SageReport, Inc. Privacy Policy

Last Updated: January 22, 2026

1. Scope of Privacy Policy

Welcome to SageReport, Inc. (“SageReport” “we” or “us”) and our Privacy Policy (“Privacy Policy”). This Privacy Policy is important and affects your legal rights, so please read carefully.

By accessing or using https://sagereport.com (the “Website”) and our mobile application (the “App”), and the services provided via the Website or the App (collectively, the “Services”), you agree to be bound by this Privacy Policy and all of the terms incorporated herein by reference. By using the Services and/or submitting or collecting any of your personal data via the Services, you accept and expressly consent and agree to our practices surrounding the collection, use, and sharing of your personal information in accordance with this Privacy Policy.

If you do not consent and agree with the terms of this Privacy Policy, you cannot, and we do not authorize you to, access, browse, or use the Services.

Our processing of personal information, such as your name, address, e-mail address, or telephone number, will be undertaken consistent with the requirements of applicable privacy laws, including, but not limited to, the California Consumer Privacy Act, the California Privacy Rights Act, the Virginia Consumer Data Protection Act of 2021, the Colorado Privacy Act of 2021, and the Utah Consumer Privacy Act of 2022, the Connecticut Data Privacy Act of 2022, the Texas Data Privacy and Security Act, the Oregon Consumer Privacy Act, the Montana Consumer Data Privacy Act, the Tennessee Information Protection Act of 2023, the Iowa Consumer Data Protection Act of 2023, the Delaware Personal Data Privacy Act of 2023, the Nebraska Data Privacy Act of 2024, the New Hampshire Privacy Act of 2024, and the New Jersey Data Privacy Act of 2024, the EU General Data Protection Regulation, the UK General Data Protection Regulation, and the Canadian Personal Information Protection and Electronic Documents Act.

NOTE: This Privacy Policy does not apply to your rights or our obligations regarding third parties’ personal information that you may share with us in connection with your use of the Services. Those rights and obligations are addressed by the terms and conditions agreed upon by you (or the purchaser of the Services, if you were not the purchaser) and SageReport. Those terms and conditions are referred to as the “Subscription Agreement” and may incorporate specific privacy or data protection terms described in a Data Processing Agreement (DPA) or a Business Associate Agreement (BAA).

2. Information We Collect

a. Personal Information We Collect Directly from You

We receive your personal information pursuant to your consent when you voluntarily provide us with personal information, including:

  • Individual information (such as your e-mail address, phone number, and other contact information)
  • Company information (such as your company’s address)
  • Other identifying information that you voluntarily choose to provide to us, including without limitation unique identifiers such as passwords, and personal information in messages you send to us

b. Information We Automatically Collect When You Use Our Website

In order to access and use certain areas or features of the Services, you consent to our collection and use of certain information about your use of the Services through the use of tracking technologies or by other passive means, including when you receive, open, engage, forward, and/or click through the Services. Your consent to our access and use of this “passively collected” information includes, but is not limited to:

  • Domain name of the website that allowed you to navigate to the Services
  • Search engines used
  • Internet protocol (IP) address used
  • Length of time spent on the Services
  • Pages you looked at on the Services
  • Other webpages you visited before and after visiting the Services
  • Type of device and/or internet browser you have
  • Frequency of your visits to the Services
  • Other relevant statistics (collectively “Traffic Data”)

c. Information We Collect Through Our Mobile Application

If you use the App, we collect certain information through device features, in each case only after you grant the App permission through your device settings:

  • Audio recordings. The App uses your device’s microphone to record audio of interviews, observations, and similar sessions that you choose to record. These recordings are uploaded to and stored on our servers; they are not retained solely on your device.
  • Camera and photo library. The App uses your device’s camera and photo library to capture or scan documents and images that you choose to submit. These files are uploaded to and stored on our servers.

Audio recordings, documents, and images captured through the App may contain personal information about third parties. Our protection and use of that information is governed by the applicable Subscription Agreement, which may incorporate a Data Processing Agreement (DPA) or Business Associate Agreement (BAA), as described in Section 1.

