Privacy Policy
This Privacy Policy explains what personal information SIFscan processes, why it processes that information, how long it keeps it, and what choices or rights users may have.
Who This Policy Covers
This policy applies to visitors, account holders, administrators, contributors, and other users of SIFscan's public website and authenticated tools.
Information We Collect
- Account data such as name, email address, role, password hash, and account status for users with login access.
- User content such as watchlist names, fund selections, uploaded documents, ingestion requests, and feedback or support correspondence.
- Technical and usage information such as IP address, device or browser characteristics, request logs, timestamps, and security events generated when you access the service.
- Session and browser-storage data, including authentication cookies, CSRF/security tokens, theme preference, and locally stored compare-list selections.
- Document-processing inputs and outputs, including extracted fields, classification labels, and, when enabled, LLM-assisted extraction prompts and responses used in admin workflows.
How We Use Information
- To authenticate users, operate accounts, enforce permissions, and maintain the service.
- To provide product features such as watchlists, compare flows, saved preferences, and document ingestion or review workflows.
- To detect abuse, secure the service, troubleshoot issues, log failures, and improve reliability.
- To communicate with users about support, legal notices, security incidents, or operational updates.
- To comply with law, respond to valid requests from regulators or authorities, and protect rights or safety.
Processing Grounds
Where required by applicable law, SIFscan processes information based on one or more of the following grounds: consent, performance of a contract, legitimate interests in operating and securing the service, and compliance with legal obligations.
How We Share Information
SIFscan does not sell personal information. It may disclose information to service providers and contractors that help operate the service, subject to appropriate confidentiality and use restrictions.
- Hosting, infrastructure, database, queueing, storage, and authentication providers.
- Professional advisers, auditors, insurers, or acquirers where reasonably necessary.
- AI/LLM processing providers for document extraction workflows when those features are enabled by SIFscan.
- Regulators, law-enforcement bodies, courts, or other third parties where required by law or necessary to protect the service or others.
Cross-Border Transfers
SIFscan and its service providers may process information in countries other than the country where you are located. By using the service, you acknowledge that your information may be transferred to and processed in those locations, subject to applicable legal safeguards where required.
Retention
SIFscan keeps personal information for as long as reasonably necessary for the purposes described in this policy, including account administration, document-processing workflows, security, dispute handling, and legal compliance.
Retention periods may vary depending on the nature of the data, whether an account remains active, operational needs, and applicable legal or audit requirements.
Your Choices and Rights
Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, objection, or withdrawal of consent. California residents may have rights to know, delete, correct, and port personal information, opt out of the sale or sharing of personal information, and limit the use of sensitive personal information under California law (CCPA/CPRA). SIFscan does not currently sell personal information or share it for cross-context behavioral advertising.
To make a privacy request, email hello@sifscan.com.
Cookies and Browser Storage
SIFscan uses essential cookies and local browser storage for authentication, security, and user preferences. See the Cookie and Browser Storage Policy for more detail.
Analytics and Microsoft Clarity
SIFscan partners with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve our products and services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization and fraud/security purposes. We do not use this data for advertising.
For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.
Security
SIFscan uses reasonable technical and organizational measures to protect information, but no system can be guaranteed to be fully secure. Users remain responsible for safeguarding credentials and using secure devices and networks.
Children
SIFscan is not directed to children and is not intended for users under 18 years of age. If SIFscan learns that it has collected personal information from a child in violation of applicable law, it will take reasonable steps to delete that information.
Policy Changes and Contact
SIFscan may update this Privacy Policy from time to time. The version posted on the site will apply from its stated effective date.
Privacy questions or complaints may be directed to hello@sifscan.com.
Related Legal Documents
Overview of the site terms, privacy commitments, cookie use, disclaimers, and data-use restrictions.
Terms of UseRules that govern site access, account use, permitted use, liability limits, and dispute handling.
End User License AgreementLicense terms for software features, exports, datasets, and any downloadable materials made available through SIFscan.
Cookie and Browser Storage PolicyHow SIFscan uses session cookies, security cookies, and local browser storage for product functionality.
SIFscan currently uses personal information primarily for authentication, watchlists, document processing, security, and service operation. It does not currently sell personal information or use advertising trackers.