Sigar Sigar: integrations with Meta, Google and TikTok
Sigar is the app that connects Sigar ERP, Sigar's business management software, with the Meta, Google and TikTok accounts of each business that uses it, so that its staff can handle their messages, leads, comments and reviews from a single place. On all three platforms the app is called "Sigar"; "Sigar Integraciones" is the name of the SIGARNET service that runs it.
This page explains what the app does on each platform, what data it uses and what for, how long it keeps it and how it is deleted. Today it works with Meta. The integrations with Google Business Profile and TikTok are In preparation: until they are active, the app does not receive any data from those platforms.
Summary
- Only the accounts that each business authorizes are connected, and only with the permissions it grants. Each business only sees its own data.
- We use the data only for the features described here, on behalf of each business.
- We do not sell personal data, we do not use it for advertising, and we do not build profiles of people for advertising or for our own purposes. The only exception is explicit and decided by each business: if it turns on sales reporting to Meta, to measure its own ads, we tell Meta the amount, the currency and the date of the sales that came from those ads, with an identifier that Meta already knows. We never send anyone's name, phone number or email address.
- Some features use artificial intelligence from OpenAI, only in the businesses that turn them on. OpenAI processes that data in the United States and does not use it to train its models (section 2.4).
- We do not send or publish anything on behalf of a business unless a person authorized by that business decides so, or an automated rule that the business turned on and configured beforehand does.
- You can ask us to delete your data by writing to info@sigar.net. The steps are on the Data deletion page.
1. What it is and who makes it
The Sigar app is developed and operated by SIGARNET S.A.S., the Argentine systems consulting firm that works under the Sigar brand: Argentine tax ID (CUIT) 30-71898317-3, Donado 1860 PB, C1430 Ciudad Autónoma de Buenos Aires, Argentina.
It is used by the client businesses of Sigar ERP and by the people on their staff, each with their own user. Depending on what it agrees with each business, SIGARNET provides the app for the business's staff to use or, in addition, handles the business's conversations on its behalf with SIGARNET staff, who also sign in with their own users. The people who write to those businesses do not use the app or sign up for it.
This is how the app appears on each platform:
| Platform | App name | Status |
|---|---|---|
| Meta (Facebook, Messenger, Instagram and WhatsApp) | "Sigar" | Works today |
| Google (Google Business Profile) | "Sigar" | In preparation |
| TikTok (TikTok API for Business) | "Sigar" | In preparation |
On all three platforms the app is called "Sigar": it is the name the business sees when it authorizes access and in its list of connected apps.
If we set up an auxiliary Meta app for a business (for example, to receive only that business's WhatsApp notifications), that auxiliary app may have a different name, and what this page says applies in the same way.
The Privacy Policy, the Terms of Service and the Data deletion page refer to "Sigar" and "its integrations": everything they say applies to this app. This page is a summary; if anything differs, the Privacy Policy prevails.
Connections between Sigar ERP and other services that each business chooses (for example, banking or vehicle tracking services) are not part of this app and are explained in the Privacy Policy, section 6.1.
2. What it does on each platform
Each business connects its own accounts through each platform's authorization mechanisms. We do not ask for Meta, Google or TikTok passwords.
2.1 Meta: WhatsApp, Messenger, Instagram and Facebook Pages
Works today. With the app, the staff of each business can:
- WhatsApp Business (Cloud API): read and answer its conversations in a shared inbox; create, delete and send its message templates; see the status of each message (sent, delivered, read or failed); and see its WhatsApp usage and estimated spend. Sigar stops marketing templates addressed to people who asked in WhatsApp not to receive them (when WhatsApp notifies us) or whom the business marked as opted out.
- Messenger and Instagram: receive in the same inbox the messages sent to its Facebook Page and to its Instagram professional account, with the name and profile picture of the person who writes, and answer them from there. At the request of the business, also the history of earlier conversations that Meta provides through its API. When Meta sends them, the messages that arrive while another app is handling the conversation (for example, another company's bot) are also stored, without notifying the management system, so that nothing automated answers on top of it.
