Privacy Policy

Draft version - last updated [date]

Draft placeholder. This text is a starting skeleton for the legal team to rewrite and finalize before launch - not reviewed or approved copy. Every bracketed [placeholder] needs a real value, and the language itself should be checked by a lawyer for our actual data practices, jurisdiction and applicable regulations (GDPR, CCPA, etc.).

1. Overview

This Privacy Policy explains how [Company legal name] ("Shep", "we", "us") collects, uses, shares and protects information when you use our website and Service. It applies to visitors, registered users and demo requesters.

2. Information We Collect

We may collect:

Account data - name, work email, company, role, provided at signup or demo request.
Usage data - how you interact with the dashboard, features used, log data, device and browser information.
Monitoring data - domains, competitors and topics you configure for tracking (not personal data about third parties).
Communications - messages you send us via forms, email or support channels.

3. How We Use Your Information

We use collected information to provide and improve the Service, respond to inquiries, send product and account updates, and, where you've opted in, marketing communications. We do not sell personal data.

4. Cookies and Tracking

We use cookies and similar technologies for core site functionality, analytics and (where enabled) marketing. See our Cookie Policy for details and how to manage preferences.

5. How We Share Information

We share information with service providers who help us operate the Service (hosting, analytics, email delivery), under contractual confidentiality obligations, and when required by law. [List actual sub-processors - see also Trust & Security.] We do not share personal data with third parties for their own marketing purposes.

6. Data Retention

We retain personal data for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes and enforce agreements. [Add specific retention periods per data category.]

7. Your Rights

Depending on your location, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at privacy@shep.io [replace with real contact].

8. Data Security

We use technical and organizational measures to protect personal data, including encryption in transit and at rest and access controls. See Trust & Security for more detail.

9. International Data Transfers

Where data is transferred outside your country of residence, we rely on appropriate safeguards such as Standard Contractual Clauses. [Confirm hosting regions and transfer mechanism.]

10. Children's Privacy

The Service is intended for business use and is not directed at individuals under 16. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or by email.

12. Contact Us

For privacy questions or requests, contact privacy@shep.io [replace with real contact] or [registered company address].