Back to home

Privacy Policy

Last updated: July 2026

What we collect

We collect only what's necessary to provide our service:

  • Account information (email, name)
  • Documents you upload to your vault
  • Usage data (page views, feature usage)

How we use it

  • To provide and improve our services
  • To communicate with you about your account
  • To ensure security and prevent fraud

What we never do

  • Sell your data to third parties
  • Use your documents or AI conversations to train AI models
  • Share your information without consent
  • Keep your documents after you delete them (tamper-evident audit records of past actions are retained for compliance)

Data security

Your documents are encrypted at rest (AES-256) and in transit (TLS 1.3). We maintain strict access controls and hash-chained audit logs. Data is hosted in the United States, with some document processing performed on our servers in the European Union (Germany).

Service providers

We rely on a small set of infrastructure providers to run the service: Supabase (database & storage), Vercel (hosting), Stripe (payments), Resend (email), Twilio (WhatsApp/SMS invites), Anthropic and Voyage AI (AI processing — contractually barred from training on your data), and Hetzner (document processing, EU). Email privacy@sifrsys.com for the full subprocessor list or a data processing agreement.

Your rights

You can:

  • Access, correct, or delete your data
  • Export your documents at any time
  • Close your account and have all data removed

Cookies

We use essential cookies for authentication and security. No tracking or advertising cookies.

Contact

Questions? Email us at privacy@sifrsys.com