- Comments: receive in Sigar the new comments on the posts of its Facebook Page and its Instagram account, to handle them. If the business turns on moderation, an authorized person can reply to them publicly or privately, hide them, unhide them, "like" them (on Facebook only) or delete them from Sigar. Sigar can suggest what to hide based on word lists that the business chooses, but it does not hide or delete anything on its own.
- Reactions to posts: record the reactions and "likes" on the posts of its Facebook Page and on their comments, to count them by post and to know which ones were left by people who are already its contacts. A reaction does not create a contact: for people who are not contacts, only a fingerprint of their ID is kept, without their name.
- Deleted and edited messages: when the person unsends a message on Instagram, or deletes it on WhatsApp on a number that the business also uses with the WhatsApp Business phone app, the message becomes "Message deleted" in Sigar, without its content. If they edit it on WhatsApp, on those same numbers, and WhatsApp sends us the new text, Sigar stores it over the original, without the previous one; today WhatsApp reports many edits without the new text, and in that case the message stays as it was, with an "Edited a message" notice. If the business has that feature turned on, an authorized person can also delete a message from Sigar (not from WhatsApp, Messenger or Instagram).
- Leads (Lead Ads): see in Sigar the answers to its Facebook and Instagram lead forms, which are also emailed to the people the business designates.
- Ads: see the results of its campaigns, read only.
- Management system: link a conversation to the customer's record in Sigar ERP, when the business decides so. If the business sets it up, Sigar ERP receives signed notifications of new messages, statuses and leads, which carry only IDs.
In addition, each business can turn on these features. Until it does, they do nothing:
- Team features: assign conversations, label them, use quick replies, email the team when conversations are waiting for a reply (without customer data) and send an automatic message, with the text the business chose, to people who write outside opening hours.
- Artificial intelligence: suggest replies, summarize conversations, transcribe audio messages and answer on its own with what the business approved (section 2.4).
- Publishing: prepare posts for its Facebook Page and Instagram account, which Sigar publishes only once an authorized person approves them, at the time they choose.
- WhatsApp marketing campaigns: send an approved marketing template to a group of people who wrote to the business, never to people who opted out, with a way to opt out in each message and with a person's confirmation before each campaign. The consent of the people who receive it is the responsibility of the business that sends it.
- Appointments: schedule appointments from a conversation and send the customer a confirmation and a reminder the day before, with buttons to confirm or cancel.
- Pipeline, source and metrics: organize inquiries by stage, see which ad, post or link each one came from, measure how long it takes to reply and receive a monthly report by email, with numbers only.
- Sales: mark the sales of a conversation, see how many sales each ad brought and, if the business turns it on, tell Meta which sales came from its ads (section 3).
- Unified contact: receive suggestions of which contacts from different channels may be the same person, which a person of the business confirms or dismisses. Nothing is ever merged automatically, and it only serves to help the business serve its customers better, not for advertising.
- Phone notifications: each staff member can receive on their phone a notification of a new inquiry or of an inquiry that is waiting, without the customer's name or message.
- Enhanced privacy for health data: messages with possible health data shown masked, and a record of who views them (Privacy Policy, section 5).
Sigar does not create or change ads. It only publishes on Facebook and Instagram if the business turns that feature on and an authorized person approves each post. The Terms prohibit using Sigar to send spam or messages to people who did not agree to receive them.
2.2 Google Business Profile: reviews In preparation
Today Sigar does not receive any data from Google. Once the integration is active, each business will be able to:
- see the reviews and rating of its own business profiles;
- reply to reviews from Sigar: each reply is approved by an authorized person of the business, who is responsible for its content, and Sigar publishes it on behalf of the business. At that person's request, Sigar also edits or deletes replies;
- see the data of its locations (name, address, and Maps and review links) and the metrics of its profiles, for example, views and actions.
