Privacy Policy

Last updated: June 8, 2026

Purpose

The purpose of this Privacy Policy is to establish a comprehensive framework for protecting the privacy of personal information collected, processed, and stored by Sibli. You may provide Personal Data through our Website and Platform.

This Policy ensures that Sibli respects individual privacy rights, and maintains the trust of customers, employees, and other data subjects through compliance with applicable privacy laws and regulations, including SOC 2 requirements for confidentiality and privacy.

Scope

This Policy applies to all employees, contractors, consultants, and third-party vendors of Sibli who handle personal information.

This Policy applies only to the processing of Personal Data by Sibli and does not address the privacy practices of other parties for which Sibli is not responsible.

We do not knowingly process or request Personal Data from persons under the age of 18. Use of the Sibli Platform and the submission of data by anyone under the age of 18 is prohibited. Sibli will delete all Personal Data about which we learn to have been provided by a person under the age of 18 without the consent of a parent or legal guardian.

Roles and Responsibilities

Depending on the context in which Personal Data is processed, Sibli may act as either a data controller or a data processor.

Sibli as a Processor (Service Provider)

Sibli acts as a data processor when processing Personal Data on behalf of customers in connection with the use of the Platform.

In these cases:

The customer remains the data controller.
Sibli processes data solely under customer instructions.
Processing is governed by contractual agreements.

Sibli does not use customer-controlled Personal Data for independent purposes.

Sibli as a Controller

Sibli acts as a data controller when processing Personal Data related to:

Website visitors.
Marketing and communications.
Account administration and billing.
Business operations.

In these cases, Sibli determines the purposes and means of processing.

Platform Users

Personal Data submitted by authorized users of customer environments is processed in accordance with customer configuration, contractual agreements, and applicable law.

What data do we process?

Personal Data

We process Personal Data necessary to provide and operate the Platform and Website. Depending on how you interact with our services, this may include:

Account and contact information (such as name, email address, organization).
User-submitted content and inputs.
Communications and support requests.
Billing and contractual information.

We do not intentionally collect Personal Data beyond what is necessary to deliver our services.

Technical Data

We automatically collect certain technical and usage information when you interact with the Platform or Website. This may include:

Device and browser information.
IP address and network data.
Log data and timestamps.
Feature usage and interaction metrics.

This information is used for security, performance monitoring, analytics, and service improvement purposes. Where such data can reasonably identify an individual, it is treated as Personal Data in accordance with applicable law.

Cookies and Tracking Data

Sibli uses cookies and similar technologies to ensure the proper functioning of the Website and Platform, enhance user experience, and provide Sibli with analytical insights into how our services are utilized.

These technologies may collect information such as browser type, device information, pages visited, and interactions with the Platform. This information is typically collected in an aggregated or de-identified form and does not reasonably identify individual users.

Cookies may be used for purposes including:

Maintaining platform functionality and security.
Remembering user preferences.
Measuring and improving service performance.
Understanding feature usage and engagement.

Users may control or disable cookies through their browser settings. Please note that disabling certain cookies may impact the functionality of the Platform.

Processing Purposes

We process your Personal Data for the purpose of:

Performance of the contract concluded with you based on your decision to use the Platform

This purpose includes the following processing activities:

Informing about updates and new functions to our services.
Notification of updates to our Terms and Conditions and this Policy.
Answering your queries about our services.
Resolving any problems and disputes related to the contract between us.

Training our algorithmic models

The Platform utilizes artificial intelligence technologies, including third-party large language models, to deliver its functionality. Our agreements with these third-party providers prohibit them from using Personal Data submitted to the Platform to train or improve their models.

We do not use Personal Data submitted to the Platform to train or retrain AI models for generalized use. Any training or fine-tuning Sibli performs using client data is conducted solely for the benefit of that individual client; the resulting model improvements are not shared across client deployments and are not incorporated into our general product.

Improving our services

For this purpose, we may collect pseudonymised information about how you use the Platform, such as your clicks, the features you use, the time you spend on each page, and other analytical data.

