Privacy Policy

We at Siftly ("Company," "we," "us," "our") know you care about how your personal information is used and shared, and we take your privacy seriously. Please read the following to learn more about our Privacy Policy.

By using or accessing our products, services or website (collectively, "Services") in any manner, you acknowledge that you accept the practices and policies outlined in this Privacy Policy, and you hereby consent that we will collect, use, and share your information in the following ways.

What does this cover?

This Privacy Policy governs our handling of personally identifiable information ("Personal Information") gathered when you access or use our Services. It does not apply to the practices of third-party companies or individuals we do not own, control, or manage.

Policy Updates

As we continuously strive to improve our Services, we may need to update this Privacy Policy periodically. Any changes will be announced by posting a notice on siftly.ai, sending an email notification, and/or employing other appropriate means. Please note that if you have opted out of receiving legal notices from us or have not provided us with your email address, you are still responsible for reviewing and understanding any updates, which will govern your continued use of the Services. By continuing to use the Services after any Privacy Policy changes have been posted, you signify your agreement to the revised terms.

The information we collect

• Information You Provide to Us: We receive and store any information you intentionally provide to us. For example, we may collect Personal Information such as your name, email address, and phone number when you register for an account or utilize certain features. Providing certain information may be required to access some of our Services. We may communicate with you using the contact information you have provided, such as sending promotional emails from other businesses or notifications about your use of our Services. We may also receive confirmation when you open an email from us, which helps us improve our communications and services.
• Information We Collect Automatically: Whenever you interact with our Services, we automatically receive and record information on our server logs from your browser or device, which may include your IP address, geolocation data, device identification, "cookie" information, the type of browser and/or device used to access our Services, and the specific page or feature requested. "Cookies" are identifiers transferred to your browser or device that allow us to recognize your browser or device and track how and when pages and features are visited. You may be able to adjust your browser or device preferences to prevent or limit cookie acceptance, but this may impact your ability to use some of our features. If you click on a third-party website or service link, that third party may also transmit cookies to you. This Privacy Policy does not cover the use of cookies by any third parties, and we are not responsible for their privacy policies and practices.
• Information from Other Sources and Do Not Track: Through cookies placed on your browser or device, we may collect information about your online activities after leaving our Services. Like any other usage data we collect, this information allows us to enhance the Services, personalize your experience, and fulfill the purposes described in this Privacy Policy. While your browser may offer a "Do Not Track" option, our Services currently do not support Do Not Track requests. This means we may collect information about your online activities both while using our Services and after you leave.

Connected Accounts & Google User Data

Some Siftly features let you connect third-party accounts that you own or are authorized to manage so that we can analyze and improve your product listings, search presence, and traffic. We access data from these accounts only after you grant permission through each provider's official authorization (OAuth) flow, and only to provide the features you request. You can disconnect any connected account at any time (see Data Retention & Deletion below).

When you connect a Google account, we request access using the following Google OAuth scopes, and use the data as described:

• Google Merchant Center (scope https://www.googleapis.com/auth/content). We read your product listings and their attributes (such as title, description, images, price, availability, GTIN, MPN, and SKU) and product performance data. Only when you explicitly request an optimization, we write updated product attributes back to a supplemental feed in your Merchant Center account. We do not delete your products or change your account settings.
• Google Manufacturer Center (scope https://www.googleapis.com/auth/manufacturercenter). We read your manufacturer product attributes and the list of brands approved for your account. This access is read-only.
• Google Search Console (scope https://www.googleapis.com/auth/webmasters.readonly). We read search-performance data for sites you have verified, including search queries, clicks, impressions, click-through rate, and average position. This access is read-only.
• Google Analytics (scopes https://www.googleapis.com/auth/analytics.readonly and, optionally, https://www.googleapis.com/auth/analytics.manage.users.readonly). We read aggregated analytics for the Google Analytics property you select, such as sessions, users, pageviews, traffic sources, and referral attribution, in order to show you reporting inside Siftly. This access is read-only.

