Privacy Policy
Effective date: May 15, 2024
This statement explains how Sandpipr, Inc. ("Sandpipr," "we," "our") collects and processes personal data when you visit sandpipr.io, interact with our support team, or purchase an Enterprise licence. Our services are currently intended for use only by residents of the United States.
Scope: The policy applies only to website visitors, customers, partners, and prospective customers. It does not apply to data that flow through the Sandpipr extraction engine, because pipelines run on infrastructure you control and we have no technical access to that data.
1. Information we collect
| Category | Examples | Source |
|---|---|---|
| Contact data | name, job title, company, email | forms, support tickets |
| Account & billing (Enterprise only) | licence ID, subscription tier, invoicing address | checkout flow |
| Usage analytics | browser type, pages visited, referral URL, coarse location | first-party cookies + privacy-friendly analytics |
| Diagnostic telemetry (opt-in) | CPU/RAM metrics, feature flags | Sandpipr binary, when configured to send to Sandpipr |
2. How & why we use data
- Perform a contract (e.g., issue licence keys, deliver updates)
- Legitimate interests (e.g., secure the website, prevent fraud, improve docs)
- Consent (marketing emails—unsubscribe any time)
3. Sharing with third parties
We share personal data only with service providers under NDA who help us run our business (payment processor, email platform, cloud hosting). We never sell personal information.
4. Security
Data in transit is protected with TLS 1.2+. Data at rest is encrypted. Access is restricted by role-based controls and MFA.
5. Retention
We keep contact and billing records for as long as you have an active relationship with us plus seven (7) years for tax/audit purposes, then securely delete or anonymise. Web analytics logs are deleted after 14 months.
6. Your rights
Depending on your state of residence, you may have certain rights under applicable state privacy laws:
- California residents (CCPA/CPRA): right to know, delete, correct, and opt-out of the "sale/share" of personal information.
- Virginia residents (VCDPA): right to access, delete, correct, and opt-out of processing for targeted advertising.
- Other states: Additional rights may apply based on your location.
To exercise any right, email privacy@sandpipr.io. We respond within 30 days.
7. Geographic Restrictions
We are headquartered in the United States. Our services are currently intended only for residents of the United States. We do not actively market to, sell to, or intentionally collect or process personal information from individuals outside the United States. If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States.
8. Children
Sandpipr is not directed to children under 16 and we do not knowingly collect their data.
9. Changes
Material revisions will be posted here and, where appropriate, emailed to account holders at least 30 days before they take effect.
10. Contact
Sandpipr LLC
8520 Allison Pointe Blvd Ste 223 PMB 173870
Indianapolis IN 46250-4299
Email: privacy@sandpipr.io