Privacy Policy
Last updated: 2026-08-24. sipi.bot collects the minimum data needed to evaluate transactions, review pilot applications, and operate the service.
What we process
When your agent submits a transaction for evaluation, we process the transaction metadata you send (amount, merchant, category, timestamps) to apply your rules and write an audit record. We do not store card numbers or payment credentials — sipi.bot is a decision layer, not a payment processor.
Account data
If you subscribe, we store your email and billing status (via Stripe). Stripe processes payment details under its own privacy policy; we never see full card data.
Pilot applications
If you apply for the paid implementation pilot, we store the company, work email, website, stack, spend range, and risk description you submit. Do not send credentials, API keys, bills, customer data, or payment details. We use Resend to deliver an internal application notification to the Sipiteno sales inbox.
Analytics
With your explicit permission, we load PostHog (EU region) for anonymous product analytics. Analytics stay off until you choose Allow analytics. Autocapture and session recording are disabled, anonymous visitor profiles are not created, and selecting No thanks does not affect the product. You can reopen the choice at any time using the Privacy choices button.
We run no advertising or retargeting pixels of any kind — no Meta, Reddit, LinkedIn, TikTok or Google Ads tags. You can block all of the above with any standard tracker blocker without affecting how the site works.
Data retention & deletion
Audit logs are retained for your account's configured window. Pilot applications are retained while we evaluate or discuss the engagement and then for normal business recordkeeping. To request export or deletion of your data, email sales@sipiteno.com.
Self-hosting
If you self-host the open-source core, your transaction data never leaves your infrastructure and this policy does not apply to that deployment.