The Rig Report privacy policy

Privacy Policy

Last updated: September 22, 2026

Prudent Sagacity LLC · General Policy + Annex A (The Rig Report)

This Privacy Policy explains what Prudent Sagacity LLC, a North Carolina limited liability company (“we”, “us”, “our”), collects across all of the products and services we offer (each, a “Service”), why we collect it, who we share it with, how long we keep it, and the rights you have over it.

The short version. We collect the minimum we need to deliver what you bought and to keep the lights on. We do not sell your personal information, we do not use your content to train machine-learning models, and we do not share your data for advertising. Our site analytics use no cookies and do not track you across other websites. We delete customer content when the work is done.

The general policy below applies to every Service. The Annexes set out what is specific to each one — what that Service collects, who processes it, and how long it is kept.

Contents
  1. Who we are
  2. What we collect
  3. Why we use it, and our legal bases
  4. What we never do
  5. Who we share it with
  6. International transfers
  7. How long we keep it
  8. Security
  9. Cookies and analytics
  10. Your rights
  11. U.S. state privacy rights
  12. EEA, UK and Swiss rights
  13. Children
  14. Changes
  15. Contact and complaints

Annex A — The Rig Report

Part I — General Policy

1. Who we are

Prudent Sagacity LLC is the controller of the personal data described here. We are based in North Carolina, USA. Contact details are in Section 15. We have not appointed a Data Protection Officer, as we are not required to.

2. What we collect

Across our Services we collect the categories below. Which of them applies to you depends on the Service — see the relevant Annex.

Category What it is How we get it
Contact details Your email address, and your name where you give it. You give it to us.
Customer content Files, documents or other material you submit to a Service so we can do the work you bought. What this is varies by Service — see the Annex. You upload or send it.
Account data Where a Service has accounts: your username, a hashed password or third-party sign-in identifier, and your settings. You create it.
Order and payment reference What you bought, when, and a reference that lets us match your payment to your order. We never receive your card number, CVV or bank credentials. You give it to us, and our payment processor confirms it.
Transaction records That a payment of a stated amount was made, when, and by whom. From our payment processor.
Technical data IP address, browser and device type, referring page, pages viewed, approximate country or region, timestamps, server logs and error diagnostics. Automatically, when you use a Service.
Correspondence Emails you send us and our replies. You send it to us.

We do not ask for, and ask that you do not send us, government identifiers, financial account numbers, health information, or any other sensitive category of personal data. We do not knowingly collect sensitive personal information as defined under California law, and we do not use any such information to infer characteristics about you.

3. Why we use it, and our legal bases

Purpose Data used Legal basis (GDPR / UK GDPR)
To deliver what you bought Customer content, contact details, account data Performance of a contract
To take payment, match it to your order, and keep accounting and tax records Order and payment reference, transaction records, contact details Performance of a contract; legal obligation
To answer your questions and provide support Correspondence, contact details Performance of a contract; legitimate interests
To keep our Services secure, prevent fraud and abuse, and diagnose faults Technical data Legitimate interests (operating a secure service)
To understand aggregate usage and improve what we offer Technical data, aggregate counts Legitimate interests (improving our Services)
To send you service messages about something you bought Contact details Performance of a contract
To establish, exercise or defend legal claims, and to comply with law Any of the above, as strictly necessary Legal obligation; legitimate interests

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights and concluded they are not. You may object at any time (see Section 10).

Improving our methods. We may record non-identifying, aggregate observations from the work we do — for example, how often a particular class of problem occurs across all submissions. These observations contain no personal data, no content and nothing traceable to you.

4. What we never do

5. Who we share it with

We share personal data only with service providers who process it on our instructions for the purposes described, and only as needed to run a Service. They are bound by contract to protect it and not to use it for their own purposes. The providers used by each Service are listed in its Annex.

We may additionally disclose personal data: (a) where required by law, legal process, subpoena or a governmental request; (b) to enforce our Terms of Service or investigate a suspected violation; (c) to protect the rights, property or safety of Prudent Sagacity LLC, our customers or the public; or (d) to an acquirer or successor in connection with a merger, acquisition, financing or sale of assets, in which case we will require the recipient to honour this policy or give you notice and a choice.

6. International transfers

We operate from the United States, and our service providers process data in the United States and potentially elsewhere. If you are located in the European Economic Area, the United Kingdom or Switzerland, your personal data will be transferred outside your home jurisdiction to a country that may not offer the same level of protection.

Where the GDPR or UK GDPR applies and we pass your personal data to a service provider outside your home jurisdiction, we rely on the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), incorporated into our data processing agreements with the providers listed in the Annexes, or, where the provider is certified, on the EU-U.S. Data Privacy Framework and its UK and Swiss extensions. When you give us your data directly, you are sending it to us in the United States yourself. You may request further information about these safeguards using the contact details in Section 15.

7. How long we keep it

Retention is specific to each Service and is set out in its Annex. As a general rule we delete customer content promptly once the work you paid for is complete, and we keep only the minimum business record needed to evidence the transaction and satisfy tax and accounting obligations.

Where we are required to retain data longer by law, or where it is needed to establish, exercise or defend a legal claim, we retain it for that period and no longer.

8. Security

We use transport encryption (HTTPS/TLS) for our websites and upload forms, restrict access to customer content to those who need it to do the work, use reputable providers with their own security programmes, and delete data on the schedules set out in the Annexes so there is less of it to lose.

