Privacy
In short: your writing is yours.
The workshop works without an account, and what you write stays in your browser. If you create an account to connect your AI, we keep as little as possible — and you can delete it all yourself.
Last updated 28 October 2026
Who is responsible?
AC0 AI SLU operates Sigge and is the data controller. Send questions about your data to hej@sigge.si.
The workshop without an account
Your brief, voice samples and draft are processed in your browser and are not sent to Sigge. Frameworks, profiles and writing guides are fetched through read-only interfaces. Search terms are sent to the server to find matches but are not stored. If you choose to save your work, it is kept only in your own browser until you delete it.
If you create an account
We store your email address, your account ID and timestamps, your sign-in sessions (with IP address and browser user agent) and the AI connections you approve. One-time codes are stored hashed, expire after ten minutes and work only once. Your writing is never stored in the account. Legal basis: contract, to provide the account and connections.
When your AI uses Sigge
Queries your AI client sends to Sigge’s MCP server are processed to return an answer and are not stored. Access tokens last five minutes and are renewed until you revoke the connection. How your AI service handles your conversations is governed by that service’s own terms.
Field Notes
The AC0 Field Notes newsletter is optional and requires an active choice. We store when you opted in and whether the signup succeeded. Legal basis: consent. Unsubscribe using the link in any issue.
Security and abuse prevention
To prevent abuse we count attempts per IP address and email address. The counters use secret-keyed hashes instead of the addresses themselves. Legal basis: legitimate interest in a secure service.
Providers
Vercel hosts the website and processes ordinary traffic data. Turso stores the account database in the EU (Frankfurt). Resend delivers sign-in codes and Field Notes. If a provider processes data outside the EU/EEA, it does so under the safeguards in its data processing agreement, such as the EU Standard Contractual Clauses.
How long
Your account remains until you delete it. Sign-in sessions end after 30 days and one-time codes after ten minutes. When you delete your account, your email address, sessions, connections and Field Notes status are removed from Sigge’s database immediately.
Cookies and tracking
Sigge sets only an essential sign-in cookie when you sign in. We use no analytics of our own, no ad networks and no cross-site tracking.
Your rights
You can request access to, correction, export and deletion of your data, and object to processing based on legitimate interest. You can delete your account yourself under Connect your AI. You also have the right to complain to a data protection authority, for example where you live.
People profiles
Profiles are based on public sources and show names, portraits and links to the originals. They are our own applications, not endorsements by the people featured. To have a profile corrected or removed, email hej@sigge.si.