3. How We Collect Information

We collect information (including personal information and Traffic Data) when you use and interact with the Services, and in some cases from third party sources. Such means of collection include:

  • When you access, use, or contact us through the Services
  • When you voluntarily provide information through the Services
  • If you use a location-enabled browser, we may receive information about your location and device
  • Through Cookies, Web Beacons, analytics services, and other tracking technologies (collectively, “Tracking Tools”)

4. Tracking Tools, Behavioral Advertising, and Opt-Out Options

a. Cookies

“Cookies” are small computer files transferred to your device that contain information such as user ID, user preferences, lists of pages visited and activities conducted while using the Services. We use Cookies to:

  • Improve and tailor the Services
  • Customize advertisements
  • Measure performance
  • Store authentication so re-entering credentials is not required
  • Customize user experiences
  • Analytics and fraud prevention

For more information on Cookies, including how to control your Cookie settings and preferences, visit http://www.allaboutcookies.org. You can also manage Cookies in your web browser (for example, Edge, Explorer, Chrome, Safari). If you choose to change your settings, you may find that certain functions or features of the Services will not work as intended.

Types of Cookies We Use

Absolutely Necessary Cookies. These Cookies are essential to enable you to move around a website and use its features. Without these Cookies, services you have asked for, like adding items to an online order, cannot be provided.

Performance Cookies. These Cookies collect information about how you use the Services, including the Internet browsers and operating systems used, the domain name of the website previously visited, the number of visits, average duration of visit, and pages viewed. These Cookies do not collect information that personally identifies you and only collect aggregated and anonymous information. Performance Cookies are used to improve the user-friendliness of a website and enhance your experience.

Functionality Cookies. These Cookies allow the Services to remember choices you make (such as your username, language preference, or the area or region you are in) and provide enhanced, more personal features. These Cookies can also be used to remember changes you have made to text size, fonts, and other customizable parts of the Services. The information these Cookies collect may be anonymized, and they cannot track your browsing activity on other websites.

b. Web Beacons

“Web Beacons” (a.k.a. clear GIFs or pixel tags) are tiny graphic image files embedded in a web page or email that may be used to collect information about the use of the Services. The information collected by Web Beacons allows us to analyze how many people are using the Services, using selected publishers’ websites, or opening emails, and for what purpose.

c. Web Service Analytics

We may use third-party analytics services in connection with the Services, including, for example, to register mouse clicks, mouse movements, scrolling activity and text typed into the Services. We use the information collected from these services to help make the Services easier to use and as otherwise set forth in Section 5 (How We Use Your Information). These analytics services generally do not collect personal information unless you voluntarily provide it.

d. Mobile Device Identifiers

As with other Tracking Tools, mobile device identifiers help SageReport, Inc. learn more about our users’ demographics and Internet behaviors in order to personalize and improve the Services. Mobile device identifiers are data stored on mobile devices that may track activities occurring on and through it, as well as the applications installed on it. Mobile device identifiers enable collection of personal information (such as media access control, address, and location) and Traffic Data.

5. Behavioral Advertising

We may use a type of advertising commonly known as interest-based or online behavioral advertising. This means that we may allow some of our partners to passively collect information about a user’s activities on our Website (but not the Services) to display ads to the user based on the user’s interests (“Behavioral Advertising”). Our partners may include third-party advertisers and other third-party service providers, and such partners may collect information when you use the Services, such as IP address, mobile device ID, operating system, and demographic information. These Tracking Tools help SageReport, Inc. learn more about our users’ demographics and Internet behaviors.

6. Options for Opting Out of Cookies, Mobile Device Identifiers, and Behavioral Advertising

You have the right to withdraw your consent to our use of Cookies or Behavioral Advertising at any point in time by contacting us at support@sagereport.com. You may also opt out of Behavioral Advertising by following the “Do Not Sell or Share” link on the Website. Please note, if you exercise this right, you may have to provide your consent on a case-by-case basis to enable you to utilize some or all of the Services.

You may be able to reject Cookies and/or mobile device identifiers by activating the appropriate setting on your browser or device. Although you are not required to accept SageReport, Inc.’s Cookies or mobile device identifiers, if you block or reject them, you may not have access to all features available through the Services.

You may opt out of receiving certain Cookies by visiting the Network Advertising Initiative (NAI) opt out page or the Digital Advertising Alliance (DAA) opt out page, or by installing the DAA’s AppChoices app (iOS; Android) on your mobile device. When you use these opt-out features, an “opt-out” Cookie will be placed on your device indicating that you do not want to receive interest-based advertising from NAI or DAA member companies. If you delete Cookies on your device, you may need to opt out again. For information about how to opt out of interest-based advertising on mobile devices, please visit https://thenai.org/opt-out/mobile-opt-out/. You will need to opt out of each browser and device for which you desire to apply these opt-out features.

Even after opting out of Behavioral Advertising, you may still see SageReport, Inc. advertisements that are not interest-based (i.e., not targeted toward you). Also, opting out does not mean that SageReport, Inc. is no longer using Tracking Tools. SageReport, Inc. still may collect information about your use of the Services even after you have opted out of Behavioral Advertising and may still serve advertisements to you via the Services based on information it collects through the Services.

