Privacy Notice

1. Scope and privacy roles

This notice applies when you visit Stiguro's website, join a pilot, use a Stiguro workspace, send a service request, or connect a website, domain, business profile, social account, or communications provider.

Stiguro determines why and how account administration, billing, service security, and direct support information is used. For customer-controlled information—such as website content, contact forms, event registrations, group records, and messages—the customer organization decides why the information is collected and Stiguro processes it under the customer's authorized instructions, except where we must use it to secure the service or comply with law. People whose information a customer submits should contact that customer first; Stiguro will help the customer respond.

2. Information we collect and its sources

• Identity and contact information: name, email address, phone number, role, organization, and authentication identifiers.
• Business and website information: locations, domains, hours, public content, events, menus, products, services, and requested changes.
• Messages and support: requests sent through the portal, WhatsApp, SMS, email, feedback forms, and related attachments.
• Connection information: provider account identifiers, approved scopes, authorization status, and encrypted or restricted credentials needed for an authorized connection.
• Billing information: plan, invoice, payment status, and provider references. Stiguro does not intend to store complete payment-card numbers.
• Usage, security, and audit information: sign-ins, device and browser data, IP address, essential browser storage, actions, approvals, releases, errors, and security events.

We may receive this information directly from you; from your organization or its authorized delegates; from connected identity, communications, payment, domain, social, or business-profile providers; from publicly available business sources used for an authorized onboarding review; and from systems used to deliver and protect the service.

3. How we use information

We use information to provide and support the service; authenticate users and enforce role-based access; ingest, preview, approve, publish, verify, and restore authorized changes; manage connected profiles and communications; process billing; prevent abuse; maintain audit evidence; troubleshoot errors; respond to feedback; and comply with law.

Where consent is required, we record the choice and provide a way to withdraw it. Some records may still be used when needed to fulfill a contract, secure the service, maintain required financial or audit evidence, or meet a legal obligation.

4. How we share information

We share information only as needed for authorized service delivery, including with hosting, database, identity, communications, analytics, payment, security, and artificial-intelligence service providers acting for Stiguro. We may also send information to a provider the customer chooses, such as a domain host or business-profile service.

We may disclose information when required by law, to protect people or the service, or as part of a business transaction subject to appropriate safeguards. A customer is responsible for the privacy notice, permissions, and communication consent required for information it collects through a Stiguro-managed website or workflow.

5. Cookies and browser storage

The public marketing pages do not currently use advertising cookies. The Stiguro application and identity provider may use cookies or local browser storage that are necessary for sign-in, security, preferences, and service operation. A connected or embedded provider may set its own cookies under its policy. If Stiguro adds non-essential analytics or marketing technology, we will update this notice and provide any consent or opt-out control required by law.

6. International processing

Stiguro and its providers may process information in the United States and other countries, whose privacy laws may differ from those where you live. When applicable law requires a transfer mechanism or additional safeguard, Stiguro will use one appropriate to the service and provider relationship.

7. Security

Stiguro uses measures designed to protect information, including least-privilege access, role checks, tenant separation, encryption, secret management, logging, monitoring, backups, release approvals, and audit records. No online service can guarantee absolute security. Please report a suspected security issue to [email protected].

8. Retention and deletion

We keep information for the shortest period that supports the authorized purpose. Account and active-service records generally remain while the relationship is active. Change, approval, release, security, support, billing, and audit records may be retained longer when needed for integrity, dispute resolution, fraud prevention, legal obligations, or recovery.

When an account or connection ends, we revoke access and delete or de-identify eligible operational data through the applicable workflow. Copies may remain temporarily in protected backups or with a provider until its normal deletion cycle completes. Legal, financial, security, or litigation-hold requirements may delay deletion of specific records.

See the Data Deletion Instructions for how to submit a request.

9. Your choices and rights

Depending on where you live and your relationship with Stiguro, you may ask to access, correct, export, restrict, object to, or delete personal information, or withdraw a previous consent. We may need to verify your identity and your authority for the organization before acting. You may also unlink provider connections and change communication preferences in the service when those controls are available.

An authorized agent may submit a request when permitted by law, but we will verify the agent's authority and may also verify the person concerned. If we deny a request, you may reply to the decision and ask us to review it. You may also contact the privacy regulator available in your jurisdiction.

10. Children

Stiguro's service is intended for organizations and authorized adult users. It is not directed to children under 13, and Stiguro does not knowingly collect their personal information directly. A customer that uses Stiguro for an event or ministry involving minors is responsible for obtaining required permissions, providing suitable notices, and configuring appropriate access and data collection. Contact us if you believe a child submitted information directly to Stiguro so we can investigate and delete it where required.

11. Changes to this notice

We may update this notice as the service changes. We will publish the new effective date and provide additional notice when a material change requires it.

12. Contact

Questions, rights requests, and appeals can be sent to [email protected]. Include the account email, organization, and enough detail for us to identify the request without sending passwords, access tokens, or payment-card numbers.