Privacy

Your data. Clear boundaries.

How Data Sitr Establishment handles website visits, enquiries and product data. Updated 27 September 2026.

Who is responsible

Data Sitr Establishment operates this website and handles enquiries as a data controller. In a customer deployment, responsibilities depend on the agreement; the customer normally controls the submitted data and DataSitr processes it on their instructions.

When you visit

Amazon Web Services hosts the public website in Northern Virginia, United States, and delivers it through CloudFront’s global network. Website requests include an IP address, requested URL and browser headers. This is separate from customer product hosting.

CloudFront and S3 access logging are not currently enabled for this site. That does not mean AWS processes no request or security information. Cloudflare provides DNS. Your language preference is saved in your browser’s local storage.

When you contact us

We use the contact details and message you send to respond, scope an evaluation and provide support. Contact and pilot pages prepare an email draft in your browser; opening or copying it does not send it.

Domain email is routed to Google. Mailbox storage location and retention have not been verified in this review. Avoid including customer records, passwords or API keys in an initial enquiry.

When your organisation uses DataSitr

Depending on configuration, Browser Guard’s personal-data check sends draft text to the agreed detection endpoint. Its protected-content check matches fingerprints locally and can report match metadata, such as the website origin, time, match count and policy action. The checked match-report format does not include the matched text.

Gateway integrations may also process request text, encrypted token mappings, account details, usage and audit records. The deployment determines hosting, recipients, retention and deletion. Any AI provider routing must match the customer’s configuration and agreement. Browser checks do not make every AI conversation pass through the gateway.

We do not sell customer personal data or share it for advertising. The applicable notice and agreement should specify the purpose, legal basis, recipients and retention before a pilot begins.

Questions and your rights

For access, correction, deletion, a privacy complaint or withdrawal of consent where consent applies, contact dpo@datasitr.com. If your organisation controls the data, contact its privacy team too. Applicable law and your agreement determine the available process and deadlines.