Privacy Policy

This summary provides key points from our Privacy Policy. You can find more detail in the corresponding sections below.

What personal information do we process? When you use Sift, we process the information you provide when you create an account (such as your name and email), the content of the research questions, options, factors, and comments you create in your spaces, and information collected automatically (such as device and usage data).

Do we request sensitive personal information? We do not request it for research. Content you submit may contain personal information; avoid including sensitive information, passwords or payment-card details in a comparison.

How do we process your information? We process your information to provide, improve, and administer our Services, to authenticate you, to communicate with you, for security and fraud prevention, and to comply with law.

How do we handle Google sign-in? If you choose to sign in with Google, we receive your basic profile information (name, email address, and profile picture) to create and authenticate your account. See "How do we handle your social logins?" below.

Do we sell your information? We do not sell your personal information for money, and we do not use Google user data for advertising. Google Tag Manager, Google Analytics and Meta Pixel measure limited conversions on public sign-in and billing pages when marketing tracking is enabled. This disclosure of limited usage data to Google and Meta may be treated as sharing for targeted advertising under applicable privacy laws. Research and private claim/OAuth pages are excluded. Optional browser product analytics through PostHog is enabled by default for our US launch. You can turn it off in Privacy choices. We honor Global Privacy Control as an opt-out of this sharing by keeping marketing tracking off.

Personal information you disclose to us

In short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you register for an account, use the Services, or contact us. The personal information we collect may include:

• names
• email addresses
• passwords (stored in hashed form)
• profile picture (if you sign in with Google)
• content you create in the Services — research questions, options, factors, comments, likes, pins, and any text, files, links, or images you import or upload

Sensitive information. We do not request sensitive information for research. If you include it in submitted content, it may be processed as part of providing the service. Avoid including it, especially in spaces viewable by link.

Guest comparisons and ChatGPT connections

You can create a comparison through our ChatGPT plugin without an account. We store the submitted question, options, factors, researched values, source links and quotes, together with a guest identifier and access-control information. Claiming a guest space associates that existing space with your Sift account.

When you connect an account, we process authorization records and tokens to let ChatGPT access Sift within the granted permissions. We receive the arguments sent to Sift tools, rather than your entire ChatGPT conversation. Tool results may return space content and account-accessible space listings to ChatGPT. OpenAI handles that information under its own terms and privacy policies.

When you ask the plugin to compare local options without naming a place, we use the approximate area ChatGPT shares with the request (town and region) to decide where to search. That area can become the comparison's location, which anyone who can view the space sees. We discard any coordinates ChatGPT includes.

Disconnect Sift in ChatGPT’s connection settings to stop using the connection. Disconnecting does not delete spaces or your account; contact us for those requests. Guest spaces also persist after a conversation ends unless deleted; do not assume closing a chat removes the saved comparison.

Social media login data. We provide you with the option to register and sign in using your existing Google account. If you choose to do so, we will collect the profile information described in "How do we handle your social logins?" below.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

In short: Some information — such as your IP address and/or browser and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, country, and information about how and when you use our Services. This information is primarily needed to maintain the security and operation of our Services, for our internal analytics and reporting purposes, and to measure how well our marketing reaches people. We collect this in part through cookies and similar technologies.

• Log and usage data. Service-related, diagnostic, usage, and performance information our servers automatically collect, such as your IP address, browser type, the pages and features you use, timestamps, and error reports.
• Device data. Information about the computer, phone, tablet, or other device you use to access the Services, such as IP address, device identifiers, browser type, hardware model, and operating system.

In short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

• To facilitate account creation and authentication and otherwise manage user accounts, so you can create and log in to your account and keep it in working order.
• To deliver and facilitate the Services. When you ask a question in Sift, we process your query to run our research pipeline — searching the web, classifying results, and producing option cards. This may involve sending the content of your query and related text to the third-party AI and search providers listed below, solely to generate your results.
• To enable user-to-user collaboration. When you share a space or invite others, we process information so members can view and comment on shared content.
• To respond to inquiries and offer support.
• To send administrative and service communications, such as space invitations, "your space is ready," and "deep search finished" notifications.
• To evaluate and improve our Services, products, and your experience, including identifying usage trends.
• To protect our Services, for security and fraud prevention.
• To comply with our legal obligations.

In short: We may share information with the third-party service providers described in this section. We do not sell your personal information.

Vendors, consultants, and other third-party service providers. We may share your data with third-party vendors and service providers who perform services for us or on our behalf and require access to such information to do that work. We have contracts in place that are designed to safeguard your personal information; they may not use it for their own purposes and must protect it. The categories of service providers we rely on include:

• Authentication: Google (Google Sign-In) for optional social login.
• Bot detection and security: Cloudflare, whose Turnstile service helps us tell human visitors apart from bots and block automated abuse when you sign up or reset your password. To do this, Cloudflare processes signals such as your IP address, a browser/device fingerprint, and your browser's User-Agent. Cloudflare's processing of this data is described in the Cloudflare Turnstile Privacy Addendum.
• AI and search providers: OpenAI, Anthropic, Google (Gemini), Inception Labs, and web search/scraping providers (such as Serper, Tavily, Brave, SerpAPI, Firecrawl, and Mapbox). We send the content of your research queries and related text to these providers only to generate and enrich your results. We do not permit them to use your content to train their models where an opt-out is available to us.
• Email delivery: Resend, to send account, invitation, and notification emails (and, where you forward content by email for import, to receive it).
• Product analytics: PostHog, to collect usage and performance data (such as pages and features used, events, and error reports) so we can understand how the Services are used and improve them. To check the quality of our results and fix problems, this also includes the text we send to and receive from the AI providers above when answering your question (your question, content you import, and the results generated for you). We do not send your account password to PostHog, we do not use this data for advertising, and it is not shared publicly.
• Advertising measurement: Google (Google Analytics, loaded through Google Tag Manager) and Meta (the Meta Pixel), when marketing tracking is on. They load only on our public sign-in and billing pages and record sign-ups, sign-ins, checkout starts and subscriptions, along with device and browser information and an identifier they set. Meta may use this data to show you ads for Sift and to measure whether those ads worked. We do not send them your account password, what you search for, or the contents of your spaces.
• Hosting and infrastructure: cloud hosting and database providers that store your account and space data.
• Connected apps: OpenAI receives the Sift tool results and space content needed to operate the ChatGPT plugin, including when you use guest comparisons. Account access is limited by the authorization and space permissions in Sift.
• Payments: Stripe processes subscription payments. We store billing identifiers, subscription status and billing-period information to provide your plan and manage billing. Payment-card details are entered in Stripe’s checkout, not in Sift research tools.

