Data Processing Overview – Sitewiz

Introduction

At Sitewiz, we are committed to transparent data handling practices while optimizing website performance. This document outlines how we collect, process, and store data, the technologies involved, and how we manage data separation to enhance security and compliance.

1. Types of Data Collected

We collect and process the following data during site optimization:

• Session Recording Data: User interactions such as clicks, page views, and scroll behavior.
• Technical Data (for non-EU clients): Location information, browser details, and device information.
• Performance Data: Page load times and resource loading statistics.
• User Behavior Data: Clickstream data and navigation paths.

2. How We Collect Data

We use the following technology to collect data:

• RRWeb:
  We use RRWeb to capture user interactions and session recordings.
  Sitewiz Tracking Script GitHub Repository
• RRWeb EU Version:
  For EU customers, we utilize a specialized version of RRWeb that:
  • Masks all text fields and image fields to avoid collecting PII (Personally Identifiable Information).
  • Ensures compliance with data protection regulations like GDPR.

3. How Data Is Processed and Stored

Processing Platform:
Data is processed on Amazon Web Services (AWS) infrastructure.

Data Segregation for Enhanced Security:

• Upon request, we can store each client's data in separate AWS S3 buckets.
• This separation helps mitigate the risk of data leaks and unauthorized access.
• AWS provides SOC 2 certified infrastructure, helping ensure your data benefits from a high standard of security and compliance practices.

4. Optional Client-Specific AI Model Training

We offer the option to train AI models on your specific data to:

• Improve optimization predictions.
• Estimate potential lifts from optimization suggestions.

These models are:

• Exclusive to your business.
• Not used to train or inform models for other clients.

5. AI Tools and Privacy

We use enterprise versions of AI tools to generate insights:

• OpenAI (Enterprise Version)
• Gemini (Enterprise Version)
• Claude (Enterprise Version)

These enterprise versions do not use your data for model training, ensuring your data remains private and secure.

6. Security Measures

• Encryption: Data is encrypted in transit (TLS) and at rest (AES-256).
• AWS Security: AWS infrastructure complies with SOC 2 standards, enhancing the security of your segregated data storage.
• Access Controls: Role-based access ensures that only authorized personnel handle your data.

7. Client Rights

You have the right to:

• Access the data we collect and process.
• Request corrections or deletions of your data.
• Opt out of optional AI model training.

8. Contact Information

For inquiries or requests regarding data processing, reach out to us at:
Email: team@sitewiz.ai