Privacy notice

OptiSight Global operates the OptiSight Global platform (“the platform”) and this website. For the data you import into a workspace, your organization decides what is imported and why, andOptiSight Global processes it on your organization’s instructions. For data about visitors to this website and account holders, OptiSight Global decides the purposes described below.

Questions and requests about personal data go to privacy@optisightglobal.com.

Account data. Your email address and, if you set one, a display name, to identify you and your workspace membership. Sign-in is handled by Supabase Auth on our behalf.

Pilot requests. If you submit the pilot form: your name, work email, company, job title and the answers you choose to give about your software estate. We use them to reply to you and to scope a pilot. Nothing else is done with them.

Imported workspace data. The platform analyses files your organization imports: software usage records, entitlements, contracts, subscription registers and a people file. The people file may contain names, usernames, email addresses, departments and locations of your organization’s staff; a subscription register may name the owner of each position. The platform uses them only to attribute usage and positions to people and groups and to compute the analyses your organization asked for. Nothing is pre-populated; a workspace holds only what its members imported.

Operational records. Import history, the decisions and settings your members record, invitations (stored as a hash, never the link itself), and standard server logs held by our hosting providers for operating the service.

What we do not collect. No payment details are collected anywhere on the platform. The website sets no advertising or analytics cookies. The only cookies are the ones that keep you signed in.

Ask OptiSight can send the figures the platform has already computed about your workspace to a third-party language-model provider, chosen by the deployment’s configuration, so that the answer can be phrased in plain language. The provider receives assembled facts, not your database or your files. OptiSight stores no prompt, question or answer. Where the provider offers a no-retention option it is used; otherwise the provider’s own data policy applies. Without a configured provider the feature answers from the deterministic engine alone and nothing leaves the platform.

The platform runs on Vercel (application) and Supabase (database, file storage, authentication). Outbound email is sent through Resend. These providers process data on our behalf under their own terms and security commitments. Data is encrypted in transit and at rest by those providers.

We do not sell personal data and do not share it with anyone for their own purposes. Data is shared only with the providers named above, in order to run the service, and with members of your own workspace, whom your organization chose to invite. We would disclose data if required by law and would tell you where we are permitted to.

Workspace data is kept for as long as the workspace exists. Pilot request records are kept while we are in conversation with you about a pilot and removed on request. Account data is kept while the account exists. Hosting-provider logs follow the providers’ own retention.

Depending on where you are, you may have the right to access, correct, export or delete personal data about you, to object to or restrict its processing, and to complain to a supervisory authority. For data your organization imported, direct the request to your organization, which controls that data; we will assist it. For everything else, write to privacy@optisightglobal.com and we will respond without undue delay.

When this notice changes, the date at the top changes with it. A change that affects how your data is used will be announced to account holders by email before it takes effect.