Privacy policy

Who we are

Sightpane is a client portal and agency workspace operated by Wedge Studio, a design and development studio in Los Angeles, California. In this policy, we, us and our mean Wedge Studio.

This policy covers sightpane.com, the app at app.sightpane.com and the emails it sends. Questions go to david@wedgestudio.dev.

Agencies and their clients

Sightpane is used by agencies, including Wedge Studio itself, and by the clients and team members they invite. An agency decides what goes into its workspace and who can see it.

For the project data an agency and its clients put into Sightpane, we act as a service provider to that agency. We process it to run Sightpane for them and for no other purpose. If you are a client of an agency, the agency is usually the right first contact for questions about your project data, and we help them answer.

What we collect

We collect only what Sightpane needs to work.

• Account details, such as your name, email address, job title, phone number if you add one, and your company. Passwords are stored only as a salted hash, never in plain text.
• Project data, such as projects, phases, updates, approvals, change requests, comments on previews, messages, files and links you share, and invoices.
• Questions you ask Sightpane AI and the answers it gives, kept as the project's AI history.
• Email records, such as which invites and notices we sent and whether they were delivered.
• Technical data, such as IP address, browser, the pages and requests made and their times, kept in server logs for security and troubleshooting.
• What you send us directly, such as a demo request or an email.

Invoices in Sightpane are records of what is owed. Sightpane does not process card payments and does not store card numbers. If an invoice links to an outside payment page, that provider handles your payment under its own policy.

How we use it

• To run Sightpane, sign you in, show each person the projects that are theirs and keep everyone up to date.
• To answer questions with Sightpane AI, using the project content you can already see.
• To send the emails you expect, such as invites, password links and project notices. You can change your email preferences in Settings.
• To keep Sightpane secure, prevent abuse and fix problems.
• To answer you when you contact us, and to meet our legal obligations.

We do not sell personal information, we do not share it for cross context behavioral advertising, and we do not use your project data to train AI models.

Sightpane AI

Sightpane AI is built on Claude, made by Anthropic. When you ask it something, your question and the parts of the project it needs to answer are sent to Anthropic to generate the reply. Under Anthropic's commercial terms, that content is not used to train its models.

AI answers can be wrong. Sightpane shows the sources each answer used, so you can check them before you act on it. Before the AI changes anything, it asks you to confirm.

Who we share it with

We share personal information only as needed to run Sightpane, with these service providers, each bound to use it only for the work they do for us.

• Anthropic, for Sightpane AI.
• Resend, to send email.
• The infrastructure providers that host the app, its database and its files.

Inside Sightpane, people see only what their role allows. Agency team members see the agency's projects, and clients see the projects they belong to. We may also disclose information when the law requires it, to protect the safety and rights of people or of Sightpane, or as part of a merger or sale of the business, in which case this policy continues to apply to it.

Cookies

Sightpane uses one cookie, a session cookie that keeps you signed in. It is HttpOnly, so scripts on the page cannot read it, and it ends when you sign out. We use no advertising or tracking cookies.

The website stores your light or dark theme choice in your browser's local storage. It never leaves your device.

How long we keep it

We keep account and project data while the agency's workspace is active. When an agency closes its workspace, or asks us to delete data, we delete it, apart from anything the law requires us to keep. Copies in backups are removed as those backups expire. Server logs are kept only as long as they are useful for security and troubleshooting.

Export, correction and deletion

You can ask for a copy of your data in a common format, ask us to correct it or ask us to delete it. Email david@wedgestudio.dev from the address on your account. Agencies can ask for an export of their whole workspace at any time, including before they leave.

We confirm your identity before acting on a request, and we answer within 45 days. If the data belongs to an agency's workspace, we may involve that agency, since it decides what its workspace holds.

California privacy rights

If you live in California, the California Consumer Privacy Act, as amended by the CPRA, gives you these rights.

• To know what personal information we collect, use and disclose, and to get a copy of it.
• To delete it, and to correct it if it is wrong.
• To opt out of its sale or sharing. We do not sell or share personal information, so there is nothing to opt out of.
• To limit the use of sensitive personal information. We use it only to run Sightpane, such as your password to sign you in.
• To not be treated differently for using any of these rights.

In the past 12 months we have collected identifiers (name, email address, IP address), professional information (job title, company), commercial information (invoices), internet activity (server logs) and the content of messages and files, from you, from your agency and from your device, for the purposes described above. We disclosed these only to the service providers listed above.

To use a right, email david@wedgestudio.dev. You can also have an authorized agent ask for you, with your signed permission.

Security

Sightpane is served only over HTTPS. Passwords are hashed, sessions are random tokens, and each AI agent connected through MCP gets its own limited token with every call logged. Access to production systems is limited to the people who run Sightpane. No system is perfectly secure, and if a breach affects your data, we tell you and the agency as the law requires.

Children

Sightpane is a tool for businesses and is not meant for anyone under 16. We do not knowingly collect information from children.

Where data is stored

Sightpane is run from the United States, and your data is stored and processed there.

Changes to this policy

When we change this policy, we update it here and change the date at the top. If a change is significant, we tell agencies by email before it takes effect.

Contact

Wedge Studio, Los Angeles, California. Email david@wedgestudio.dev about anything in this policy.