The business connects its profile in one of two ways: it adds our integration account as a manager of its profile, after authorizing us in writing, or, later on, it signs in with its own Google account. In both cases, Sigar uses Google's permission to manage business profiles (https://www.googleapis.com/auth/business.manage). We inform the business, within 48 hours, of every change Sigar makes to its profile, for example, a published reply. The Terms prohibit businesses from offering incentives for reviews or asking only satisfied customers for them.
2.3 TikTok In preparation
Today Sigar does not receive any data from TikTok. When a business connects its TikTok accounts (TikTok API for Business), it will be able to:
- see in Sigar the leads from its TikTok lead forms, which are also emailed to the people the business designates;
- see the structure and results of its ads, read only: Sigar does not create or change ads;
- see the comments on its ads and on its own videos, and reply to, hide, delete or "like" them, at the request of a person authorized by the business;
- see the statistics of its account and its posts;
- publish on its account the videos and photos it uploads to Sigar, when a person authorized by the business approves it.
We do not download TikTok videos, images or thumbnails. The app does not use TikTok direct messages; if we add them later, we will update the Privacy Policy and this page first.
2.4 Artificial intelligence
The app uses artificial intelligence only if the business turns these features on; if it does not, it does not send messages, comments or other platform data to any artificial intelligence provider. The provider is OpenAI. Today these features cannot be turned on for the client business that carries out health-related activities.
- Copilot: at the request of a person authorized by the business, it suggests a draft reply based on the knowledge the business approved, summarizes a conversation or transcribes an audio message. It does not send anything: the person reviews the draft and decides.
- Automatic replies: if the business turns them on, they answer on their own the text messages on WhatsApp, Messenger and Instagram using only the approved knowledge. If the business chooses so, they say that they come from a virtual assistant (each business defines how it introduces itself), and if they cannot answer with that knowledge, they say that a person from the team will reply and stop answering in that conversation. They do not answer if a person from the team replied in the last 12 hours, and they can be paused in any conversation.
- Texts for posts: it proposes texts that a person reviews; nothing is published without their approval.
- Data that OpenAI receives: the latest messages of the conversation, with the customer's name replaced and their phone numbers, email addresses, national ID (DNI) numbers, tax IDs (CUIT) and card numbers masked, without deleted messages or messages flagged as possible health data; to transcribe an audio message, only when a person of the business asks for it, the whole audio file, unmasked. OpenAI processes them in the United States and does not use them to train its models. Each request is sent with the option to store it turned off. What artificial intelligence returns is stored encrypted for 30 days.
Data from Meta is used with artificial intelligence only for the feature that the business turned on and that is visible in Sigar. We do not use it to train models. In preparation Reply suggestions for Google reviews and for comments. The details are in the Privacy Policy, section 4; the previous system of one client business, which is not part of this app, is explained in its section 6.4.
3. What data it uses and what for
Each business is the controller of its customers' data. SIGARNET processes that data on behalf of the business, as a processor, and only to provide the agreed service: the app and, if the business entrusts it to SIGARNET, handling its conversations. We only receive data from the assets that each business connects (Facebook Pages, Instagram accounts, WhatsApp numbers, ad accounts, lead forms and, once they are active, Google profiles and TikTok accounts), and only with the permissions it grants.
