Privacy policy.

Sight AI is a search and AI visibility platform for websites: indexing and Search Console analytics, rank tracking and keyword research, site audits, AI-assisted content writing and publishing to your CMS, backlink outreach with an email agent, and tracking of how AI assistants mention and cite your brand. An in-app agent and a developer API and MCP server give you and your tools access to the same data.

For the personal data of our customers, their team members, website visitors and prospects (account data, usage data, marketing data), we are the controller. For the content and data you bring to Sight or connect to it, including information about your own customers and the contacts you reach through the Outreach Agent, you are the controller and we process it on your instructions as your processor. Section 11 explains what that means in practice, and a Data Processing Agreement is available on request.

The Services are intended for businesses and professionals. They are not directed at children (see section 13).

We use personal data to:

• Provide the Services: run your account, store and display your sites, keywords, rankings, audits, articles and visibility data, and keep connected platforms in sync.
• Generate content and analysis with AI: your keywords, business context, page content, Search Console data and prompts are sent to AI model providers to write and edit articles, recommend topics and categories, answer the in-app agent, and summarize what changed. Section 3.1 explains how those providers may use the data.
• Track AI and search visibility: run your tracked prompts against AI platforms and your tracked keywords against search results, and store the outcomes.
• Send outreach and manage replies on your behalf: deliver the emails you or the agent compose, receive replies and forwarded messages, detect unsubscribe requests and keep a suppression list so a contact who opts out is not emailed again.
• Submit pages for indexing to Google Search Console and IndexNow when you ask us to.
• Automate work you schedule: run Autopilot, agents and automations on the schedule and within the budget you set.
• Bill you: manage subscriptions, credits, invoices, taxes and refunds, and detect fraudulent or abusive sign-ups.
• Support you: answer questions, troubleshoot, and tell you about changes that affect your account.
• Improve the Services: understand which features are used, measure performance, fix errors, and develop new features, using aggregated or de-identified data wherever we can.
• Keep the Services secure: authenticate users, enforce rate limits, detect misuse, and investigate incidents.
• Communicate: send service emails about your account, and product news and tips you can opt out of at any time.
• Comply with law and enforce our Terms of Service.

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases:

• Performance of a contract: providing the Services you signed up for, including the AI, outreach, indexing and integration features you enable.
• Legitimate interests: securing and improving the Services, preventing fraud and abuse, understanding usage, and marketing to business customers, balanced against your rights.
• Consent: optional cookies and marketing emails where consent is required, and connected platforms you choose to authorize. You can withdraw consent at any time.
• Legal obligations: tax, accounting, and responding to lawful requests.

Where we process your contacts' data as your processor, you are responsible for the legal basis for that processing (section 11).

We do not sell personal data, and we do not share it with third parties for their own marketing. We share personal data with the following categories of recipients, each bound by contract to protect it and to use it only to provide their service to us:

• Hosting and infrastructure: Vercel (application hosting and edge network), Supabase (database and file storage, hosted on Amazon Web Services in the United States), Upstash (caching and rate limiting) and Inngest (background jobs).
• Payments: Stripe, which processes card payments and holds your card details under its own privacy policy.
• Email delivery: Resend for account and product emails we send to you; Mailgun for the outreach emails you send to your contacts through the Outreach Agent.
• AI model providers: OpenAI, Anthropic, Google (Gemini), Perplexity and xAI, for content generation, analysis, the in-app agent and AI visibility checks; and an image generation provider when you generate article images in the app. Section 3.1 describes how they may use the data.
• Search and web data: search data providers that supply rankings, keyword and backlink data; Firecrawl, which crawls pages at your request; and Google Search Console and IndexNow, which receive the sites and URLs you ask us to monitor or submit.
• Monitoring and analytics: Sentry (error monitoring), Datadog (application performance), Mixpanel and Vercel Analytics (product usage), and on our marketing site Google Analytics and Tag Manager, Meta (advertising measurement), Cometly (advertising attribution) and Rewardful (affiliate referral tracking).
• Support and customer communication: Halo Agents, which powers our in-app chat, help desk and customer messaging.
• Platforms you connect: Google, your CMS, Slack, HubSpot and other connectors receive and return data at your direction under their own privacy policies.
• AI assistants you connect: when you connect ChatGPT, Claude or another client to our MCP server or API, that client's provider receives the data its tool calls return, under its own privacy policy.
• Professional advisers and authorities: lawyers, accountants and auditors; and courts, regulators or law enforcement where we are legally required to or where it is necessary to protect our rights, our users or the public.
• Business transfers: a buyer or successor in a merger, acquisition, financing or sale of assets, who must honor this Privacy Policy.
• With your consent or at your direction, for example when you share a report link.

