Privacy Policy
This policy explains how Black Summit Holdings LLC handles information associated with its website, inquiries, transactions, fulfillment, and customer support.
SIGMA PROOFKIT for Windows
SIGMA PROOFKIT processes files you select on your Windows computer to create evidence packages and PDF reports and check recorded SHA-256 file integrity. The application does not require an account and does not include advertising, analytics, telemetry, or an evidence-upload service. Core package creation, report generation, and verification work without an internet connection.
Packages contain copies of selected evidence, original filenames, file sizes, recorded hashes, timestamps, and any descriptive information you enter. Original local source-directory paths are not recorded in package manifests by default. Evidence, filenames, and entered descriptions can still contain personal or confidential information. Review packages before sharing them and choose storage locations appropriate for their contents. If you select a network folder or a folder synchronized by another service, that system's own storage and sharing settings apply.
Verification does not modify evidence contents. The Windows interface also saves a verification record and PDF report in the selected package when its manifest is valid. The website link in About opens your browser when selected; visits to our website are covered by the website provisions of this policy.
For product support, use our SIGMA PROOFKIT support guidance. Do not send evidence packages, confidential documents, private keys, or passwords with an initial support request. We will request only the information needed to investigate the reported issue.
Information submitted through the contact form
The inquiry form may collect a name, organization, business email, inquiry category, short non-sensitive message, desired timeframe, preferred response method, and abuse-prevention data. The form does not accept attachments. Black Summit Holdings uses this information to route the inquiry, evaluate fit, respond, protect the service from abuse, and maintain necessary correspondence records.
AI Operations Assessment intake
The AI Operations Assessment eligibility intake may collect the business and authorized-contact names, business email, public website, business type, approximate team size, a non-sensitive description of the operating problem, up to five requested workflows, current tool categories, desired outcome, purchaser authority, information-boundary responses, and scope and policy acknowledgements. Black Summit Holdings uses this information to evaluate fit, prevent an inappropriate purchase, prepare for discovery, coordinate the service, document the accepted boundary, and maintain necessary transaction and service records.
The public intake does not accept attachments and is not an approved channel for credentials, customer records, protected health information, financial-account data, controlled information, proprietary source files, or other sensitive material. If a qualified engagement later requires additional information, Black Summit Holdings will first define the minimum necessary access and an appropriate handling method.
Transactions and payment processing
When direct purchasing is offered, payment occurs through Stripe-hosted Checkout or an approved Stripe Payment Link. Stripe processes payment-card information under its own privacy and security practices. Black Summit Holdings may receive the purchaser name, email, product or service, amount, payment status, tax information, transaction identifiers, and limited fraud or dispute information needed for fulfillment, support, refunds, accounting, and legal obligations. This website does not collect or store full payment-card numbers.
Fulfillment and support records
Black Summit Holdings may retain delivery status, the package or deliverable supplied, license version, delivery date, support correspondence, replacement history, and refund or dispute records. These records help confirm that the correct files and terms were provided and allow customer concerns to be resolved.
Limited AI Commerce Readiness Screening
When a person uses the BSH AI Commerce Readiness capability through ChatGPT, the screening processes the public merchant website URL and buyer objective supplied in the conversation. The screening may retrieve public website content and use Cloudflare Browser Run to perform bounded public interaction such as navigation, product or variant selection, add-to-cart, cart inspection, and safe checkout landing inspection. It does not create or use a customer account, enter personal or payment information, submit an order, bypass a CAPTCHA, or circumvent merchant controls.
The screening returns normalized public evidence, public URLs, timestamps, journey events, findings, evidence coverage, confidence, limitations, and related assessment metadata to ChatGPT. Browser cookies, browser profiles, local or session storage, and checkout state are discarded after the assessment. The current free screening does not maintain a Black Summit Holdings database of screening results, store full storefront copies, or persist screenshots. Cloudflare processes browser content and any transient screenshots only as needed to run the screening, subject to Cloudflare's applicable service practices.
OpenAI provides the ChatGPT interface and transmits the screening input and result as part of the user's ChatGPT interaction. Cloudflare provides hosting, security, request processing, and Browser Run. If the user chooses the separate Black Summit Holdings assessment link, the referral URL contains only the source, product identifier, and app version; it does not include the merchant URL, buyer objective, assessment identifier, score, findings, evidence, or screenshots.
Server logs, cookies, and analytics
The hosting and security providers may process IP address, browser and device information, requested pages, timestamps, error data, performance and capacity measurements, and security signals in ordinary server logs. AI Commerce Readiness application logs are limited to operational events such as start, completion or failure, duration, page and navigation counts, retry count, execution classification, score status, and rate-limit or capacity events. They are not designed to contain cookies, full page bodies, payment fields, personal information, or buyer objectives. Cloudflare Turnstile may use technical data necessary to distinguish legitimate visitors from automated abuse. Black Summit Holdings does not currently use advertising cookies, behavioral advertising, retargeting pixels, or cross-site profiling. If privacy-relevant analytics or cookies are introduced, this policy will be updated before use.
Third-party processors
Information may be processed by service providers supporting hosting, website security, email routing, payment processing, accounting, fulfillment, fraud prevention, or other necessary business operations. Information may also be disclosed when required by law, to protect legal rights, or to investigate fraud or misuse. Black Summit Holdings does not sell personal information.
Retention
Information is retained according to its purpose, including inquiry follow-up, transaction fulfillment, license verification, customer support, accounting, fraud prevention, dispute resolution, security, and legal requirements. Records that are no longer reasonably necessary are deleted or de-identified when practical, subject to backup cycles and legal obligations.
Security and information boundaries
Reasonable administrative and technical safeguards are used, but no website, email, or online service can guarantee absolute security. Do not submit classified information, Controlled Unclassified Information, export-controlled information, credentials, identity documents, financial-account information, protected health information, operational access details, proprietary source files, or other sensitive records through the public website or ordinary email.
Access, correction, and deletion requests
A person may request access to, correction of, or deletion of information they provided, subject to identity verification and records Black Summit Holdings must retain for transactions, security, disputes, or legal obligations.
Policy changes
This policy may be revised when the website, providers, legal requirements, or operating practices change. The effective date will be updated when a material revision is published.
Contact
Privacy questions or requests may be sent to [email protected].