Privacy Policy
1. Introduction & Legal Controller Details
Welcome to WatchSight, an intelligence software platform created and operated by Nicolau Martynyuk, trading as Spectime ("Spectime", "we", "us", or "our"), based in London, United Kingdom, and acting as the data controller of personal data. This Privacy Policy applies to all personal data processed through our website at watchsight.io (including related subdomains), browser extension, API infrastructure, and related online services and platform features, detailing how we collect, process, store, and safeguard your information in accordance with applicable UK and EU data protection legislation, including the UK Data Protection Act 2018 and UK GDPR, the EU General Data Protection Regulation (EU GDPR 2016/679), and the Privacy and Electronic Communications Regulations (PECR).
Age Limitation: WatchSight is not directed at children under 16 years of age, and we do not knowingly collect personal data from individuals under 16.
2. Categories of Data We Collect
A. Waitlist & Profile Data
When you register for early access or create an account, we collect your email address, assigned cohort sequence number, referral link data, and registration timestamp ("Waitlist & Profile Data").
Waitlist & Profile Data Retention: We retain this data for as long as you maintain an active account or reservation. If you close your account or request deletion, we will delete or anonymise your personal data unless we are legally required to retain certain records (such as financial records for up to 6 years under UK tax rules).
B. Browser Extension Data Extraction & Permissions
Our client-side browser extension reads public watch listing parameters (such as brand, model, reference number, price, condition, seller rating, and the listing URL on supported watch marketplaces) only when you actively request an analysis by clicking the WatchSight analysis button. The extension does not continuously monitor webpages or collect listing data automatically.
Extension Permissions: The browser extension requests only the permissions necessary to analyse supported watch listings when requested by the user. It does not access browsing activity beyond supported webpages required for the requested analysis.
Non-Invasive Operational Commitments:
- We do not track your general browsing history or monitor active tabs.
- We do not access personal credentials, passwords, or marketplace session cookies.
- We do not capture private buyer-seller marketplace communications.
C. Saved Inspection History
To provide WatchSight's core functionality, we save a history of your analysed watch listings and related valuation outputs under your personal account dashboard.
Data Retention & Deletion Mechanics: Your saved watch inspection history remains securely stored under your account until you manually delete specific entries, delete your account through available account controls, or request complete account termination by contacting us at legal@spectime.net.
D. Security & Infrastructure Telemetry
We collect IP addresses, browser user-agent information, and API request timestamps for security and system integrity purposes (for example, to detect abuse or prevent attacks on our services).
Telemetry Retention: Diagnostic security logs and request telemetry are retained only as long as necessary to ensure infrastructure protection (typically up to 30 days), after which they are automatically purged or aggregated.
3. Lawful Bases for Processing & Third-Party Service Providers
Under UK and EU data protection legislation, we must have a valid legal basis to process your personal data. Below is a summary of our processing activities and their corresponding legal bases:
| Processing Purpose | Data Categories Involved | Lawful Basis (UK/EU GDPR) |
|---|---|---|
| Waitlist Registration & Access | Email, referral link data, timestamp | Legitimate interests (operating & growing service) |
| Account Management & Valuation Output | Account profile, saved inspection history | Performance of a contract |
| Payment & Billing Processing | Subscription & payment metadata (via Stripe) | Performance of a contract (processing payments) & Legal obligation (financial record retention) |
| Infrastructure & Security Logs | IP address, user-agent, API timestamps | Legitimate interests (system protection) |
| Transactional & Update Emails | Email address | Transactional communications: contract necessity. Product updates: consent or PECR soft opt-in where applicable. |
| Tax & Accounting Compliance | Billing records, transaction history | Legal obligation (UK tax rules) |
Current third-party service providers involved in processing activities include:
- AI Infrastructure Providers (such as Google Cloud & AI model providers): Process structured watch listing information solely for the purpose of generating valuation estimates and risk assessments. Our system is designed to minimise the processing of personal data. Where incidental personal information appears within public listings, it is not used to identify individuals or for unrelated purposes.
- Email Delivery Services (Resend): Dispatches transactional emails (such as confirmations, early access invitations, and security alerts) based on contract necessity, and product update announcements based on consent or soft opt-in (where legally permitted). Every non-essential communication includes a direct one-click unsubscribe link.
