Privacy Policy

We may collect the following categories of personal information: • Identifiers: Name, email address, phone number, mailing address, and account credentials. • Commercial Information: Records of services purchased, project history, and billing details. • Internet/Network Activity: IP address, browser type, operating system, referring URLs, pages visited, and interaction data. • Device Information: Device model, unique device identifiers, and mobile network information. • Geolocation Data: Approximate location based on IP address. • Professional Information: Job title, company name, and business contact details provided during engagement. • Inferences: Preferences and characteristics derived from the above categories to improve our services.

We process your personal data under the following legal bases as defined by GDPR Article 6: • Consent: Where you have given clear consent for us to process your personal data for a specific purpose. • Contractual Necessity: Where processing is necessary for the performance of a contract with you or to take pre-contractual steps at your request. • Legal Obligation: Where processing is necessary to comply with a legal obligation to which we are subject. • Legitimate Interests: Where processing is necessary for our legitimate interests or the legitimate interests of a third party, provided your rights and freedoms do not override those interests. Our legitimate interests include fraud prevention, network and information security, and direct marketing.

We use the information we collect for the following purposes: • To provide, operate, and maintain our services and fulfill contractual obligations. • To communicate with you, including sending project updates, technical support responses, and service notifications. • To process transactions and send related billing information. • To improve and personalize your experience with our products and services. • To conduct analytics and research to enhance our offerings. • To detect, prevent, and address security issues, fraud, and technical problems. • To comply with applicable laws, regulations, and legal processes.

We do not sell your personal information. We may share your information in the following circumstances: • Service Providers: With trusted third-party vendors who assist us in operating our business (e.g., cloud hosting, payment processing, analytics), bound by contractual obligations to protect your data. • Legal Compliance: When required by law, regulation, subpoena, court order, or governmental request. • Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, where your information may be transferred as a business asset. • With Your Consent: When you have given explicit consent to share your information for a specific purpose. • Aggregated/De-identified Data: We may share aggregated or de-identified information that cannot reasonably identify you.

Your personal data may be transferred to and processed in the United States or other countries where our service providers operate. When we transfer data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including: • Standard Contractual Clauses (SCCs) approved by the European Commission. • Data processing agreements with all third-party processors. • Adequacy decisions where applicable. By using our services, you acknowledge that your data may be processed in the United States, which may have different data protection standards than your country of residence.

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including: • Active account data is retained for the duration of your business relationship with us. • Project records and contractual data are retained for 7 years after project completion for legal and tax compliance. • Marketing data is retained until you withdraw consent or opt out. • Log and analytics data is retained for up to 24 months. When retention is no longer necessary, we securely delete or anonymize your data.

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the GDPR: • Right of Access (Art. 15): Request a copy of the personal data we hold about you. • Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data. • Right to Erasure (Art. 17): Request deletion of your personal data ("right to be forgotten"). • Right to Restriction (Art. 18): Request restriction of processing of your data. • Right to Data Portability (Art. 20): Receive your data in a structured, commonly used, machine-readable format. • Right to Object (Art. 21): Object to processing based on legitimate interests or direct marketing. • Right Related to Automated Decision-Making (Art. 22): Not be subject to decisions based solely on automated processing. To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA): • Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months. • Right to Delete: You may request that we delete your personal information, subject to certain exceptions. • Right to Opt-Out: You have the right to opt out of the sale of your personal information. We do not sell personal information. • Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights. To submit a CCPA request, please email us at [email protected] or use our data deletion request page. We will verify your identity before processing your request.

Our website uses cookies and similar tracking technologies to enhance your browsing experience: • Essential Cookies: Required for the website to function properly. Cannot be disabled. • Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics). • Marketing Cookies: Used to deliver relevant advertisements and track campaign performance. You can manage your cookie preferences through your browser settings or our cookie consent banner. Disabling certain cookies may affect the functionality of our website. For EU users, we obtain explicit consent before placing non-essential cookies, in compliance with GDPR.

Our services are not directed to individuals under the age of 16 (or 13 in the United States under COPPA). We do not knowingly collect personal information from children. If we discover that we have inadvertently collected information from a child, we will promptly delete it. If you believe a child has provided us with personal information, please contact us at [email protected].

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will: • Update the "Last Updated" date at the top of this policy. • Notify you via email or a prominent notice on our website before the changes take effect. • Where required by law, obtain your consent to the updated policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: • Email: [email protected] • Address: 1600 Emerson St, Denver, CO 80218, US • Website: siininc.com For GDPR-related inquiries, you also have the right to lodge a complaint with your local data protection supervisory authority.