Skip to main content
    SpectraEYE

    Privacy Policy

    Last updated: 24.06.2026

    Welcome to SpectraEYE ("we," "us," or "our"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

    # SpectraEYE Privacy Policy #

    Last updated: PLACEHOLDER_effective_date

    This Privacy Policy explains how PLACEHOLDER_company_name ("SpectraEYE", "we", "us", or "our") collects, uses, stores, shares, and protects personal data when visitors use the SpectraEYE website, public pages, newsletter, campaign emails, contact forms, and live support chat.

    This document is an implementation-ready draft and should receive final legal review before production publication.

    ## 1. Controller details

    Data controller: PLACEHOLDER_company_name

    Registration number: PLACEHOLDER_registration_number

    Address: PLACEHOLDER_address

    Country: PLACEHOLDER_country

    Representative: PLACEHOLDER_representative

    Privacy contact: privacy@spectraeye.app

    General contact: contact@spectraeye.app

    We have not appointed a formal Data Protection Officer unless this page is later updated to state otherwise. Privacy and data subject requests should be sent to privacy@spectraeye.app.

    ## 2. Scope

    This policy applies to:

    - the SpectraEYE website and public frontend;

    - product, documentation, news, updates, newsletter, contact, and support pages;

    - live support chat and attachments submitted through chat;

    - newsletter subscriptions and email campaigns;

    - internal analytics used to improve the application;

    - administrative audit records required to secure and operate the service.

    This policy does not apply to third-party websites or services that are not controlled by SpectraEYE.

    ## 3. Personal data we collect

    Depending on how you use SpectraEYE, we may process:

    - identity and contact data, such as name, company, email address, and phone number if you provide them;

    - newsletter data, such as email address, subscription preferences, unsubscribe status, campaign interactions where applicable, and SendGrid delivery metadata;

    - support chat data, such as email identifier, messages, attachments, timestamps, conversation status, and browser session identifiers;

    - contact form data, such as name, email, phone, company, subject, message, submission timestamp, and related support replies;

    - technical data, such as IP address, hashed IP display in admin interfaces, user-agent summary, device/browser information, session identifiers, consent records, page path, and timestamps;

    - internal analytics data, such as page views, click events, scroll depth, referrer, visitor/session identifiers, top interactions, SEO and speed metrics;

    - security and admin audit data, such as login/session events, permission-denied events, administrative actions, and consent audit events.

    We do not intentionally collect special categories of personal data. Please do not submit sensitive personal data through contact forms, chat, or attachments unless strictly necessary.

    ## 4. Cookie and consent categories

    SpectraEYE uses a consent manager with the following categories:

    - Strictly Necessary: required for security, session handling, consent proof, route delivery, and core site operation. This category is always active.

    - Functional: optional preferences that improve the user experience, such as UI choices and non-essential settings.

    - Analytics: optional internal analytics, including page views, click tracking, scroll depth, top interactions, SEO analytics, and speed analytics.

    - Marketing and Communications: optional newsletter, email campaign attribution, and communication preference processing.

    - Support Chat: optional live support chat session continuity, email identifier, messages, and attachments.

    Non-essential categories are disabled by default. You may accept all, reject all, customize categories, save preferences, or withdraw optional consent from the Cookie Settings link in the footer.

    ## 5. Legal bases

    We rely on the following legal bases where applicable:

    - Consent: for optional cookies/storage, analytics, marketing communications, newsletter preferences, and other optional processing.

    - Contract or pre-contractual steps: when processing is necessary to respond to your request or provide a requested service.

    - Legitimate interests: for security, fraud prevention, service diagnostics, internal operational logs, and improvement of essential service reliability, where those interests are not overridden by your rights.

    - Legal obligation: where records must be retained or disclosed to comply with applicable law.

    You may withdraw consent at any time. Withdrawal does not affect processing that occurred before withdrawal.

    ## 6. How we use personal data

    We use personal data to:

    - operate, secure, and maintain SpectraEYE;

    - respond to contact and support requests;

    - provide live support chat and conversation continuity;

    - send newsletters, campaign emails, service communications, and unsubscribe confirmations;

    - measure internal product usage and improve performance when analytics consent is granted;

    - maintain consent audit records required to demonstrate privacy choices;

    - protect against misuse, abuse, security incidents, and unauthorized access;

    - comply with legal and regulatory obligations.

