Personal data and deletion

What we keep

We keep your account ID, your email address at the sign-in service and your display name. We keep your questions, answers, conversations and shares. We keep your credits and payments. Technical logs and error reports can contain your account ID but no questions.

Free credits and a fingerprint of your email

When you use the service, we make a fingerprint of your verified email address with a secret key (HMAC). We keep the fingerprint with your account while the account exists. The address cannot be read from the fingerprint. We first write the address in one standard form, for example in lower case. Only one account per normalized email address gets free credits. Another account with the same address can buy credits. The purpose is to stop accounts that are only made to get new free credits. The legal basis is legitimate interest (GDPR Article 6(1)(f)).

Why we keep it

We need the account, questions and answers to give you the service (Article 6(1)(b)). We keep accounting records for payments as the law requires (Article 6(1)(c)). We protect the service against abuse and errors (legitimate interest, Article 6(1)(f)).

Who receives data

We use service providers for hosting, for sign-in and the database, for the AI model that answers questions, for payments and for error reports. Your question and the earlier questions in the same conversation go to the provider of the AI model. Payment data goes to the payment provider. Send questions about personal data to hello@siftica.com.

Delete your account

You delete the account in your Profile. You type your email address to confirm. You lose access immediately. Within 24 hours we delete your conversations, questions, answers, shares and drafts in Siftica's own systems. Copies that a service provider already received follow the terms of that provider. We cancel active subscriptions immediately. Unused paid credits are lost. If you want a refund, contact us before you delete the account. You cannot undo the deletion.

What we keep after deletion

Accounting records for payments are kept for at least 7 years after the end of the financial year (Swedish Bookkeeping Act). The payment provider keeps its own payment records, and they can contain your email address. Credit ledger rows and cost records from our service providers are kept without questions or answers. Technical logs, error reports and backups can contain your account ID. The sign-in service has its own audit log that can contain your email address and IP address. We keep your account ID and the deletion time while the service exists, so that an old sign-in cannot open the account again.

The fingerprint after deletion

At deletion we remove the link between the fingerprint and your account. We keep the fingerprint for 12 months and then delete it. For those 12 months, a new account with the same address gets no free credits, but you can buy credits.

Questions without an account

When Siftica accepts questions without an account, we keep the question and the answer for 24 hours. Then we delete them, normally within one hour. To count your free questions, we keep a keyed hash of the cookie and of the network address, never the IP address. We keep the hashes for 48 hours. If the free-question limit counts over a longer period, we keep them for that period, at most 7 days. Then we delete them. Cost records are kept without the question and the answer. The legal basis for the hashes is legitimate interest: to protect the service against abuse and high costs (Article 6(1)(f)).

Your rights

You can ask for access to, correction of and deletion of your data. You can object to processing based on legitimate interest. Contact hello@siftica.com if the free-credit block has stopped you by mistake. You can complain to the Swedish Authority for Privacy Protection (IMY).