Privacy Policy

Peek provides a multi-tenant platform. When an organisation creates a workspace (a "tenant") and builds or publishes applications, that organisation is the controller of the data entered into its applications ("Tenant Data"), and Peek processes Tenant Data on its behalf. Peek is the controller of account information for people who sign in to the Service and of information collected through our public website.

• Account information: name, email address, profile image and authentication identifiers, including identifiers received from your organisation's identity provider when single sign-on (OIDC) is used.
• Workspace information: workspace names, branding, members and roles, plan, domain configuration and settings.
• Application models: the data models, workflows, rules, pages, personas, automations and integration configuration you define in Studio, stored as versioned models.
• Tenant Data: records, field values, attachments, comments, notifications and other content entered into applications by workspace members and application users.
• Audit logs: a hash-chained ledger of actions taken in a workspace, including the acting user, action, target, timestamp and IP address.
• Usage information: metered usage events (records, workflow runs, automations, Sigma tokens), diagnostic logs, device and browser information and pages visited.
• Communications: messages you send to us, including support requests.

• To provide, operate, secure and improve the Service, including tenant isolation, backups and the audit ledger.
• To compile and serve your applications, run automations and deliver notifications and email on your behalf.
• To provide Sigma AI features when you or your users invoke them (see below).
• To meter usage, enforce plan limits and, where applicable, bill for the Service.
• To communicate with you about the Service, respond to support requests and send administrative notices.
• To comply with legal obligations and enforce our terms.

Sigma AI generates proposals such as blueprints, drafted field values, summaries, answers and insights. When Sigma is invoked, the relevant prompt and context, which may include portions of your application model and Tenant Data, are sent to OpenAI to generate a response. We use OpenAI's API under terms that do not permit use of your inputs or outputs to train their models. Sigma outputs are presented as proposals for human review; Sigma does not modify your model or records without a person approving the proposal. Sigma usage is subject to per-workspace daily token budgets and is recorded in the usage ledger.

We share information only as needed to provide the Service: infrastructure and database hosting, email delivery (for example, transactional email sent through Resend), AI model providers (OpenAI, as described above), and error and performance monitoring. We do not sell personal information. We may disclose information if required by law or to protect the rights, safety and security of Peek, our customers or the public.

Tenant Data is isolated at the data layer by workspace, and cross-tenant access paths are exercised by an automated isolation suite on an ongoing basis. We use encryption in transit and at rest, role- and persona-based access control, and a hash-chained audit ledger. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain account information for as long as your account is active. Workspace information, application models, Tenant Data and audit logs are retained for as long as the workspace exists and for a limited period afterwards to allow recovery, after which they are deleted or anonymised. Workspace owners may request deletion of a workspace at any time. Usage and diagnostic logs are retained for a limited period for operational purposes.

Depending on your location, you may have rights to access, correct, export or delete your personal information, to object to or restrict certain processing, and to lodge a complaint with a supervisory authority. If your information is held as Tenant Data in a workspace controlled by your organisation, please direct requests to that organisation; we will assist them in responding. Otherwise, contact us at the address below.

We use cookies and similar technologies to keep you signed in, remember preferences such as theme, and understand how the website and Service are used. You can control cookies through your browser settings; some features may not function without them.

The Service is intended for organisations and their authorised users and is not directed at children under 16. We do not knowingly collect personal information from children.

We may update this policy from time to time. We will post the revised policy on this page with a new "last updated" date and, for material changes, notify workspace owners.

Questions about this Privacy Policy or our data practices: [email protected].