    ## 7. SendGrid email processing

    SpectraEYE uses SendGrid as an email processing provider for outbound newsletter/campaign emails and inbound email parse functionality. SendGrid may process email addresses, message headers, delivery status, bounce events, replies, and related email metadata for the purpose of sending, receiving, routing, and reporting email communications.

    SendGrid acts as a processor or service provider for these email operations. International transfers may occur depending on SendGrid infrastructure and applicable safeguards.

    ## 8. Retention

    We retain personal data only for as long as reasonably necessary for the purposes described in this policy, unless a longer period is required by law.

    Current intended retention periods:

    - consent audit records: retained as long as needed to demonstrate consent and compliance;

    - support chat messages and attachments: up to 1 year;

    - contact messages and support replies: up to 1 year unless needed longer for dispute, security, or legal reasons;

    - newsletter subscription records: retained until unsubscribe plus a suppression record needed to honor opt-out;

    - internal analytics: retained according to operational reporting needs and minimized where possible;

    - admin/security audit logs: retained according to operational and security needs.

    If exact retention periods change, this policy should be updated.

    ## 9. Sharing and processors

    We do not sell personal data. We do not share personal data for cross-context behavioral advertising unless this policy is later updated and valid consent is obtained where required.

    We may share personal data with:

    - hosting, infrastructure, database, and storage providers;

    - SendGrid for email delivery, campaign processing, and inbound parse;

    - security, monitoring, and backup providers where applicable;

    - professional advisors where necessary;

    - public authorities where legally required.

    Processors are expected to process personal data only under appropriate instructions and safeguards.

    ## 10. International transfers

    Because SpectraEYE may be accessible globally and may use providers with international infrastructure, personal data may be processed outside your country. Where GDPR or similar laws apply, we rely on appropriate safeguards such as adequacy decisions, standard contractual clauses, processor terms, or other lawful transfer mechanisms.

    ## 11. Your rights

    Depending on your location and applicable law, you may have rights to:

    - access your personal data;

    - correct inaccurate data;

    - delete personal data;

    - restrict processing;

    - object to processing;

    - withdraw consent;

    - request data portability;

    - lodge a complaint with a supervisory authority.

    EU/EEA and UK users have GDPR-style rights where applicable. International users may also contact us and we will handle requests in a privacy-respecting manner where reasonably possible.

    California and other US privacy rights may apply only where legal thresholds are met. SpectraEYE does not sell personal data and does not share personal data for cross-context behavioral advertising, unless this policy is later updated.

    ## 12. Security

    We use technical and organizational measures designed to protect personal data, including access controls, authentication, secure cookies for admin sessions, audit logging, least-privilege access, input validation, backup controls, and operational monitoring. No system is perfectly secure, but we work to reduce risk and respond to incidents appropriately.

    ## 13. Children

    SpectraEYE is not intended for children. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact privacy@spectraeye.app.

    ## 14. Changes

    We may update this policy when our processing, legal obligations, or product features change. If changes materially affect consent categories, we may request renewed consent.

    ## 15. Contact

    Privacy requests should be sent to privacy@spectraeye.app. General inquiries may be sent to contact@spectraeye.app.

    ## 16. Reference materials

    This Privacy Policy was prepared with reference to the following public legal, regulatory, and processor materials. These references support drafting and review, but they are not legal advice and do not replace final legal review before production publication.

    - Regulation (EU) 2016/679 (General Data Protection Regulation), official EUR-Lex text: https://eur-lex.europa.eu/eli/reg/2016/679/oj

    - Directive 2002/58/EC (ePrivacy Directive), official EUR-Lex text: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32002L0058

    - European Data Protection Board, Guidelines 05/2020 on consent under Regulation 2016/679: https://www.edpb.europa.eu/sites/default/files/files/file1/edpb_guidelines_202005_consent_en.pdf

    - European Commission, data protection rules for business and organisations: https://commission.europa.eu/law/law-topic/data-protection/rules-business-and-organisations_en

    - European Commission, Standard Contractual Clauses for international data transfers: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en

    - Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP): https://www.dataprotection.ro/

    - UK Information Commissioner's Office, UK GDPR guidance and resources: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/

    - California Department of Justice, CCPA information: https://oag.ca.gov/privacy/ccpa

    - Twilio Data Protection Addendum, relevant to SendGrid email processing: https://www.twilio.com/en-us/legal/data-protection-addendum

    - Twilio Website Privacy Notice: https://www.twilio.com/en-us/legal/privacy