Privacy Policy

• Account data: email address, name, and authentication identifiers when you sign up.
• Search queries: the names and terms you screen, to deliver results and enforce plan limits.
• Billing data: processed by Stripe; we store only subscription metadata, never card numbers.
• Technical data: IP address, browser, and request logs for security and rate limiting.

• Provide and operate the screening, AI summary, and reporting features.
• Enforce free-tier and plan-based limits.
• Detect abuse, fraud, and security incidents.
• Send account, billing, and transactional emails.

Sanctions records displayed in the Service originate from public government sources (OFAC, EU, UK OFSI, UN). We do not control the underlying designations. Inclusion of a person or entity in those lists is a determination made by the issuing authority.

We share data only with subprocessors required to run the Service: our cloud database and authentication provider, Stripe (billing), and our email delivery provider. We do not sell personal data.

Account and billing records are retained for the life of the account plus the period required by applicable law. Search query logs are retained for up to 12 months for security and quota enforcement.

Depending on your jurisdiction (e.g. GDPR, UK GDPR, CCPA) you may have rights to access, correct, delete, or export your personal data. Contact us at privacy@sanctionsscreening.io to exercise these rights.

We use industry-standard transport encryption (TLS), role-based database access, and row-level security policies. No system is perfectly secure; please use a strong, unique password.

We may update this policy from time to time. Material changes will be announced via the Service or by email.

Questions? Email privacy@sanctionsscreening.io.