Sail Research

Last Updated: June 25, 2026

This privacy policy (“Privacy Policy”) describes the types of personal data that Sail Research Co. (“Sail,” “we,” “our,” and/or “us”) collects, uses, and discloses from individuals (“you” or “your”) who use our website (including https://www.sailresearch.com/) (the “Website”).

As used in this Privacy Policy, “personal data” means any information relating to an identified or identifiable individual and includes any information that constitutes "personally identifiable information," “personal data,” or "personal information" under applicable privacy or data protection laws or regulations.

You acknowledge the collection, use, disclosure, procedures, and other processing described in this Privacy Policy.

Personal Data We Collect

We may collect a variety of personal data from or about you or your devices from various sources, as described below. Where applicable, we indicate whether and why you must provide us with your personal data, as well as the consequences of failing to do so. If you do not provide your personal data when requested, you may not be able to use the full extent of our Website if that personal data is necessary to provide you with our Website or if we are legally required to collect it.

Personal Data You Provide to Us

Website. We collect the personal data you provide to use when you use our Website.

Contact Information. We may collect your personal data when you inquire about us, or when you otherwise interact with us. This data may include your name, email address, company name, job title, phone number, and any data you choose to provide to us.

Communications. If you contact us directly, such as when you enquire about our enterprise accounts, we may receive personal data about you, such as your name, email address, the contents of a message or attachments that you may send to us. When you sign up for news and updates, we will collect your email address and other personal data. When you communicate with us online, our third-party vendors may receive and store these communications on our behalf. When we send you emails, we may use embedded pixels or other technologies to track information about your receipt and interaction with our emails, such as whether and when you open them, whether you access any links included in our emails, how long you read our emails, whether you forward our emails and to whom, your Location Information (described below), and your Device Information (described below), to learn how to deliver a better user experience and improve our Website.

Applicant Data. We collect personal data you provide to use when you apply for our open positions. Any information shared in this context, including any information you provide in your emails to us relating to your application, will be processed by us.

Personal Data We Collect When You Use Our Website

Location Information. We may collect and infer your general location information, including, for example, by collecting and using your internet protocol (IP) address.

Device Information. We may receive information about your device and software, including IP address, device type, device identifiers, web browser type and version, and operating system version.

Usage Information. We automatically receive information about your interactions with our Website, like the dates and times of your visits.

Information from Cookies and Similar Technologies. We and our third-party partners may collect information using cookies, beacons, invisible tags, and similar technologies (collectively “Cookies”) to provide functionality and to distinguish you from other users of our Website.

Cookies set by the website you are visiting are normally referred to as “first-party cookies”, and typically only track your activity on that particular site. Cookies set by other sites and companies (i.e. third-parties) are called “third-party cookies”, and can be used to track you on other websites that use the same third-party service. The Cookies placed through your use of our Website are either set by us or by a third party at our request.

Strictly Necessary Cookies

These Cookies are strictly necessary for our Website to function and cannot be switched off in our systems. They are usually only set in response to your actions which amount to a request for Website, such as setting your privacy preferences, or filling in forms. They are also used to protect our Website against unauthorized access, combat fraud and other activity that violates our policies or otherwise degrades our ability to provide our Website.

Performance Cookies

We also use Cookies for analytics purposes to better understand how you use our Website, to measure the effectiveness of our customer communications, to diagnose and fix technology problems, and otherwise enhance our Website. We may use our own analytics Cookies or third-party analytics providers to collect and process certain data analytics on our behalf. These Cookies allow us to count visits and traffic sources so we can measure and improve the performance of our Website. We also use these Cookies to analyze how people access and use our Website. If you do not allow these Cookies, we will not know when you have visited our Website and will not be able to monitor its performance.

The table below explains in more detail the types of Cookies we use and why: The table below explains in more detail the types of Cookies we use and why:

Cookie type	Name of cookie	Purpose	Expiration	Owner
Strictly necessary	__session	Clerk authentication — holds the signed-in session token used to keep you logged in to the dashboard.	Session (Clerk-managed)	Clerk (auth provider)
Strictly necessary	__client_uat	Clerk — indicates signed-in/out state so pages render correctly on first load.	~1 year (Clerk-managed)	Clerk (auth provider)
Strictly necessary	gh_connector_state	CSRF protection during the GitHub connector OAuth flow (Coding Agent).	10 minutes	Sail
Strictly necessary	sail_ref	Remembers a referral code through sign-up so referral credit is applied to the correct account.	30 days	Sail
Functionality	sail_org	Stores your organization’s display name/avatar (no credentials) so the docs site shows the correct account instantly.	30 days	Sail
Functionality	sidebar_state	Remembers whether the dashboard sidebar is expanded or collapsed.	7 days	Sail
Performance	ph_phc_swWFeS8UmvXvkQXkKksvR7oVUcamxpaT8dyDJNCKC2Uw_posthog	PostHog product analytics — an anonymous visitor/session identifier used to measure site usage, conversion funnels, and feature engagement across our sites.	~12 months	PostHog (analytics processor)

How We Use the Personal Data We Collect

We use the personal data we collect:

To provide, maintain, improve, debug, administer, and enhance our Website;
To communicate with you, provide you with relevant updates and other information, provide information that you request, respond to comments and questions, and otherwise provide customer support;
For marketing and advertising purposes, such as developing and providing promotional and advertising materials that may be relevant, valuable or otherwise of interest to you;
To generate anonymized or aggregated data containing only de-identified, non-personal data that we may use for any lawful business purposes;
To find and prevent fraud and abuse, resolve disputes, or respond to trust and safety issues that may arise;
To send technical notices, updates, security alerts and administrative messages;
For compliance purposes, including enforcing our contracts or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency;
To consider job applications; and
For other purposes for which we provide specific notice at the time the information is collected.