| Data | What for |
|---|---|
| WhatsApp Business. About the person who talks to the business: their phone number, or the identifier WhatsApp provides when the person does not show their number; their profile name and username, if they have one; the content of the messages they send and receive, including catalog orders and answers to WhatsApp forms; their previous number, if they change it; whether they asked in WhatsApp not to receive marketing messages from the business, when WhatsApp notifies us; and the status of each message, with its billing category. If the business uses the WhatsApp Business app on its phone together with Sigar, also the messages it sends from the phone and the notifications of messages that are deleted or edited. WhatsApp does not give us people's profile pictures. | Show and answer the conversations in the business's inbox, send its templates (without marketing templates to people who opted out) and show the status of each message. |
| The business's WhatsApp account. Phone numbers, display name, quality rating, messaging limits, Meta's notices about the account, the status of the connection with the phone app, message templates (which the business creates and deletes from Sigar or from Meta's WhatsApp Manager), and usage and cost reports. | Manage templates and show WhatsApp usage and estimated spend. |
| Messenger and Instagram. The ID, name and profile picture of the person who writes to the Page or account (on Instagram, also their username); messages and their attachments, including those that arrive while another app is handling the conversation, when Meta sends them; reactions to messages, when Meta reports them; on Messenger, delivery and read status; on Instagram, story replies and story mentions, and the notifications of unsent messages. We do not store the content of stories or the image or video of a shared post: only the link. | Show and answer the conversations in the inbox, with the name and picture of the person who writes. |
| Comments. On the posts of the business's Facebook Page and Instagram account: the text, and the ID and name of the person who comments. If the business turns on moderation, what its staff did with each comment, who and when (without the text of the comment). | Let the business's staff see and handle the comments and, if it turned on moderation, reply to, hide, unhide, "like" or delete them. |
| Reactions to Facebook posts. The type of reaction ("Like", "Love" and the others), which post or comment of the Page it is on, when it was made and whether it was removed. About the person who reacted, only a fingerprint of their ID (without the ID or the name) and, if they commented on a post of the Page or comment on one later, the link to their contact record (not if they only wrote on Messenger). The technical copies of those notifications, which include the ID and the name, are deleted after 90 days (180 if they could not be processed). Not stored for Instagram. | Count how many reactions of each type each post has, and know which ones the business's contacts left. A reaction does not create a contact. |
| Leads (Lead Ads). The answers the person gives in the business's lead form (usually name, email address, phone number and the form's questions) and the date; the IDs of the form, ad, ad set and campaign; the platform (Facebook or Instagram); and whether the lead came without a paid ad. | Show them in Sigar and email them to the people the business designates. They are used only as allowed by the privacy notice that the business links in its form. |
| Meta ads. Name, status, objective, budget and dates of campaigns, ad sets and ads, and their daily results (spend, impressions, reach, clicks and other actions). These figures do not identify people. | Show campaign reports, read only. |
| Connection with Meta. The IDs of the business portfolio and of the connected assets, the permissions granted, and the business's access tokens. If the business connects from Sigar, also the ID of the Meta user who authorized the connection and how each attempt ended. | Keep the connection working and check every hour that it is still active. |
| Source of each inquiry. Which ad, post, link, QR code or Page button it came from (type, ID and title), when Meta sends it, and when the business replied. | If it is turned on: show where each inquiry came from, until when to reply on WhatsApp at no cost and how many inquiries each ad brought. |
| What the business's staff enter in the features it turns on. Assignments, labels and quick replies; the business's knowledge for artificial intelligence; sales (amount, currency, date, an encrypted note and the ad the conversation came from); appointments; the stage, value and next step of each inquiry in the pipeline; marketing campaigns (template, recipients, statuses and who confirmed them); posts (texts, photos and videos); and, in unified contact, suggestions, merges and encrypted notes, with fingerprints of phone numbers, email addresses and references instead of the data itself. | Make the features that the business turned on do what is described in section 2.1, with a record of who did each thing. |