We also support connecting a Shopify store, in which case we read your product catalog and, only when you request it, write optimized product and content updates back to your store. Shopify data is handled under this Privacy Policy in the same way as the data described above.

When you connect an account, we store the resulting authorization (OAuth) access and refresh tokens encrypted at rest, together with the identifiers needed to reference the account you selected (such as a Merchant Center ID, Analytics property ID, or verified site URL). We never receive or store your Google account password.

How We Use Google User Data (Limited Use)

Siftly's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use data obtained from Google APIs only to provide and improve the user-facing features you request within Siftly (such as analyzing and optimizing product listings and showing you search and analytics reporting).
• We do not use Google user data for advertising purposes.
• We do not sell Google user data, and we do not transfer it to third parties except as necessary to provide or improve these features, to comply with applicable law, or as part of a merger or acquisition as described below.
• We do not use Google user data to train, develop, or improve generalized or standalone artificial intelligence or machine-learning models. Where we use AI to power features (see Service Providers and Sub-Processors), your data is processed solely to generate results for you and is not used by us or our providers to train their models.
• Humans do not read your Google user data except where you give explicit consent to view specific data, where it is necessary for security purposes (such as investigating abuse) or to comply with applicable law, or where the data has been aggregated and anonymized.

Third-Party Services

We use the following third-party services that may collect or process Personal Information about your visit. These providers act as our service providers or as independent data controllers and are governed by their own privacy policies.

• Google Analytics 4. We use Google Analytics to understand how visitors interact with our Services. Google Analytics collects information such as IP-derived geolocation, device and browser information, pages viewed, referring URLs, and engagement events. You can opt out of Google Analytics tracking using the official browser add-on at tools.google.com/dlpage/gaoptout.
• PostHog. We use PostHog for product and website analytics. PostHog automatically captures interactions on our site (such as clicks, form submissions, and pageviews) and may record session replays of your interactions to help us understand and improve user experience. PostHog also collects standard analytics data such as IP-derived geolocation, device, and browser information. To opt out of PostHog tracking on our site, please contact us at [email protected].
• RB2B (B2B Visitor Identification).We use RB2B, an identity-resolution service, to identify businesses and professionals who visit our website. When you visit our Services, cookies and similar technologies may be used by RB2B and its data partners to associate your visit with other information they hold about you, including your business email address, name, job title, employer, and LinkedIn profile. We (or service providers acting on our behalf) may use this information to send you sales or marketing communications. You can opt out of RB2B's collection at rb2b.com/rb2b-gdpr-opt-out (for visitors covered by GDPR) or app.retention.com/optout (general opt-out).

Service Providers and Sub-Processors

To deliver Siftly's features, we share data — including, where necessary, data from your connected accounts — with a limited set of service providers who process it on our behalf under contractual confidentiality and security obligations. They are not permitted to use your data for their own purposes. These include:

• AI model providers (OpenAI, Anthropic, and Microsoft Azure OpenAI) to generate product-listing optimizations and content. Data sent to these providers is processed only to produce results for you and is not used to train their models.
• Web data and search providers (Bright Data, Firecrawl, and DataForSEO) to collect publicly available product, pricing, and search-result information.
• Payment and communication providers (Stripe for billing and payment processing, and Resend for transactional and service-related email). Stripe processes your payment details under its own privacy policy; we do not store full card numbers.
• Cloud infrastructure providers (including Microsoft Azure) that host our application, database, message-queue, and caching layers.

As stated under How We Use Google User Data (Limited Use), we do not transfer Google user data to these or any other parties except as necessary to provide the features you request, to comply with applicable law, or as part of a merger or acquisition.

Sharing Your Information

We do not rent, sell, or share your Personal Information in an individually identifiable form with anyone. We do not view, sell, or collect any data related to our Services that we have not been granted access to. However, we may share your Personal Information with third parties in the following circumstances:

Information that's been de-identified. We may de-identify your Personal Information so that you cannot be identified as an individual and provide that information to our partners. We may also share aggregate usage information with partners, which can help them understand how and how often people use our Services. However, we will never disclose aggregate or de-identified information in a way that could identify you as an individual person.

Affiliated Businesses:In certain situations, businesses or third-party websites we're affiliated with may sell or provide products or services to you through or in connection with our Services. When an affiliated business is involved, we will share your Personal Information with that business only to the extent necessary for facilitating that particular transaction or service. We have no control over the policies and practices of third-party websites or businesses, so if you choose to engage with an affiliated website or business, please review their respective policies.

Agents: We employ other companies and individuals to perform tasks on our behalf, which may require sharing your information with them to provide products or services to you. Unless otherwise stated, our agents do not have any right to use the Personal Information we share with them beyond what is necessary to assist us.

User Profiles and Submissions: Certain user profile information, such as your name, location, and any video or image content you have uploaded to our Services, may be displayed to other users to facilitate interaction within our Services or address your requests. Your username may also be visible to other users when you send messages, comments, or upload images or videos through our Services.

Business Transfers: In the event that we are involved in a merger, acquisition, or sale of all or a portion of our assets, your Personal Information may be transferred as part of that transaction, provided that the receiving party agrees to honor the commitments made in this Privacy Policy.

Protecting Siftly and Others: We reserve the right to access, read, preserve, and disclose any information that we believe is necessary to comply with legal obligations or court orders, enforce or apply our Terms and Conditions and other agreements, or protect the rights, property, or safety of Company, our employees, our users, or others.

How We Secure Your Information

Your account is protected by a password for your privacy and security. You are responsible for preventing unauthorized access to your account and Personal Information by selecting and safeguarding your password appropriately and limiting access to your computer, device, and browser by signing off after finishing your session. We endeavor to protect the privacy of your account and other Personal Information we hold in our records, but unfortunately, we cannot guarantee complete security. Unauthorized entry or use, hardware or software failure, and other factors may compromise the security of user information at any time.

Credentials for your connected accounts — including the OAuth access and refresh tokens we receive when you authorize an integration — are transmitted only over encrypted connections (TLS) and are stored in access-controlled infrastructure that is encrypted at rest. Access to these credentials is restricted to the systems and personnel that require it to operate the features you have enabled, and you can revoke that access at any time by disconnecting the integration.

Data Retention & Deletion

We retain the data described in this Privacy Policy for as long as your account is active or as needed to provide you the Services. You can disconnect any connected account (Google Merchant Center, Manufacturer Center, Search Console, or Analytics, as well as Shopify) at any time from within Siftly. When you disconnect an integration, we delete the stored OAuth tokens for that integration and stop accessing the associated account. You may also revoke Siftly's access directly from your Google Account security settings at myaccount.google.com/permissions.

Data we retrieve from Google APIs to render your reporting is cached only transiently and refreshed from the source; it is removed when you disconnect the integration. When you request deletion of your account or specific data by contacting [email protected], we delete the associated Personal Information and connected-account data from our active systems within a reasonable period, except where we are required to retain it to comply with legal obligations, resolve disputes, or enforce our agreements. Aggregated or de-identified data that can no longer be associated with you may be retained.

Accessing Your Information

You may access, and in some cases, edit or delete the following information you've provided to us:

• name
• email address
• phone number

The information you can view, update, and delete may change as our Services evolve. If you have any questions about accessing or updating your information, please contact us at [email protected].

Your Choices and Control

You can choose not to disclose information to us, but please note that certain information may be required to register for an account or access some features. You may be able to add, update, or delete certain information as explained above. However, when you update information, we may maintain a copy of the previous version in our records. You can request the deletion of your account or information by sending a request to [email protected]. Please note that some information may remain in our records even after you delete it from your account. Siftly does not sell or rent any of your personal information, including that of minors under the age of sixteen (16), to third parties. While Siftly does not consider the use of advertising cookies on our site as a sale, you have the right to opt out of it.

Questions or Concerns?

If you have any questions or concerns regarding our privacy policies, please send us a detailed message to [email protected], and we will endeavor to resolve your concerns.

By using Siftly, you acknowledge that you have read, understood, and agree to be bound by these privacy policies.