Privacy Policy
About this policy
DNG Software Pty Ltd provides Sightline 365 and this website. This policy explains the distinction between Microsoft 365 content processed on your computer and the information used to operate licensing, billing, this website and customer support. Contact us at support@sightline365.com.
Your Microsoft 365 content
The desktop app signs you in through Microsoft and sends search, preview and collection requests directly to Microsoft Graph and SharePoint APIs using your delegated permissions. Normal discovery and collection do not send your search terms, result lists, file names, documents or message content to a Sightline-hosted content service. Microsoft processes those requests under the terms and controls applicable to your Microsoft 365 environment.
Previews, saved searches, run records, audit reports, downloaded messages and ZIP archives can contain personal or confidential information on your computer. Optional Microsoft 365 copying sends selected content to the destination you choose. A local archive is a separate copy outside Microsoft 365; tenant retention, access, sensitivity-label and data-loss-prevention controls should not be assumed to follow it. You and your organisation control its storage, access, sharing and deletion.
Licensing, devices and usage
The app contacts our licensing service to check entitlements, start a collection trial when requested, activate devices, manage seats and validate/report collection operations. Depending on the action, the information includes:
- Microsoft tenant ID, account email or user principal name, the contact email supplied for a trial or purchase, and optional company details or promotion codes you provide.
- A generated device identifier, computer name, operating-system version, app version, activating/last-seen user identifiers and activation/last-seen timestamps.
- Trial history, plan, subscription and device-seat records, including device-release status, time and releasing user, together with entitlement and operation identifiers.
- Operation type, estimated and actual item counts, duration, error/warning counts, technical usage categories, app version and operation/report timestamps.
These records are associated with a tenant or device and are not anonymous. They support entitlement enforcement, trial budgets, billing administration, reliability and troubleshooting. Routine usage reporting does not include file contents, message bodies, search terms or file names.
The device identifier is derived from a machine identifier and a per-install random identifier. The raw machine identifier is not sent by the activation request, but the computer name and signed-in user identifier are sent separately. Device details can also be returned to the tenant's device-management screen, including when all licensed device seats are in use.
Sign-in and local storage
Your Microsoft sign-in is handled by Microsoft; the app does not ask you to send your Microsoft password to DNG Software. If you select "Keep me signed in", the app stores its remembered authentication cache using operating-system-backed encryption. Other local settings, licence records, saved searches, run logs, audit files and exported content are not all encrypted by the app. Protect your Windows account and storage accordingly. Signing out or uninstalling should not be relied on to erase every local report, archive or copy.
Support and diagnostic reports
Error reporting lets you review and save a diagnostic file locally, then open an email draft. The app does not automatically upload that report or send the email. If you send it, we receive the information you include, such as your contact details, description, app/OS versions and diagnostic events.
Detailed OneDrive diagnostics are off by default. When you enable them, the reviewed report can also contain search terms, request URLs and bodies, item identifiers, file names, paths, result metadata and error responses. This capture is kept in memory rather than automatically written to disk. Disabling it clears the active capture; restarting the app clears session diagnostics. Reports already prepared for review, saved files and sent attachments are separate copies and are not recalled by disabling capture. Review and remove sensitive information before sharing a report; do not send credentials, tokens or documents that you are not authorised to disclose.
Payments
Stripe hosts checkout and the billing portal and processes payment details under its own privacy policy. Our licensing service uses customer, checkout, subscription, payment-status and plan identifiers to fulfil purchases and keep entitlements current. It also stores signup and billing-event records, which can include contact/billing details and metadata returned by Stripe. Card entry takes place on Stripe, not in the desktop app. See Stripe's privacy policy.
Website analytics and service logs
When configured, this website loads Google Analytics to measure page visits, referral information, browser/device information and download-link events. Google Analytics may use cookies and similar identifiers. These website events are separate from desktop Microsoft 365 searches and collection content. Browser privacy settings and tracking protection may restrict analytics. See Google's privacy policy.
Website and licensing requests also make technical connection information, such as IP addresses, request times and response/error details, available to the relevant hosting services for operation and security. Licensing application logs can also contain tenant and device identifiers, account identifiers and activation or operation status.
Service providers and international processing
Microsoft Azure hosts our website and licensing infrastructure. Stripe provides payment services, Google provides configured website analytics, and email services process support correspondence that you send. These providers may process information outside your country under their service arrangements. Your Microsoft 365 content remains subject to your organisation's Microsoft arrangements, except for copies you export or choose to share with support.
Retention and your choices
Local files remain under your control. The app includes best-effort cleanup for older completed-run and audit records; incomplete runs, saved diagnostic files and exported archives should not be assumed to be automatically deleted. Disconnecting a source or signing out does not delete copies already created.
The current licensing application does not implement automatic age-based deletion of licence records, device registrations, usage metrics or licence audit events. Releasing a device marks its registration as released rather than deleting it. Administrative licence deletion is not a complete erasure of associated device, usage, billing or audit history.
This policy does not promise a fixed retention period or automatic deletion for hosting logs, support correspondence, licensing or service-provider records. Contact support to request information about records associated with your account or tenant, or to request access, correction or deletion, subject to identity verification, applicable law and any required record retention. For Microsoft 365 source content, contact your organisation's administrator.
Questions and complaints
Send privacy questions or complaints to support@sightline365.com. Describe the issue without including unnecessary sensitive content. You may also have rights to contact the privacy regulator applicable to your situation.
Effective: 2 November 2026.