| Artificial intelligence (OpenAI). The latest messages of a conversation, with personal data masked and without deleted messages or messages flagged as possible health data; audio messages that someone asks to transcribe; the business's knowledge. | Only if the business turns on the copilot or automatic replies: suggest, summarize, transcribe or answer (section 2.4). |
| Sales reporting to Meta. For a sale that came from a Meta ad: the amount, the currency, the date and the identifier that Meta already knows (the ID of the ad click on WhatsApp, or the person's ID on the Page or Instagram account). Never the phone number, email address or name. | Only if the business turns it on: let Meta measure which of the business's ads bring sales. It is sent 15 minutes after the sale is marked; before that it can be undone, and after that it stays with Meta. |
| In preparation Google Business Profile. The profile's reviews (text, rating, dates and the reviewer's name, or whether the review is anonymous; we do not store the reviewer's photo and, for photos attached to a review, only how many there are and their link); the average rating and the number of reviews; location data (name, address, and Maps and review links); and profile metrics, which do not identify people. | Show the reviews, data and metrics of the business's locations, and publish, edit or delete the replies that a person of the business approves. |
| In preparation TikTok. The leads from the business's lead forms; the structure and metrics of its ads, which do not identify people; comments on its ads and on its own videos (text, and the ID and name of the person who comments); statistics of its account and its posts; and the videos and photos that the business uploads to Sigar to publish on its account. | Show leads, comments and statistics; reply to, hide, delete or "like" comments, at the request of a person authorized by the business; and publish the content that a person authorized by the business approves. |
| Sigar users (the staff of each business). Name, email address, company and role; username and permissions; login, session and device-verification records; and the actions each user takes, for example, who answered a message. If the business uses them: their assignments and groups in the inbox, how long they took to reply and, if they turn on notifications on their phone, the data of that device (encrypted) and a record of the notifications. | Let each person sign in with their own user and see only what they are allowed to, record who did each action, measure service and send notifications to their phone. |
| Technical data. Access and error logs of our servers (they include IP addresses and the requested web addresses), and technical copies of the notifications (webhooks) that the platforms send us. | Process the notifications, recover from failures and keep the service secure. |
We also use the data to provide support, send email alerts about technical problems (for example, a connection that stopped working), prevent abuse and comply with legal obligations. Nobody is obliged to provide sensitive data, and we recommend not writing it in a chat unless it is needed: in businesses that use artificial intelligence without enhanced privacy, it may reach OpenAI. If a conversation or a form includes it, the rules in the Privacy Policy, section 5 apply. The full list of data is in its section 2.
4. What we do not do
- We do not sell, rent, license or trade personal data, and we do not buy data about people.
- We do not use the data we receive from the platforms for advertising, or to build or enrich profiles of people for advertising or for our own purposes. The only exception, an explicit one, is sales reporting to Meta: if the business turns it on, it only serves for Meta to measure the business's own ads, and it sends the amount, the currency, the date and an identifier that Meta already knows, never the name, phone number or email address.
- We do not use one business's data for another business, and we do not combine data of different businesses. Unified contact only suggests matches within the same business, by phone number, email address or management-system reference, never by name or photo, and nothing is merged unless a person of the business confirms it. It only serves to help the business serve its customers better: it is not used for advertising.
- We do not use it to assess credit or creditworthiness, or to make decisions about anyone's housing, employment, insurance, education, government benefits or immigration status.
- We do not use the data to train artificial intelligence models.
- We do not send or publish anything on behalf of a business unless a person authorized by that business decides so (from its staff or, if it entrusted SIGARNET with handling its conversations, from SIGARNET), or an automated rule that the business turned on and configured beforehand does.
We process each platform's data only as described in the Privacy Policy and according to its rules: the Meta Platform Terms, the Meta Developer Policies, the WhatsApp Business Messaging Policy and the Lead Ads Terms; the Google API Services User Data Policy and the Google Business Profile API policies; and TikTok's terms for developers and advertisers.
