Privacy Notice

01

Who controls your data

Sansa Group AB, acting through its Sansa Vision subdivision, operates HoloSignal and is the controller for account, website, billing, product analytics, and support data. For evidence a customer directs HoloSignal to acquire or upload, Sansa Group AB generally acts as a processor under the customer’s instructions.

Privacy requests can be submitted through the workspace or to privacy@holosignal.xyz. General service requests can be submitted through the support page or to support@holosignal.xyz.

02

Data we process

Account and identity data: name, work email, organization, role, session, device, authentication and security events.

Customer content: goals, source URLs, acquired snapshots, governed collections, requests, outputs, actions, approvals, and run receipts.

Service data: activity, performance, quality, usage, IP-derived security signals, logs, and error metadata.

Support and commercial data: messages, trace shares, plan, invoice references, and consent choices.

03

Purposes and legal bases

We process account and service data to perform our contract, protect the service and customers, comply with law, and pursue legitimate interests in reliability and abuse prevention. Optional analytics and marketing processing depends on consent where required.

We do not sell personal information and do not use customer content to train general-purpose systems by default.

04

Providers and transfers

HoloSignal uses vetted service providers only where necessary to operate, secure, communicate about, and support the service. The categories of processing and their purposes are listed in the subprocessor notice.

Where data crosses jurisdictions, we use applicable transfer mechanisms and supplementary controls. Enterprise region controls are subject to the selected service configuration.

05

Retention and deletion

Retention depends on plan and policy. Typical defaults are 90 days for raw snapshots, 180 days for run traces, and longer for compact audit records when needed for security or legal obligations.

Workspace administrators can export, correct, or schedule deletion. Deletion events are audited; backups and immutable security records expire on defined schedules.

06

Your choices and rights

Depending on location, you may request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or an appeal. California residents can also request categories, sources, purposes, recipients, and specific pieces, and may opt out of sale/sharing or limit use of sensitive personal information where applicable.

We verify requests proportionately and respond within the legally required period. Authorized agents may submit requests with proof of authority.