Legal Bases for Processing European Personal Data

If you are located in the European Economic Area (“EEA”) or the United Kingdom (“UK”), we only process your personal data when we have a valid “legal basis,” including as set forth below.

Consent. We may process your personal data where you have consented to certain processing of your personal data.
Contractual Necessity. We may process your personal data where required to provide you with our Website. For example, we may need to process your personal data to respond to your inquiries or requests.
Compliance with a Legal Obligation. We may process your personal data where we have a legal obligation to do so.
Legitimate Interests. We may process your personal data where we or a third party have a legitimate interest in processing your personal data. Specifically, we have a legitimate interest in using your personal data for internal analytics purposes, to understand how our customers and potential customers use our Website, and otherwise to improve the safety, security, and performance of our Website. We only rely on our or a third party’s legitimate interests to process your personal data when these interests are not overridden by your rights and interests.

How We Disclose the Personal Data We Collect

Partners and Affiliates. We may disclose any information we receive to our current or future affiliates for any of the purposes described in this Privacy Policy.

Vendors and Service Providers. We may disclose any information we receive to vendors and service providers retained in connection with our Website. For example, we may share data with our hosting service providers.

Analytics Partners. We may use analytics services to collect and process certain analytics data. These services may also collect information about your use of other websites.

As Required By Law and Similar Disclosures. We may access, preserve, and disclose your information if we believe doing so is required or appropriate to:

Comply with law enforcement requests and legal process, such as a court order or subpoena;
Respond to your requests;
Protect your, our, or others’ rights, property, or safety;
Protect against legal liability; or
Investigate fraud or other unlawful activity.

Merger, Sale, or Other Asset Transfers. We may transfer your personal data to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our assets.

Consent. We may also disclose your information with your permission.

Your Choices

Marketing Communications. You can unsubscribe from our promotional emails via the link provided in the emails. Even if you opt out of receiving promotional messages from us, you will continue to receive administrative messages from us.

Do Not Track. There is no accepted standard on how to respond to “Do Not Track” signals, and we do not respond to such signals.

Your European Privacy Rights. If you are located in the EEA or the UK, you have additional rights described below.

You may request access to the personal data we maintain about you, update, and correct inaccuracies in your personal data, restrict or object to the processing of your personal data, have your personal data anonymized or deleted, as appropriate, request not to be subject to a decision based solely on automated processing including profiling, or exercise your right to data portability to easily transfer your personal data to another company. In addition, you have the right to lodge a complaint with a supervisory authority, including in your country of residence, place of work or where an incident took place.
You may withdraw any consent you previously provided to us regarding the processing of your personal data at any time and free of charge. We will apply your preferences going forward and this will not affect the lawfulness of the processing before you withdrew your consent.

You may exercise these rights by contacting us using the contact details at the end of this Privacy Policy. Before fulfilling your request, we may ask you to provide reasonable information to verify your identity. Please note that there are exceptions and limitations to each of these rights, and that while any changes you make will be reflected in active user databases instantly or within a reasonable period of time, we may retain personal data for backups, archiving, prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where we otherwise reasonably believe that we have a legitimate reason to do so.

If you choose not to provide us with personal data we collect, some features of our Website may not work as intended.

Third Parties

Our Website may contain links to other websites, products, or services that we do not own or operate or permit you to integrate with third-party services. We are not responsible for the privacy practices of these third parties. Please be aware that this Privacy Policy does not apply to your activities on these third-party services or any data you disclose to these third parties. We encourage you to read their privacy policies before providing any data to them.

Retention

We retain personal data about you for as long as reasonably necessary to provide you with our Website, or otherwise in support of our business or commercial purposes. When you request that we do so, we take measures to delete your personal data or keep it in a form that does not permit identifying you when this personal data is no longer reasonably necessary for the purposes for which we process it, unless we are required by law to keep this information for a longer period. When we process personal data for our own purposes, we determine the retention period taking into account various criteria, such as the type of products and services provided to you, the nature and length of our relationship with you, possible re-enrollment with products and services, the impact on the products and services we provide to you if we delete some personal data from or about you, and mandatory retention periods provided by law and the statute of limitations.

Security

We make reasonable efforts to protect your data by using security measures designed to safeguard the data we maintain. However, because no electronic transmission or storage of data can be entirely secure, we can make no guarantees as to the security or privacy of your data.

Children’s Privacy

We do not knowingly collect, maintain, or use personal data from children under 18 years of age, and no part of our Website is directed to children. If you learn that a child has provided us with personal data in violation of this Privacy Policy, then you may alert us at privacy@sailresearch.com.

International Visitors

Our Website is hosted in the United States (“U.S.”). If you choose to use our Website from the EEA, the UK or other regions of the world with laws governing data collection and use that may differ from U.S. law, then please note that you are transferring your personal data outside of those regions to the U.S. for storage and processing. We may transfer personal data from the EEA or the UK to the U.S. and other third countries based on European Commission-approved or UK Government-approved Standard Contractual Clauses, with your consent, to perform a contract with you, or otherwise in accordance with applicable data protection laws. We may also transfer your data from the U.S. to other countries or regions in connection with storage and processing of data, fulfilling your requests, and operating our Website. For more information about the tools that we use to transfer personal data, or to obtain a copy of the contractual safeguards we use for such transfers (if applicable), you can contact us as described below.

Changes to this Privacy Policy

We will post any adjustments to the Privacy Policy on this page, and the revised version will be effective when it is posted.

Contact Information

Sail is the data controller and is responsible for the processing your personal data. If you have any questions, comments, or concerns about our processing activities, please email us at privacy@sailresearch.com or write to us at:

Sail Research Co. 327 Elizabeth Street San Francisco, CA 94114