5. How long data is kept
We keep data while it is needed to provide the service. These are the periods that apply today:
| Data | How long it is kept |
|---|---|
| Conversations, messages, comments and contact details (name, phone number or ID, previous WhatsApp numbers, username) | Today they have no automatic period. They are kept while the business uses Sigar, and they are deleted when the person or the business asks for it or when the business stops using Sigar. We are defining maximum periods; when they apply, we will publish them in the Privacy Policy. |
| Leads | Same as the previous row. Notification emails already sent remain in the mailboxes of their recipients, which each business controls. |
| Attachments (images, audio, video and documents) | 365 days after they arrive. Then the file is deleted and only a note that there was an attachment remains. |
| Profile pictures (Messenger and Instagram) | While Meta provides them. They are replaced when they change, and deleted when Meta stops providing them or when the contact is deleted. |
| Instagram stories and images or videos of shared posts | Not stored: only the link. |
| Reactions and "likes" on Facebook posts and their comments | From people who are not contacts of the business (only the fingerprint of their ID, without their name): 90 days after Meta's last notification about that reaction. Linked to a contact: 365 days after the last notification. Automatic deletion. The technical copies of those notifications, which include the ID and the name, are deleted after 90 days (180 if they could not be processed). |
| Record of each deleted message (without the content) | In full, 90 days. Then it is deleted, except for messages deleted from Sigar, whose record is kept in summary form, without the conversation, the message or the account (the channel and the type of message, the day, who deleted it, the reason and, if the customer asked for it, the date of the request), until 2 years after the deletion. Automatic deletion. |
| Daily results of each ad (spend, impressions, reach, clicks and conversations started) | 25 months. Automatic deletion. |
| Ad structure; WhatsApp usage and spend | While the business uses Sigar. |
| Text of transcribed audio messages | Together with the message, for as long as the message exists. |
| What artificial intelligence returned | 30 days. Automatic deletion. The record of each request, without the content, 180 days. |
| Source of each inquiry; inquiry pipeline | Same as the conversation: deleted with it. |
| Sales, appointments and marketing campaigns | Sales, 5 years from the sale; appointments, 2 years from the appointment; campaigns, 1 year from sending. Automatic deletion. Before that, they are deleted together with the data of the person or of the business. Sales already reported to Meta stay with Meta. |
| Files for posts | Those not used, 2 days; those of posts that were published or failed, 90 days. Automatic deletion. |
| Unified contact | Fingerprints, together with the contact they come from. A person record without contacts or leads, after one hour, or after 30 days if it has notes. Suggestions, decisions and notes, today without an automatic period: deleted together with the person or the business. |
| Service metrics (without customer data) | The detail of each inquiry, 25 months; daily totals, while the business uses Sigar. |
| Phone notifications | The record of notifications, 30 days; deactivated devices, 90 days. Automatic deletion. |
| Access tokens of each business | While the business is connected. They are deleted immediately when the business stops using Sigar or asks us to disconnect the platform. Those of a Meta connection started from Sigar that nobody finished are deleted after 24 hours. |
| Technical copies of the notifications that the platforms send | 90 days (180 days for those that could not be processed). Automatic deletion. The content of a deleted message is struck out earlier. |
| Database backups and previous versions of files | The daily database backup, up to 15 days. Automatic backups of the AWS database service, up to 7 days. Previous versions of files, 30 days. Automatic deletion. |
| In preparation Content received from Google (reviews and profile data) | No more than 30 days. Sigar's own records (drafts, who approved a reply and when) are kept while the business uses Sigar. |
| In preparation Data received from TikTok | Files that the business uploads to publish are deleted 30 days after they are published. Other data follows the same rules as Meta data. If the business removes the app's access in TikTok, we delete its access tokens immediately and its TikTok data within 30 days. |
The full table, with the other records, is in the Privacy Policy, section 8.
6. How data is deleted and how to remove access
If you wrote to a business, filled in a form, commented or left a review
Write to info@sigar.net with the subject "Data deletion request". Tell us which business you wrote to, on which channel, and your phone number, profile name or username. We delete your data from Sigar within 5 business days and reply by email with what we deleted and which copies remain. The steps are on the Data deletion page.
If you are a business and want to remove the "Sigar" app's access
- Meta: on Facebook, Settings & privacy → Settings → Business integrations (or Apps and websites) → Sigar → Remove; or, from the business portfolio, Business settings → Integrations → Connected apps. If we detect that a business removed the app's access in Meta, we contact it to confirm that it is leaving (more details).