We may also share your personal information in the following situations:

• Business transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
• Other users. When you share a space, post comments, or otherwise interact with collaborative areas of the Services, that content and your name and profile picture may be visible to other members of that space. New ChatGPT-plugin spaces, including guest spaces, are viewable by anyone with their link. Content you put in them can be read and copied by those viewers; claiming a space does not make it private. A view link does not grant edit permission.
• Legal obligations. We may disclose your information where required to do so by law or in response to valid legal requests.

In short: If you choose to register or log in to our Services using your Google account, we may have access to certain information about you.

Our Services offer you the ability to register and log in using your Google account. Where you choose to do this, we receive certain profile information from Google — specifically your name, email address, and profile picture. We use this information only to create and authenticate your Sift account and to operate the Services as described in this Privacy Policy.

Google API Services Limited Use. Sift's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only request the basic profile and email scopes needed for sign-in, we use Google user data solely to provide and improve the Services, we do not sell it, and we do not use it for advertising. We recommend that you review Google's privacy policy to understand how it collects, uses, and shares your information, and how you can set your privacy preferences.

Essential cookies and browser storage support sign-in, security, guest edit access and saved settings. Browser product analytics is enabled by default for our US launch. Open Privacy choices (also in the menu and at the foot of our pages) to turn it off. Marketing tracking defaults on for this US launch and measures limited conversions on public sign-in and billing pages. You can turn it off separately. Research and private claim/OAuth pages are excluded. Global Privacy Control keeps marketing tracking off; product analytics follows your choice in Privacy choices.

When product analytics is on, your browser sends PostHog the pages you view, the features you use and the actions you take (including what you search for), error reports, and, when you are signed in, your account identifier, name and email address. Turning it off stops this browser reporting. It does not stop the result-quality processing described in section 3, where our servers send PostHog the text exchanged with AI providers to answer your request. When marketing tracking is on, Google Tag Manager loads Google Analytics and the Meta Pixel on public sign-in and billing pages only, to record sign-up, sign-in, checkout and subscription conversions, and they set their own identifiers.

Our servers also process operational information needed to deliver, secure and diagnose the service. These records are separate from optional browser analytics. AI and search providers receive content needed to perform the research you request.

Saved account spaces and guest spaces remain until deletion is requested. Closing a chat, disconnecting a plugin or leaving the website does not delete them. Research snapshots and associated uploads remain with the saved content until deletion.

Application diagnostic run logs and API caches have no automatic expiry. We keep them to operate, diagnose and improve the service until they are explicitly deleted, including when handling a verified deletion request. Account, access-control and billing records have separate purposes and may be subject to legal retention requirements.

Request account deletion from Account. For a guest space, open Privacy choices from the menu on that space, in the browser that created it. If you no longer have access, contact contact@siftspace.com so we can verify your request. Account deletion includes spaces you created, including shared spaces, and associated research and uploads; other people’s spaces remain available to them.

We distinguish removal from our application from completion of provider and backup follow-up. We review vendor copies, backup expiry or deletion, and any legal retention requirements separately. We do not promise that those copies disappear immediately. We retain a restricted deletion record to process the request and prevent restored backups from reintroducing deleted data.

In short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process, including hashing of passwords and encryption of data in transit. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that unauthorized third parties will not be able to defeat our security. You should only access the Services within a secure environment.

In short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age. By using the Services, you represent that you are at least 18, or that you are the parent or guardian of such a minor and consent to such minor's use of the Services. If we learn that personal information from users under 18 has been collected, we will deactivate the account and take reasonable measures to promptly delete such data. If you become aware of any data we may have collected from children under 18, please contact us at contact@siftspace.com.

In short: Depending on where you live, you may have rights to access, correct, or delete your personal information, and to withdraw consent.

Depending on your location, applicable privacy law may give you the right to request access to and obtain a copy of your personal information, to correct inaccuracies, to request deletion, and to withdraw consent. To make a request, contact us at contact@siftspace.com. We will consider and act upon any request in accordance with applicable data protection laws.

Account information. You can review or change the information in your account at any time from your account settings, or request that we deactivate or delete your account. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. We may retain some information to prevent fraud, troubleshoot problems, assist with investigations, enforce our legal terms, and/or comply with applicable legal requirements.

If you signed in with Google, you can also review or revoke Sift's access to your Google account at any time via your Google account permissions.

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature you can activate. No uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals. We do honor Global Privacy Control by keeping marketing tracking off. If a standard is adopted that we must follow in the future, we will inform you in a revised version of this Privacy Policy.

In short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this Privacy Policy. If we make material changes, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Policy frequently to stay informed about how we are protecting your information.

If you have questions or comments about this notice, you may email us at contact@siftspace.com or contact us by post at:

Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. To request to review, update, or delete your personal information, please email us at contact@siftspace.com.