Some US state laws call the use of advertising pixels on a website “sharing” for cross-context behavioral advertising. The Meta pixel and Cometly on www.trysight.ai fall into that category; the app does not use advertising pixels. Visitors covered by those laws are asked before the pixels load, and section 10 explains how to opt out at any time.

When you connect Google Search Console, we request the Search Console scopes (webmasters or webmasters.readonly) for the properties you choose. We use that access only to show you your search performance, sitemap, indexing and URL inspection data inside Sight, to let the in-app agent and your connected assistants answer your questions about it, to submit sitemaps and URLs for indexing when you ask, and to produce the reports and alerts you configure.

Sight AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not use Google user data to serve advertisements, we do not sell it, and we do not transfer it to third parties except as necessary to provide and improve the features you use, to comply with law, or as part of a merger or acquisition with notice to you. Humans at Sight AI read Google user data only with your permission, when needed for security or to fix a problem you reported, or where the law requires it. We do not use Google user data to train AI models.

You can revoke our access at any time in Sight under Integrations or in your Google account permissions. When you disconnect, we delete the access token and stop collecting new data; stored performance history is deleted with your site or on request.

We use cookies, local storage and pixels for these purposes:

• Essential: signing you in, keeping your session, protecting against cross-site request forgery, remembering your team and site selection, and a 30-day cookie that keeps an invitation or referral code while you sign up. The Services do not work without these.
• Performance and analytics: Datadog, Mixpanel and Vercel Analytics in the app, and Google Analytics through Tag Manager on the marketing site, so we can see which features and pages are used and how fast they load.
• Advertising measurement (marketing site only): the Meta pixel and Cometly, which measure whether our advertising brought you to www.trysight.ai.
• Affiliate referrals (marketing site only): Rewardful sets a 60-day cookie when you arrive through an affiliate link so the affiliate can be credited if you subscribe.

Your choices on the marketing site. If you visit www.trysight.ai from the European Economic Area, the United Kingdom, Switzerland, a US state with a consumer privacy law, Canada or Brazil, we show a cookie banner and set no analytics or advertising cookies until you choose. Everyone can review or change their choice at any time through Cookie preferences in the footer of every page. Your choice is stored in a cookie for 12 months. We also honor the Global Privacy Control signal on the marketing site: when your browser sends it, marketing and advertising cookies stay off.

You can also delete or block cookies in your browser settings, opt out of Google Analytics with Google's browser add-on, and manage advertising measurement through your Meta ad preferences. Blocking essential cookies will prevent you from signing in. The app (app.trysight.ai) sets no advertising cookies; its performance and product analytics are described above.

We keep personal data only as long as we need it for the purposes above. Typical periods:

• Account and team data: for the life of your account and up to 90 days after it closes, so you can reactivate or export it.
• Your sites, content, keywords and visibility history: until you delete the site or the account; everything is deleted within 90 days of account closure.
• Connected platform data: Search Console history for up to 16 months on a rolling basis while connected, and until the site or account is deleted; access tokens are deleted the moment you disconnect.
• Outreach contacts and messages: until you delete the conversation or the account. Unsubscribe requests are kept on a suppression list for as long as the site exists so an opt-out keeps being honored.
• Billing records: up to 7 years to meet tax and accounting obligations.
• Support conversations: for the life of your account and up to 2 years after, to resolve follow-up questions.
• Request, security and audit logs: for a limited period, normally no longer than 12 months, unless needed for an investigation.
• Backups: deleted data may persist in encrypted backups for up to 30 days before it is overwritten.

You can ask us to delete your account and data at any time by emailing privacy@trysight.ai. We may keep what the law requires us to keep, and de-identified data that no longer identifies you.

