stays in your dedicated instance. Each Cloud customer receives its own isolated instance with its own database; telemetry is not shared across customers and is not used for advertising, to train models, or for any purpose other than providing the service to you. Our staff access an instance only to operate it, restore backups or resolve a support request you made.
4. Retention
Retention of telemetry inside your instance is configurable by you per signal type and per project in the console. Backups follow the retention configured for your instance and are encrypted. Account and billing records are kept as long as the account is active and afterwards as required by tax and accounting law.
5. Deletion
When you cancel, your instance remains available until the end of the paid period. We delete the instance and its Customer Data, including backups, 30 days after the cancellation takes effect. You can request earlier deletion at [email protected]. Data we must keep by law (for example invoices) is retained for the legally required period.
6. Sub-processors
| Sub-processor | Purpose |
|---|---|
| Stripe | Payment processing and billing |
| Resend | Transactional email delivery (invitations, alerts, receipts) |
| Cloudflare | DNS, and object storage for encrypted backups |
| Hosting provider | Servers on which your dedicated instance runs |
We will update this list before adding a sub-processor that processes Customer Data, and notify customers by email.
7. International transfers
Our providers may process data outside your country. Where required we rely on appropriate safeguards such as standard contractual clauses.
8. Security
We use encryption in transit, encrypted backups, per-customer instance isolation, access controls and audit logging. No system is perfectly secure; we will notify affected customers of a personal data breach without undue delay.
9. Your rights
Depending on where you live (for example under the LGPD or GDPR) you may have the right to access, correct, delete, port or object to the processing of your personal data. Email [email protected]. If your data sits in a customer's telemetry, we will refer the request to that customer, who is the controller.
10. Cookies
The marketing site sets no tracking cookies. The console uses only the session cookies needed to keep you signed in.
11. Changes
We will post changes here and update the date on this page; for material changes we will notify account holders by email.
12. Contact
Sigmon, [email protected].