Sightly Enterprises, Inc.

Effective Date: June 10, 2026

Last Updated: June 10, 2026

1. Introduction

Sightly Enterprises, Inc. (“Sightly,” “we,” “us,” or “our”) provides brand-suitable advertising intelligence and media services. Our core service delivers insights derived from publicly available data. Sightly does not collect, process, or store consumer personal data as part of its advertising intelligence products.

This Privacy Policy explains how we collect, use, share, and protect personal data through our website (sightly.com), the Sightly platform, and our direct business interactions. It applies to all visitors to our website and to our business contacts, clients, and platform users.

For information about how we use cookies and similar technologies, please see our Cookie Policy.

2. Personal Data We Collect

Information You Provide

When you interact with Sightly in a business capacity, we may collect:

• Contact information: name, job title, company name, business email address, and business phone number
• Account information: username and password for Sightly platform access
• Communications: content of emails, support requests, and other correspondence sent to us
• Interactive features: content entered into chatbots, AI-powered tools, and interactive features within the Sightly platform, including support queries submitted through our chatbot and prompts or inputs submitted to AI-assisted services. Where AI-powered features are provided through third-party services, inputs may be processed by those providers under data processing agreements that prohibit use of inputs for model training.
• Billing information: invoicing and payment details associated with your company’s account

Information Collected Automatically

When you visit sightly.com, we automatically collect certain technical data through cookies and similar technologies:

• IP address, browser type and version, operating system, and device identifiers
• Pages visited, time spent on pages, referring URL, and clickstream data
• Cookie identifiers and related data as described in our Cookie Policy

Our website uses cookies across four categories: strictly necessary (11), preferences (1), statistics (4), and marketing (45). Non-essential cookies are placed only with your consent, managed through our Cookiebot consent management platform. Marketing cookies are provided by third-party services including Google Analytics, TikTok, YouTube, LinkedIn, and Marketo. See our Cookie Policy for the full list of cookies, their providers, purposes, and retention periods.

What We Do Not Collect

Sightly does not collect consumer personal data through its advertising intelligence services. We do not collect names, email addresses, browsing histories, purchase histories, location data, or other personal identifiers of individual consumers as part of delivering insights to our clients. All advertising intelligence is derived from aggregated, publicly available data sources.

3. How We Collect Personal Data

We collect personal data through the following means:

• Directly from you: when you create a platform account, request a demo, subscribe to our newsletter, contact us via email, interact with chatbots or AI-powered features, or engage with us at industry events
• Automatically: through cookies and similar technologies when you visit sightly.com, subject to your consent preferences
• From business partners: in limited circumstances, we may receive business contact information through partner referrals or co-marketing activities

4. Purposes and Lawful Basis of Processing

We process personal data for the purposes described below. For individuals in the European Economic Area (EEA) and the United Kingdom (UK), we have identified the lawful basis for each purpose under the General Data Protection Regulation (GDPR).

For California residents: Sightly does not “sell” personal information as defined under the California Consumer Privacy Act (CCPA/CPRA). With respect to “sharing” as defined under the CCPA, Sightly’s website uses marketing cookies provided by third-party advertising platforms (such as Google, TikTok, YouTube, LinkedIn, and Marketo) that may constitute sharing of personal information for cross-context behavioral advertising purposes. This sharing occurs only with your consent as managed through our Cookiebot consent management platform, and you may opt out at any time by adjusting your cookie preferences.

5. Data Sharing and Third-Party Recipients

We share personal data with the following categories of recipients:

Service providers. We engage third-party companies to perform services on our behalf, including cloud hosting, customer relationship management, email marketing (Marketo), website analytics (Google Analytics), chatbot support, and AI service providers for AI-assisted features. These providers process personal data only on our instructions and under data processing agreements that require them to protect your data. AI service providers are contractually prohibited from using inputs for model training.

Advertising and analytics partners. Through cookies on sightly.com, certain data is shared with third-party advertising and analytics services including Google, TikTok, YouTube, LinkedIn, and Marketo. This sharing occurs only with your consent as managed through our Cookiebot consent platform. See our Cookie Policy for the complete list of providers.

Professional advisors. We may share personal data with our legal counsel, accountants, and auditors as needed for professional advice and compliance.

Legal and regulatory authorities. We may disclose personal data when required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Corporate transactions. In the event of a merger, acquisition, reorganization, or sale of assets, personal data may be transferred to the acquiring entity. We will notify affected individuals of any change in ownership or use of their personal data.

Sightly does not sell personal data. Sightly does not share personal data with third parties for their own independent marketing purposes outside of the cookie-based advertising on sightly.com, which is subject to your consent.

6. International Data Transfers

Sightly is based in the United States. If you are located outside the United States, including in the EEA or UK, your personal data will be transferred to and processed in the United States.

For transfers of personal data from the EEA or UK to the United States, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission and the UK Information Commissioner’s Office. Where our third-party service providers participate in the EU-US Data Privacy Framework, transfers to those providers are covered by their certification.

You may request a copy of the safeguards we have in place by contacting us at the address provided in Section 13.

7. Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by law.

• B2B contact and account data: retained for the duration of the business relationship and for up to three years following its conclusion, unless a longer period is required for legal or compliance purposes
• Account credentials: retained while the account is active and deleted within 90 days of account closure
• Website analytics data: retained for 14 months in accordance with our Google Analytics configuration
• Cookie data: retention periods vary by cookie and are detailed in our Cookie Policy
• Communications, support records, and chatbot/AI interactions: retained for up to three years for legal and compliance purposes

When personal data is no longer required, it is securely deleted or anonymized.

