Privacy policy

Last updated 27 October 2026.

Introduction

This policy explains which personal data we process when you visit sightwick.com, contact us, start a trial or use your Sightwick account, why we do so, and what your rights are.

Personal data

We process:

• Contact details you give us when you send a form, book a call or email us: your name, email address, phone number, website domain and message.
• Account details: your email address and password, or your Google or Apple account ID if you sign in with them.
• Payment details: your name, billing address, VAT number and payment status.
• Data from the ad accounts you connect, see Google API Services User Data Policy.
• Technical data: your IP address, browser and the pages you visit, and unless you say no, a visit ID.

Most of this comes from you; the rest from our payment provider, your sign-in provider and the ad platforms you connect. You need to give your account details to use Sightwick; without them we cannot create an account.

Visitors of our customers' websites. When a customer uses Sightwick on their own website, the customer is responsible for their visitors' data and we process it only on their behalf, under the data processing agreement in our Terms. With the visitor's consent, or on our customer's instruction while the visitor has not answered, this can include the name, company, email address and phone number they give on that website, also in a form left half-filled; we keep these encrypted for 180 days after they were last given, and the customer sees them on the Leads screen. If you visited one of our customers' websites, please contact that business; we help them answer you.

Purposes and legal bases

For each purpose, the legal basis:

• Answer your form, call or email: steps you ask for before a contract.
• Provide your trial, account and subscription, take payment and send service emails: contract.
• Keep invoices and accounting records: legal obligation.
• Keep the website and service secure and working, with server logs: legitimate interest (security).
• Count visits after a no, without storing anything in your browser: legitimate interest (knowing how the site is used).
• Prevent abuse of free trials: legitimate interest (one free trial per card, bank account and domain).
• Give your visit an ID and measure our own ads: consent, or our legitimate interest while you have not answered the banner.

We do not make decisions about you based only on automated processing that have legal or similarly significant effects.

Sharing

We do not sell personal data. We share it only with:

• service providers that run our website and service, such as hosting, payments, email and scheduling, under a data processing agreement where they act on our behalf;
• Google, for our own ads, only with your consent. Meta, for our own ads, with your consent or while you have not answered the banner; after a no only a submitted form, hashed and without an identifier (see Cookies and measurement);
• public authorities, only when the law requires it, after we have checked the request and no more than needed.

Some recipients are in the United States; that transfer relies on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. On request we send you the names of all recipients and a copy of the safeguards.

Cookies and measurement

When you first visit, a banner asks what you allow. Until you choose, the ad details in the address you arrived on (such as fbclid) are added to the address of the next page you open on this site. If you say no, we count your visit without storing anything in your browser. While you have not answered, we measure your visit in full. Unless you say no, tt_herkomst remembers which ad or link brought you, and we share conversions, such as starting a trial or booking a call, with Google and Meta to measure our own ads. Google and Meta are jointly responsible with us for collecting and sending this data; what they do with it afterwards is covered by their own privacy policies. Our Google tag runs on every page until you say no: with your yes, Google sets cookies for ads and audiences; while you have not answered, it sets no cookie and only tells Google which page you opened, the page or site you came from, and whether a Google ad brought you. You can withdraw your consent at any time in Cookie settings at the bottom of every page.

Apart from tt_herkomst, your Sightwick dashboard only uses functional cookies, such as the one that keeps you signed in.

Retention

• Forms and requests that do not lead to a trial or contract: 12 months.
• Your account and its data: during your trial or subscription, and afterwards until you ask us to delete it. If a trial ends without a subscription, we delete your data 12 months later.
• Invoices and accounting records: 7 years, as Dutch tax law requires.
• Server logs: 30 days.
• Visit and measurement data: 25 months.
• Data from a connected ad account: as long as the connection exists.
• A code of the card or bank account used for a trial (not the number itself): also after you ask us to delete your data, for two years after the trial.
• The domain of a trial: also after you ask us to delete your data, with no end date, so that each domain has one free trial.

Security

We protect personal data with encrypted connections, encrypted access tokens and passwords stored only as hashes, and with strict access: only people who need the data for their work can reach it, each with a personal login. If a data breach affects you, we tell you and the Dutch Data Protection Authority as the law requires.

Your rights

You have the right to access, correct or delete your data, to restrict its use, to receive it in a usable format and to object. Email info@sightwick.com and we answer within one month. To end a Google or Meta connection, click Disconnect on the Google Ads or Meta screen; to have your data deleted, email us.

You can object at any time to processing based on our legitimate interest.

If you gave consent, you can withdraw it at any time, as easily as you gave it, in Cookie settings. You can also complain to the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

Google API Services User Data Policy

When you connect a Google Ads or Meta ad account, we read the list of ad accounts you can access and, for the account you choose, its campaigns, ads, spend and conversion actions. We use these details only to show them in your dashboard and summary emails, to create a conversion action when you ask, and to send your conversions back to that account. We store them in the EU, with the access token encrypted, for as long as the connection exists. People at Sightwick see them only when you ask us for help, for security, or when the law requires it. We do not sell them, use them for our own advertising or use them to train AI models. We do not transfer or disclose them to any third party for purposes other than the ones on this page; summary emails with Google Ads figures are sent through Google's own email service. You can end the connection at any time with Disconnect on the Google Ads or Meta screen or at myaccount.google.com/permissions.

If you sign in with Google, we receive your name, email address and account ID. Data from signing in with Google or Apple never goes to an advertising platform.

Sightwick's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Changes

We may change this policy when our service or the law changes. The date at the top shows the current version.

Contact

Sightwick is a trade name of Fumegrab, registered with the Dutch Chamber of Commerce (KvK) under number 88503402, Amstelhof 77, 2262 EG Leidschendam, the Netherlands. Email: info@sightwick.com.