- In preparation Google: if you added our integration account, remove it from People and access in your Business Profile settings; if you connected the profile with your own Google account, disconnect it from Sigar or revoke access at myaccount.google.com/permissions (more details).
- In preparation TikTok: revoke the "Sigar" app's authorization from the authorized apps settings of your TikTok or TikTok for Business account, or ask us to disconnect it. Removing access counts as a request to leave that platform (more details).
Removing access stops new data. When a business stops using Sigar, or asks us to disconnect a platform or to delete its data, we delete its access tokens immediately and, within 30 days, its data, unless it first asks us for a copy or a law requires us to keep part of it. In Google Business Profile, Google content is deleted within 30 days at most and, if the business stops using Sigar, within 7 business days we remove our account from its profile. More details in the Privacy Policy, section 12.
What remains after deletion
Deleted data may remain for a limited time in backups (up to 30 days), in server logs (for a limited time) and records of failed tasks (up to 30 days), and in the technical copies of notifications (90 days, or 180 if they could not be processed), until each of them expires. When a message is deleted, its content is also struck out of those technical copies. Deleting data in Sigar does not delete it from WhatsApp, Messenger, Instagram, Google or TikTok, nor sales already reported to Meta: to do that, use each platform's own tools. Whatever OpenAI keeps on its own is governed by its terms (Privacy Policy, section 4.2).
7. How we protect data
- Each business only sees its own data: Sigar does not show one business the data of another.
- Each person signs in with their own user and, except for specific and controlled exceptions, with device verification, and only sees the businesses and modules they are allowed to. Sessions are logged and expire automatically.
- Connections with Sigar and with the platforms use HTTPS.
- We verify the signature of every notification Meta sends us, to make sure it comes from Meta.
- The businesses' access tokens are stored encrypted and checked every hour, and secrets are stored in an AWS secrets store. None of them is sent in web addresses or shown to users.
- Attachments and profile pictures are stored in a private Amazon S3 bucket, without public access. Files for posts are given to Meta through a link that expires after 60 minutes.
- We store encrypted the texts of transcribed audio messages, what artificial intelligence returns, the notes of sales and of unified contact, and the data of the devices that receive notifications.
- The features that send messages to customers, publish or report something to Meta start turned off and are turned on for each business separately.
- Data is stored on Amazon Web Services servers in the United States (region us-east-1). The transfer is explained in the Privacy Policy, section 7.
- Administrative access to the servers is limited to SIGARNET staff, with SSH keys and a firewall. Those staff may see the data only to provide support, for security purposes or at the business's request.
If we detect a security incident that affects personal data, we inform the affected client businesses. More details in the Privacy Policy, section 9.
8. Google data: Limited Use
Sigar's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
Specifically, with the data we receive from Google:
- we only use it to provide or improve the features that the business sees and uses in Sigar: reading and answering reviews, and viewing the data and metrics of its locations;
- we do not transfer it to third parties, except when needed for those features and with the business's consent (for example, the text of a review to an artificial intelligence provider to suggest a reply, if the business turns that on), for security purposes, to comply with the law, or as part of a merger, acquisition or sale of assets of SIGARNET, after obtaining the business's explicit prior consent;
- nobody at SIGARNET reads it, except with the business's agreement (for example, when it asks us for support), for security purposes or to comply with the law;
- we do not sell it or use it for advertising, to assess credit or creditworthiness, or to build profiles;
- we keep it for no more than 30 days, securely, without aggregating or manipulating it.
The Privacy Policy, section 13, says the same. To remove the app's access or request the deletion of Google data, see Data deletion.
9. Contact
SIGARNET S.A.S. · Donado 1860 PB, C1430 Ciudad Autónoma de Buenos Aires, Argentina · info@sigar.net
This English version says the same as the Spanish version. If they differ, the Spanish version prevails.