Privacy Policy
Last updated 19 September 2026
This policy explains what SheerSight collects, what it deliberately never touches, and how we handle it. SheerSight is operated by Sheer Safe Pvt Ltd ("SheerSight", "we", "us").
1. Scope
This policy covers the SheerSight website (sheersight.io), the console at app.sheersight.io, and the SheerSight service. Your use is also governed by our Terms of Use.
2. What we collect
Request-access form. When you ask for access we collect the name, work email, company and message you submit, and the sources you select. You may optionally add a phone number; if you provide one it is used only to contact you about your request and as an operational or emergency contact, never for marketing. For abuse prevention we also store a salted, one-way hash of your IP address, never the raw address.
Product telemetry. When you are a customer, your dedicated instance replicates detection metadata (alerts, incidents, suppressions and KPIs) into your tenant so you get the console view. Your raw logs and source data stay on your box.
Account & access. Login is handled by Cloudflare Access with multi-factor authentication; we process the email identity you authenticate with to authorize you and keep an audit trail.
3. What we never collect or hold
- Your secrets. API keys, tokens and credentials are envelope-encrypted in your browser to your instance before they leave. We only ever hold opaque ciphertext, and there is no plaintext credential anywhere in our systems.
- Your raw source data. It never leaves your environment except as the minimized metadata described above.
4. How we use information
To operate, secure and improve the service; to respond to your access requests and support enquiries; and to detect and prevent abuse. We do not sell your personal data, and we do not use it for third-party advertising.
5. Legal bases
Where applicable law requires a basis, we rely on your consent (for the request-access form), our legitimate interests (operating and securing the service), and performance of a contract (delivering the service to customers).
6. Sharing and sub-processors
We use a small set of trusted providers to run the service, each processing only what is needed: Cloudflare (hosting, edge and access), Resend (transactional email) and Slack (our internal request notifications). We disclose data if required by law.
7. Retention
Request-access submissions, including any phone number you provide, and their IP hashes are pruned on a fixed retention window. Product telemetry is retention-bound and minimized. We keep account and audit records for as long as needed to provide the service and meet legal obligations.
8. Security
Security is core to how SheerSight is built: dedicated instances, a secret-free control plane, signed commands and a tamper-evident ledger. See our Security page for the full picture.
9. Your rights
Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and you may withdraw consent. To exercise these rights, contact us at the address below.
10. International
We are based in India and handle personal data in accordance with applicable law. Where data is transferred across borders, we take steps to protect it consistent with this policy.
11. Changes
We may update this policy from time to time. The date above reflects the latest version; material changes will be communicated by reasonable means.
12. Contact
Questions or requests about your privacy? Email support@sheersight.io.