We protect personal data with technical and organizational measures appropriate to its sensitivity, including:

• TLS encryption for all data in transit and AES-256 encryption for stored data, with connected-platform tokens and secrets encrypted separately.
• Access controls that limit who at Sight AI can reach customer data, logging of that access, and least-privilege service credentials.
• Password hashing, optional two-factor authentication for your account, and OAuth with PKCE for API and MCP connections.
• Monitoring, rate limiting and automated alerts, with regular vulnerability scanning of our code and dependencies.

No method of transmission or storage is completely secure. If you believe your account has been accessed without permission, contact support@trysight.ai right away. If a breach affects your personal data, we will notify you and the relevant authorities as the law requires.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and receive a copy.
• Correct inaccurate or incomplete data. You can edit most account details in Settings.
• Delete your data, subject to legal retention requirements.
• Export your data in a portable format.
• Object to or restrict processing based on legitimate interests, including direct marketing.
• Withdraw consent at any time where processing is based on consent, without affecting processing before the withdrawal.
• Opt out of “sharing” for cross-context behavioral advertising (section 5) through Cookie preferences in the footer of www.trysight.ai, a Global Privacy Control signal, or by emailing us.
• Not be discriminated against for exercising any of these rights.

To exercise a right, email privacy@trysight.ai from the address on your account, or ask us how to verify your identity another way. We respond within one month (EEA and UK) or 45 days (US states), and we will tell you if we need longer. An authorized agent may make a request on your behalf with proof of authorization. If we decline a request, we will explain why and how to appeal.

Marketing emails: every product or marketing email we send has an unsubscribe link, and you can also email us to opt out. We will still send service emails about your account, billing and security.

Global Privacy Control and Do Not Track: on www.trysight.ai we treat a Global Privacy Control signal as an opt-out of “sharing” and keep marketing and advertising cookies off. We do not respond to the older Do Not Track signal. The controls in section 7 work everywhere.

EEA, UK and Switzerland: you also have the right to lodge a complaint with your local data protection authority. In the UK that is the Information Commissioner's Office. We would appreciate the chance to address your concern first.

California and other US states: the categories of personal information we collect, the purposes, and the recipients are described in sections 2, 3 and 5. We have not sold personal information in the preceding 12 months. We “share” identifiers and internet activity with advertising measurement providers on our marketing site as described in section 5, and you may opt out as described above. We do not knowingly collect personal information from anyone under 16 and do not use or disclose sensitive personal information for purposes that require a right to limit.

When you upload, discover or correspond with contacts through the Services, or connect platforms that contain personal data about your own customers, you are the controller of that data and we are your processor. That means:

• We process it only to provide the Services to you and on your instructions, which you give through the product and our Terms of Service, and never for our own purposes.
• You are responsible for having a lawful basis to collect it and to contact the people it concerns, for giving them any notices the law requires, and for complying with anti-spam and electronic marketing laws such as CAN-SPAM, PECR and CASL.
• Every outreach email carries an unsubscribe mechanism. A recipient who replies asking to stop, uses the unsubscribe address, or writes to us is added to your site's suppression list and is not emailed again from that site. We may stop sending on your behalf if we see complaints, bounces or content that violates our Terms.
• If a person whose data you control contacts us to exercise a right, we will tell you and help you respond, or respond directly where the law requires.
• We use the sub-processors in section 5 for this processing and will notify you of changes if you have a Data Processing Agreement with us. To request one, email privacy@trysight.ai.

If you received an email through Sight AI from one of our customers and want it to stop, reply to the email or use the unsubscribe address in it, and the sender's account will not email you again. You can also write to privacy@trysight.ai to find out which customer holds your data, or to have it corrected or deleted.

We are based in the United States and store and process data there. Our service providers may process data in the United States and other countries. When we transfer personal data from the European Economic Area, the United Kingdom or Switzerland, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and the equivalent Swiss safeguards, together with supplementary measures where needed. Copies are available on request.

The Services are for businesses and professionals and may only be used by people aged 18 or older. We do not knowingly collect personal data from anyone under 18, and never from children under 13. If you believe a child has provided us with personal data, contact privacy@trysight.ai and we will delete it.

We may update this Privacy Policy as the Services and the law change. We will post the new version here with a new effective date, and for material changes we will email account owners or show a notice in the app at least 14 days before the change takes effect. Continued use of the Services after that date means you accept the updated policy.

For privacy questions, requests or complaints, or to request a Data Processing Agreement: