Privacy Policy

Welcome to Siftly (“we”, “us”, or “our”). We operate the Siftly platform and website (the “Service”). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service, you agree to the collection and use of information in accordance with this policy.

We collect the following types of information:

• Account information — Your email address and password (stored securely via Supabase Auth). If you sign in with a third-party provider, we receive basic profile information from that provider.
• Uploaded content — Documents, PDFs, and notes you upload for AI-powered study and processing.
• Usage data — Pages visited, features used, session duration, and interaction logs used to improve the Service.
• Payment information — Payment is processed by Razorpay. We only store your subscription status and plan, not your card details.
• Device & technical data — Browser type, IP address, operating system, and referring URLs collected via standard web logs.

• To provide, operate, and maintain the Service
• To process uploaded content with AI for study features
• To manage your account and subscription
• To send important service updates and notifications
• To analyse usage patterns and improve the platform
• To detect and prevent fraud or abuse

We do not sell your personal data to third parties. We do not use your uploaded notes or documents to train AI models.

We use the following services that may process your data:

• Supabase — authentication, database, and file storage.
• Razorpay — payment processing for subscriptions.
• Vercel — hosting and infrastructure.
• AI model providers — your uploaded content may be sent to AI APIs solely to generate study materials. These providers are contractually prohibited from using your data for training.

We use cookies and browser local storage to maintain your login session and remember preferences. We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but some features may not function correctly as a result.

We retain your account data and uploaded content for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where required by law (e.g. billing records).

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Object to or restrict certain processing
• Receive your data in a machine-readable format (data portability)

To exercise any of these rights, email us at siftlycs@gmail.com.

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us immediately.

We implement industry-standard security measures including encrypted data transmission (HTTPS), secure authentication, and access controls. No method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page and, where appropriate, by email. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

Questions about this Privacy Policy? Contact us at siftlycs@gmail.com.