No system is perfectly secure. We cannot guarantee absolute security, and we ask you not to send us anything more sensitive than the Service requires. If we become aware of a breach affecting your personal data, we will notify you and the relevant supervisory authority where the law requires it.

9. Cookies and analytics

We use no advertising cookies and no cross-site tracking. Our site analytics are cookieless and aggregate: they record page views and coarse technical data without setting an identifier that follows you across other websites. Because we do not track you across sites, our Services do not change their behaviour in response to “Do Not Track” or Global Privacy Control signals. Where a Service uses strictly necessary cookies — for example to keep you signed in — that is stated in its Annex.

10. Your rights

Whatever your location, you may ask us to: give you a copy of the personal data we hold about you; correct it if it is wrong; delete it; restrict or object to how we use it; or provide it in a portable format. These rights are subject to the limits and exceptions in the law that applies to you. For example, we keep the transaction records described in the Annexes even if you ask us to delete your data. Where we rely on consent, you may withdraw it at any time without affecting processing already carried out.

Write to support@prudentsagacity.com. We will respond within thirty (30) days, or sooner where the law requires. We may need to verify your identity, ordinarily by confirming control of the email address used for the transaction. We will not discriminate against you for exercising these rights.

11. U.S. state privacy rights

We are a small business and fall below the thresholds at which the comprehensive privacy laws of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana and other states apply. We give every customer the rights described in Section 10 anyway, wherever they live.

We do not sell or share personal information and we do not conduct targeted advertising, so there is nothing to opt out of; the mechanism is nevertheless available by writing to us. If we decline a request you may appeal by replying to our decision, and we will respond to the appeal within forty-five (45) days. California residents may also designate an authorised agent to act for them.

12. EEA, UK and Swiss rights

If you are in the European Economic Area, the United Kingdom or Switzerland, and the GDPR, the UK GDPR or Swiss data protection law applies to our processing of your data, you have the rights in Section 10 under that law, and in addition the right to lodge a complaint with your supervisory authority. In the UK this is the Information Commissioner’s Office (ico.org.uk); in the EEA it is the authority for your country of residence, place of work, or the place of the alleged infringement.

We would ask you to raise the matter with us first so we have the chance to put it right.

13. Children

Our Services are not directed to children, and we do not knowingly collect personal data from anyone under eighteen (18). If you believe a child has provided us with personal data, write to support@prudentsagacity.com and we will delete it.

14. Changes

We may update this policy. The “last updated” date above will change, and the revised policy takes effect when posted. Where a change materially affects how we handle data you have already given us, we will notify you by email before it takes effect.

15. Contact and complaints

Prudent Sagacity LLC
514 E Dixie Dr #2003, Asheboro, NC 27203, United States
support@prudentsagacity.com

If you are unhappy with how we have handled your data, tell us and we will try to resolve it. You retain the right to complain to your supervisory authority as described in Section 12.

Part II — Service Annexes

Annex A — The Rig Report

Service: rigreport.prudentsagacity.com. Status: live.

A1. What this Service collects

Category Specifics
Contact details Your email address (required — it is where the report goes) and your name (optional).
Customer content The .hlx, .hls or .pgp preset files you submit. These contain block layouts and parameter values — settings data, not audio. They may also contain preset names you chose, which occasionally include personal references.
Rig details Your guitar and pickups, the lowest tuning you play, and any free-text notes about what you are chasing.
IR list (optional) A screenshot or .txt/.csv export listing your impulse response slots. Screenshots are reduced in size in your browser before they are sent.
Payment reference (optional) A Bluevine confirmation number, or the name or email you paid under, so we can match your payment to your submission.
Terms acceptance record When you tick the acceptance box at checkout or on the upload form: your email address, the time, your IP address and browser, the Terms version and the wording you agreed to.

No audio. Preset files are lists of knob positions and routing. We never receive a recording, and we never listen to your rig.

A2. Who processes it

Provider What it does What it processes
Vercel Inc. Hosts the Site and runs the upload endpoint; provides cookieless Web Analytics. Technical data, server logs, and your submission in transit.
Resend (Plus Five Five, Inc.) Delivers transactional email — your confirmation, the message carrying your submission to us, and your finished report. Contact details, rig details, and your preset files as email attachments.
Bluevine, Inc. Processes your payment and holds the merchant record. Payment and transaction data, under Bluevine’s own privacy policy. We never see full card details.
Google LLC (Google Workspace) Hosts the mailbox that receives your submission. Contact details, correspondence, and your submitted files as attachments, until deleted per A3.

Files are also stored, while a report is being prepared, on company-controlled devices under our physical and administrative control, and are deleted on the schedule below.

A3. How long it is kept

What How long
Your preset files and IR list — the uploads, the working copies on our devices, and the email attachments carrying them Deleted promptly after your report is delivered, and in any event within 30 days of delivery. We keep them briefly after delivery only so we can answer follow-up questions about your own report.
Corrected preset files we generated Deleted on the same schedule as the originals.
The rendered report Kept for up to 12 months so we can resend it if you lose it, then deleted. Tell us if you would rather we delete it immediately.
Delivery record — date, email address, name, number of presets, finding counts, message identifier, and the record of your acceptance of the Terms (time, IP address and Terms version) Retained as a business record for up to 7 years, to evidence that the Service was performed and to meet tax and accounting obligations.
Correspondence Retained while needed to support you, then deleted in the ordinary course.