- Payment Processors (Stripe): Securely processes subscription and other payments for your use of WatchSight. Raw payment card details are not stored on our servers.
- Web Hosting & Infrastructure (Vercel): Hosts web application infrastructure and processes aggregate performance telemetry under contractual data protection safeguards.
Note: Certain service providers (such as Stripe for fraud prevention and regulatory compliance) may also act as independent data controllers for specific processing activities where required by applicable law.
4. Web Analytics & Cookie Disclosures
We use privacy-focused website analytics (such as Vercel Web Analytics and Speed Insights) to measure aggregate traffic and website performance. These analytics process technical request metadata to help us optimize page speeds but are not used for behavioural advertising or cross-site profiling.
- Essential Cookies & Local Storage: WatchSight uses only essential cookies and browser local storage where necessary for security, UI theme preferences, and audio settings. Where applicable law requires consent for cookies or similar technologies, we will request that consent before use. We do not use advertising or cross-site tracking cookies.
- Zero Advertising & Tracking Scripts: We do not use Google Analytics, Meta (Facebook) Pixels, third-party advertising cookies, retargeting pixels, or behavioural data broker scripts.
5. International Data Transfers & Third-Party Processors
Spectime is operated from London, United Kingdom. Current processors and service providers include Stripe (payments), Resend (email delivery), Vercel (hosting and analytics), and Google Cloud & AI infrastructure providers (cloud infrastructure and valuation processing). Personal data collected on WatchSight may be transferred to and processed by these providers in countries outside the UK and European Economic Area (EEA), including the United States.
These providers process personal data strictly under contractual safeguards and solely for the purposes described in this Policy. To ensure an equivalent level of data protection, we rely on recognised legal mechanisms for international transfers, including the UK International Data Transfer Agreement (IDTA) / Addendum, EU Standard Contractual Clauses (SCCs), and applicable adequacy determinations.
6. Security Measures
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include encryption in transit (HTTPS/TLS), strict administrative access controls, secure cloud infrastructure, and routine security monitoring. While we maintain rigorous safeguards, no internet-based service can guarantee absolute security.
7. Statutory Disclosures: Legal Requests & Business Transfers
Legal Disclosures: We may disclose personal data where required by law, court order, or lawful request from competent public authorities or regulatory agencies.
Business Transfers: If Spectime undergoes a merger, acquisition, investment, or sale of assets, personal data may be transferred as part of that transaction, subject to applicable data protection laws.
8. Your Data Rights & Complaints Route (UK & EU GDPR)
Under UK and EU data protection legislation, you hold statutory rights regarding your personal information:
- Right to Access: Request a copy of your personal data held by Spectime.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your Waitlist & Profile Data, saved inspection history, and other personal data we hold about you, subject to statutory retention obligations.
- Right to Rectification: Request correction of inaccurate personal information.
- Right to Restriction: Request restriction of data processing under specific conditions (for example, while the accuracy of your data is being verified).
- Right to Data Portability: Request receipt of certain personal data in a structured, commonly used, and machine-readable format where the legal requirements for data portability apply.
- Right to Object: Object to processing based on legitimate interests or direct marketing communications. Where you object to direct marketing, we will stop such processing immediately.
Exercising Your Rights: When exercising your rights, please include sufficient information to identify your account and specify the exact nature of your request.
Response Timeframe: We aim to respond to valid data rights requests within one month of receipt, unless a longer period is permitted under applicable data protection law.
Identity Verification: We may request additional information to verify your identity before fulfilling certain requests (such as account deletion or data access).
Supervisory Authority Complaints: You also have the right to lodge a complaint with a data protection supervisory authority. In the United Kingdom, this is the Information Commissioner's Office (ICO). If you reside in the EU, you may complain to your local national supervisory authority.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect service updates, operational changes, or regulatory requirements. Updated versions of this Privacy Policy will be published on this page with a revised "Effective Date" at the top. For material changes affecting your rights, we will provide notice via email or prominent in-app notification prior to the change taking effect.
10. Contact Us & Data Protection Inquiries
To exercise your data privacy rights, request account erasure, or direct questions to Spectime as data controller, please contact:
- Legal & Privacy Email: legal@spectime.net
- Operative Entity: Nicolau Martynyuk trading as Spectime (London, United Kingdom)
- General Customer Support: support@spectime.net