Note that we are not responsible for the privacy practices of any third party.

7. “Do Not Track” (DNT) and Universal Opt-Out Preference Signals

Some web browsers (including Safari, Internet Explorer, Firefox, and Chrome) incorporate a “Do Not Track” (DNT) or similar feature that signals to web services that a visitor does not want to have their online activity and behavior tracked. If a web service operator elects to respond to a particular DNT signal, the web service operator may refrain from collecting certain personal information about the browser’s user. Not all browsers offer a DNT option and there is currently no industry consensus as to what constitutes a DNT signal. For these reasons, many web service operators, including SageReport, Inc., do not proactively respond to DNT signals. For more information about DNT signals, visit http://allaboutdnt.com.

The Global Privacy Control (GPC) allows users with GPC-enabled browsers and devices to send a signal that will communicate the user’s request to opt-out of sales of their personal information and to opt-out of certain sharing of their personal information. If we detect and recognize such a signal from your device or browser, we will honor it.

8. How We Use Your Information

We may use information to better understand who uses the Services and how we can deliver a better user experience. We use information, including personal information, to provide the Services and to help improve the Services, to develop new services, and to advertise our services. Specifically, such use may include:

  • Providing you with the products, services, and information you request
  • Communicating with you
  • Providing, maintaining, administering, or expanding the Services, performing business analyses, and for other legitimate business purposes
  • Combining information received from third parties with information that we have from or about you and using the combined information for any of the purposes described in this Privacy Policy
  • Showing you advertisements, including interest-based or online behavioral advertising
  • Fulfilling our legal obligations, such as preventing, detecting, and investigating security incidents, fraud, and potentially illegal or prohibited activities
  • Enforcing our Privacy Policy and other agreements
  • Aggregating and anonymizing your information so that the information no longer constitutes personal information

By providing your e-mail to us, you are consenting to receive e-mails from us regarding the Services and our other product and services that we may offer from time to time.

9. How We Share Your Information

In certain circumstances, and in order to perform the Services, we may share certain information about you as described in this section:

  • We do not sell your personal information to third parties
  • We may share your personal information with our partners to customize or display advertising
  • We may share your personal information with our service partners who perform operational services for us in support of the Services (including but not limited to hosting, billing, fulfillment, data storage, security, insurance verification, web service analytics, or ad serving)
  • We may share your personal information and/or Traffic Data with our partners to analyze device activities and generate targeted advertisements
  • We may transfer your personal information to another company in connection with a proposed merger, sale, acquisition or other change of ownership or control by or of SageReport, Inc. (whether in whole or in part).
  • We also may need to disclose your personal information or any other information we collect about you if we determine in good faith that such disclosure is needed to: (1) comply with or fulfill our obligations under applicable law; (2) protect the rights, property or safety of you, SageReport, Inc. or another party; (3) enforce this Privacy Policy or other agreements with you; or (4) respond to claims that any posting or other content violates third-party rights

Our service providers who currently receive personal information in connection with the Services include:

  • Google LLC (Firebase): authentication, database, and file storage services. Firebase processes account information, evaluation data, and audio recordings, documents, and images uploaded through the Services.
  • Functional Software, Inc. (Sentry): crash reporting and performance diagnostics. Sentry receives technical diagnostic information associated with your user ID and email address. Session replay is configured to mask all text and images.
  • PostHog, Inc.: product usage analytics. PostHog receives usage information associated with your email address and name.

We may engage additional or replacement service providers from time to time, and we will update this Privacy Policy as required.

10. Collection and Use of Sensitive Information

We do not collect sensitive personal information about you. While you may provide us with sensitive information regarding third parties in connection with your use of the Services, our protection and use of that information is governed by the Subscription Agreement.

11. Storage and Security of Information

Any information you send to us electronically, while using the Services or otherwise interacting with us, may not be secure when it is transmitted to us. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us. Please be aware, despite our best efforts, no security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” Any information you send us through any means is transmitted at your own risk.