8. Your Rights

For Individuals in the EEA and UK (GDPR)

If you are located in the EEA or UK, you have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Rectification: request correction of inaccurate or incomplete personal data
• Erasure: request deletion of your personal data, subject to certain exceptions
• Restriction: request that we limit our processing of your personal data
• Portability: request your personal data in a structured, commonly used, machine-readable format
• Objection: object to processing based on our legitimate interests
• Withdraw consent: withdraw your consent at any time where processing is based on consent

You also have the right to lodge a complaint with a supervisory authority in your country of residence. A list of EEA supervisory authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en. For the UK, you may contact the Information Commissioner’s Office at https://ico.org.uk.

For California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights:

• Right to know: request information about the categories and specific pieces of personal information we have collected, the sources of collection, the purposes of processing, and the categories of third parties with whom we share it
• Right to delete: request deletion of your personal information
• Right to correct: request correction of inaccurate personal information
• Right to opt out of sale or sharing: Sightly does not sell your personal information as defined by the CCPA. To opt out of cookie-based sharing for cross-context behavioral advertising, you may adjust your cookie preferences through the consent banner on our website.
• Right to non-discrimination: we will not discriminate against you for exercising your privacy rights

Sightly does not use or disclose sensitive personal information for purposes other than those permitted under the CCPA.

California residents may designate an authorized agent to submit requests on their behalf. The authorized agent must provide written authorization and we may require identity verification of both the agent and the resident.

Metrics regarding the number of privacy requests received, complied with, and denied will be published annually.

How to Exercise Your Rights

To exercise any of the rights described above, please contact us at:

Email: security@sightly.com

Please include a description of your request and sufficient information for us to verify your identity. We will respond within 30 days for GDPR requests and 45 days for CCPA requests. There is no charge for exercising your rights, except in cases of manifestly unfounded or excessive requests under the GDPR, where a reasonable fee may apply.

9. Security

Sightly implements appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, role-based access controls, regular security assessments, and incident response procedures.

Sightly maintains SOC 2 Type II compliance, which is independently audited on an annual basis. For more information about our security practices, please refer to our Data Protection & Security Reference.

10. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to provide core functionality, remember your preferences, analyze website usage, and serve relevant advertisements.

We use four categories of cookies:

• Strictly necessary (11 cookies): required for the website to function and cannot be disabled
• Preferences (1 cookie): enable the website to remember choices you make
• Statistics (4 cookies): help us understand how visitors interact with our website by collecting information anonymously
• Marketing (45 cookies): used to deliver relevant advertisements and track their effectiveness across websites

Non-essential cookies (preferences, statistics, and marketing) are placed only with your consent. You can manage your cookie preferences at any time through the cookie consent banner on our website or by visiting our Cookie Policy, which provides detailed information about each cookie, its provider, purpose, and retention period.

11. YouTube API Services

Sightly’s products and services use YouTube API Services to retrieve publicly available YouTube content and metadata (such as video, channel, and engagement information) that Sightly analyzes to deliver its advertising intelligence and media services. By using Sightly products or features that incorporate YouTube data, you agree to be bound by the YouTube Terms of Service. Google’s collection and handling of data in connection with YouTube API Services is described in the Google Privacy Policy.

Sightly does not access, collect, or store personal data of YouTube users through YouTube API Services. The data Sightly retrieves is limited to publicly available content and metadata, consistent with Section 2 (“What We Do Not Collect”).

Data retention and deletion. YouTube API data stored by Sightly is refreshed or deleted after no more than 30 days. Aggregated or anonymized insights derived from that data may be retained as permitted by the YouTube API Services Developer Policies.

Revoking access. To the extent any Sightly feature accesses Google user data with your authorization, you may revoke Sightly’s access at any time via the Google security settings page at https://security.google.com/settings/security/permissions.

Questions about Sightly’s use of YouTube API Services may be directed to security@sightly.com.

12. Children’s Privacy

Sightly’s services are directed to businesses and business professionals. We do not knowingly collect personal data from individuals under the age of 16. If we become aware that we have inadvertently collected personal data from a child under 16, we will take steps to delete that data promptly. If you believe we have collected data from a child, please contact us at security@sightly.com.

13. Contact Us

For privacy-related inquiries, including requests to exercise your data subject rights, please contact:

Sightly Enterprises, Inc.
165 Broadway, 23rd Floor
New York, NY 10006

Email: security@sightly.com

EU Representative (Article 27 GDPR)

Instant EU GDPR Representative Ltd.
Adam Brogden
contact@gdprlocal.com
Tel: +353 1 554 9700

Office 2, 12A Lower Main Street
Lucan, Co. Dublin, K78 X5P8
Ireland

UK Representative (Article 27 UK GDPR)

GDPR Local Ltd.
Adam Brogden
contact@gdprlocal.com
Tel: +44 1772 217800

1st Floor Front Suite
27-29 North Street, Brighton
England

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will post the updated policy on this page with a revised effective date. For platform users, material changes may also be communicated via email.

We encourage you to review this Privacy Policy periodically.

15. California-Specific Disclosures

The following table describes the categories of personal information Sightly has collected in the preceding 12 months, as required by the CCPA:

Sightly does not collect the following categories of personal information: characteristics of protected classifications, commercial information, biometric information, geolocation data, sensory data, professional or employment-related information (beyond business contact data provided by you), education information, or inferences drawn from the above to create a consumer profile.

16. Additional Disclosures

If you are a resident of a US state with an applicable privacy law not specifically addressed in this policy, or if you are located in a jurisdiction outside the United States with applicable data protection laws, you may have additional rights regarding your personal data. Please contact us at security@sightly.com to learn more about how we can assist you.

Last Updated: June 10, 2026