Marketing

We may offer services to you via email if you have agreed to receive newsletters on our Website, thereby giving us your consent to the processing of your e-mail address for marketing purposes.

In this case, we process your e-mail address on a legal basis, which is your consent in accordance with relevant privacy frameworks.

Third Parties

Your Personal Data is primarily processed by us. We do not share your Personal Data with any recipients unless one of the following circumstances occurs:

It is necessary in order for us to fulfill our obligations to you.
In the event that our subcontractors with whom we work to operate our Platform need access to your Personal Data, we have taken appropriate contractual and organizational measures to ensure that your Personal Data is processed in accordance with all applicable laws and regulations.

Sibli engages third-party service providers subject to contractual and security obligations appropriate to the nature of the services provided. It is necessary for legal reasons

We may share your Personal Data with recipients outside of the Company if we believe in good faith that specific access to your Personal Data and the corresponding use is proportional and necessary to (i) comply with all applicable laws; (ii) detecting, preventing and resolving fraud and security or technical problems; and/or (iii) protect the interests, property or safety of the Company, our users or the public, in accordance with the law. If possible, we will inform you of such processing.

International Data Transfers

Sibli may process and store Personal Data in jurisdictions other than the country in which the data was originally collected. Where Personal Data is transferred internationally, Sibli implements reasonable contractual, technical, and organizational safeguards designed to ensure that Personal Data remains protected in accordance with applicable privacy and data protection requirements. These safeguards may include data protection agreements, confidentiality obligations, and security controls appropriate to the nature of the data processed. For additional information regarding international data processing practices, you may contact us at [email protected]. If Sibli participates in a merger, acquisition, or other corporate reorganization, Personal Data may be transferred as part of that transaction, subject to applicable protections.

Data Security

We take all proportional and appropriate security measures to protect us and our customers from unauthorized access or unauthorized alteration, disclosure, or destruction of Personal Data. Measures include, where appropriate, encryption, firewalls, secure devices, and access rights systems.

We maintain reasonable administrative, technical, and organizational safeguards designed to protect Personal Data. Security and privacy practices are periodically reviewed (at least annually) and updated.

Should a data breach occur despite security measures that are likely to adversely affect your privacy, we will notify you as soon as reasonably possible.

Privacy incidents and data breaches are handled according to established procedures:

Immediate containment and assessment of privacy incidents.
Notification to supervisory authorities within required timeframes.
Communication to affected individuals when required.
Documentation of incident response and remedial actions.
Post-incident review and process improvement.

Data Subject Rights

Sibli will respect and facilitate data subject rights as required by applicable privacy laws:

Right of access to your Personal Data: You may at any time ask us to confirm whether or not your Personal Data is being processed, and if so, for what purposes, to what extent, to whom it is made available, for how long we will process it, whether you have the right to correct, delete, limit the processing or raise an objection from where we obtained Personal Data from and whether there is automatic decision-making based on the processing of your Personal Data, including possible profiling. You also have the right to obtain a copy of your Personal Data, the first provision being free of charge, and for the next provision, we may require a reasonable payment of administrative costs.
Right to rectification: You may at any time request we correct or add to your Personal Data if it is inaccurate or incomplete.
Right to erasure: You can also request the deletion of your Personal Data from our systems. We will comply with these requests unless we have a legitimate reason not to delete your Personal Data.
Right to restrict processing: You can ask us to restrict certain processing of your Personal Data. If we restrict certain processing of your Personal Data, this may lead to limits on the use of our Platform and Website.
Right to data portability: You have the right to receive your Personal Data from us in a structured, commonly used, and machine-readable format for the purpose of transferring Personal Data to another processor.
How to exercise your rights: You can exercise your rights listed above via e-mail to [email protected]. Depending on your request, we may require verification of your identity.

Can you file a complaint?

If you believe that our processing of your Personal Data is not in accordance with applicable data protection laws, you may file a complaint with your local authorities.