12. Your Choices

a. Information You Provide

You can choose whether or not to provide personal information through the Services. We will not discriminate against you for exercising any of your rights relating to your personal information and will not:

  • Deny you goods or services
  • Provide you with a different level or quality of services
  • Charge you different prices for services for doing so

13. California and Other State Privacy Rights

In the preceding 12 months, we have collected or may have collected and disclosed for a business purpose the following categories of personal information about consumers:

Identifiers

  • Examples: Name, address, e-mail address, IP address
  • Collected?: Yes
  • Categories of Recipients: Authentication Provider, Hosting Provider

Personal information categories listed in the California Customer Records statute

  • Examples: Name, professional-related information; and employment-related information
  • Collected?: Yes
  • Categories of Recipients: Authentication Provider, Hosting Provider

Protected classification characteristics under California or federal law

  • Examples: Name, age, citizenship, nationality, ancestry, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, proof of eligibility to work
  • Collected?: No
  • Categories of Recipients: N/A

Commercial information

  • Examples: Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies
  • Collected?: No
  • Categories of Recipients: N/A

Internet or other similar network activity

  • Examples: Browsing history, search history, information on a consumer’s interaction with the Services
  • Collected?: Yes
  • Categories of Recipients: Analytics Provider, Hosting Provider

Geolocation data

  • Examples: Location and movement data
  • Collected?: No
  • Categories of Recipients: N/A

Professional or employment-related information

  • Examples: Proof of eligibility to work, resumé, other professional-related information and employment-related information
  • Collected?: Yes
  • Categories of Recipients: Hosting Provider, AI Provider

Biometric information

  • Examples: Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data
  • Collected?: No
  • Categories of Recipients: N/A

Non-Public Education Information

  • Examples: Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records
  • Collected?: No
  • Categories of Recipients: N/A

Inferences from the foregoing

  • Examples: Profile reflecting a user’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes
  • Collected?: Yes
  • Categories of Recipients: Hosting Provider, AI Provider

b. Purposes for Collection, Use, and Sharing

We use and disclose the personal information we collect for our commercial purposes, as further described in this Privacy Policy, including for our business purposes with our partners and service providers as follows:

  • Legal compliance and auditing related to our interactions with you
  • Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and exercising our related rights
  • Performing, supporting, and improving our services (by us or our service provider(s))
  • Internal operations
  • Other legitimate business purposes

c. Your Rights

Depending on your state of residence, you may have the following rights under the CCPA/CPRA in relation to personal information we have collected about you, to the extent required by the CCPA/CPRA and subject to verification:

Right to Know/Access: You have the right to request certain information about our collection and use of personal information about you:

  • The specific pieces of your personal information collected
  • The categories of your personal information collected
  • The categories of sources from whom your personal information is collected
  • The purpose for collecting your personal information
  • The categories of third parties with whom we have shared your personal information

Right to Delete: You have the right to request that we delete certain personal information we have about you.

Freedom from Discrimination: You have the right to be free from unlawful discrimination for exercising any of your privacy rights.

Right to Correct: You have the right to request that we correct inaccurate personal information regarding the information you provide us.

To make a request in relation to the above rights, please contact us using the information in Section 16 below. To fulfil your request, we will need to verify your identity. Only you or someone legally authorized to act on your behalf may make a request related to your personal information. To designate an authorized agent, the authorized agent must provide sufficient information that allows us to reasonably verify that you authorize them to act on your behalf. If you are requesting the information on behalf of a minor child, we will need to verify your identity and your authority to exercise the rights on behalf of the minor child.

14. How Long We Retain Your Information

We retain personal information about you for as long as necessary to provide you the Services and keep reasonable, legally permitted records for legitimate business purposes. In some cases, we retain personal information for longer, if doing so is necessary to comply with our legal obligations, or as otherwise permitted by applicable law. Afterwards, we retain some information in a de-identified and/or aggregated form but not in a way that would identify you personally.

Audio recordings, documents, and images uploaded through the Services are retained in accordance with this section and, where applicable, the retention and deletion terms of the applicable Subscription Agreement, DPA, or BAA.

You may request deletion of your account at any time from within the App by navigating to your Profile and selecting the option to request account deletion, or by contacting us at support@sagereport.com. When you submit a deletion request, your account is deactivated and scheduled for deletion, and you may cancel the request during a limited grace period. Following the grace period, your account and associated personal information are deleted, except where retention is required or permitted by applicable law or the applicable Subscription Agreement.

15. Updates and Changes to Privacy Policy

The effective date of this Privacy Policy is set forth at the top of this webpage. We will notify you of any material change by posting notice on this webpage. Your continued use of the Services after the effective date of any amendment to this Privacy Policy constitutes your acceptance of the amended Privacy Policy. We encourage you to periodically review this page for the latest information on our privacy practices. Any amended Privacy Policy supersedes all previous versions.

If you do not agree to future changes to this Privacy Policy, you must stop using the Services after the effective date of such changes.

16. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

SageReport, Inc. 251 Little Falls Drive Wilmington, DE 19808 Email: support@sagereport.com.