Privacy Policy

Information You Provide:

• Contact Information: Name, email address, phone number
• Identity Verification Data: Information needed to verify your identity and distinguish you from others with similar names. Government ID verification is performed by Stripe Identity: your ID document, selfie, and any biometric identifiers derived from them are captured, processed, and retained by Stripe under its own privacy policy and compliance standards — never stored in, or accessible from, Sirveil's own database
• FOIA Order Data: If you purchase a FOIA Order, we collect the additional details federal agencies require before releasing personal records — your date of birth, place of birth, citizenship status, mailing address, and your electronic signature on the identity and authorization declarations each agency requires. We never ask for your Social Security number for a FOIA Order. Records that agencies release in response to your requests are stored in your dashboard as part of your account data
• Account Credentials: Email and password for your Sirveil account
• Communication Data: Messages exchanged with our AI assistants (including Sammy, your AI takedown agent) in the app

Information We Discover:

• Public Records: Court records, business filings, property records, and other publicly available data
• Data Broker Listings: Your information as it appears on people-search sites and data brokers
• Online Presence: Social media profiles, professional listings, and other online accounts associated with you
• Data Breach Exposure: Whether your information has appeared in known data breaches

What our marketing website does not collect: the public pages at sirveil.ai do not use advertising trackers, analytics cookies, or cross-site tracking, and the chat concierge on the website runs locally in your browser and sends us nothing. We use cookieless analytics (PostHog and Microsoft Clarity) to understand how our public pages are used — page views, clicks, and scrolling in aggregate, with typed input masked; these tools set no cookies and cannot recognize you across visits. Personal data collection begins only when you create an account in the app.

• Build Your Digital Profile: Create a comprehensive view of your online presence so you know what's out there
• Pursue Takedowns: Prepare and submit opt-out and takedown requests to data brokers on your behalf, as your authorized agent
• Scan for New Exposures: When you run a scan, check for new appearances of your information online — scans are member-initiated, not continuous background monitoring
• Surface New Findings: Flag new breach appearances and re-listed information surfaced by the scans you run, so you can act on them — findings come from actions you initiate, not from background surveillance
• Improve Our Services: Analyze patterns to make our protection more effective
• Communicate with You: Send service updates, security alerts, and respond to your inquiries

We do not sell your personal information. We may share information only in these circumstances:

• Service Providers: Trusted partners who help us deliver our services, each seeing only the minimum its role requires — including cloud hosting and email delivery, Stripe (payment and identity verification; we never see or store your full card number, and your ID document stays with Stripe — never in our database), Lob (verified mail and electronic transfers when a broker or agency requires formal correspondence), and Apple/Google (app distribution and platform payments)
• Data Broker Opt-Outs: We submit your information to data brokers solely to request removal of your listings. Once transmitted, a recipient processes that information under its own privacy practices as an independent controller — we choose what to send carefully (the minimum a request requires), but we cannot control what a broker does with it afterward
• Government Submissions — At Your Direction: When you purchase a FOIA Order, we transmit your identifying information and signed authorizations to the federal agencies you direct requests to — that is the product working, at your instruction. We disclose only what each agency’s own forms and rules require to process a request for your records. Once submitted, an agency handles that information under federal law, not under this policy
• Legal Requirements: When required by law — we disclose personal information to government authorities only in response to enforceable requests (such as search warrants, court orders, and subpoenas), we review every request for legal validity and appropriate scope before responding, and where lawful and practicable we will notify you before disclosure. We may also disclose information as necessary to protect our rights, our members, or public safety
• With Your Consent: Any other sharing will only occur with your explicit permission

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

• Encryption of data in transit and at rest
• Regular security audits and vulnerability assessments
• Access controls limiting employee access to sensitive data
• Secure authentication including multi-factor authentication options

No system is perfectly secure. If a security incident affects your personal information, we will notify you promptly and plainly, as required by applicable law — and as a matter of our own standing commitment to tell you when something goes wrong.

We retain your information for as long as your account is active or as needed to provide services. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention). Deleting your account also discontinues any takedown, opt-out, or FOIA requests still pending at that time (see Terms of Service, Section 13). Signed identity and authorization declarations executed for FOIA Orders may be retained after account deletion for as long as needed to evidence the authority under which requests were made, consistent with law. Government records released to your dashboard are part of your account data: they are deleted with your account, and you can delete individual released files at any time from the app.

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a portable format
• Opt-Out: Unsubscribe from marketing communications

To exercise these rights, contact us at [email protected].

Depending on where you live, state privacy laws (such as the California Consumer Privacy Act as amended by the CPRA, and similar laws in other states) may give you additional rights, including:

• Right to Know: The categories of personal information we collect (listed in Section 1), the purposes (Section 2), and the categories of recipients (Section 3)
• Right to Delete and Correct: As described in Section 6
• Right to Opt Out of Sale or Sharing: We do not sell personal information or share it for cross-context behavioral advertising, so there is nothing to opt out of — this is a design decision, not a setting
• Right to Non-Discrimination: We will never deny you service, charge different prices, or degrade quality because you exercised a privacy right
• Authorized Agents: Where state law provides, you may designate an authorized agent to submit privacy-rights requests to Sirveil (access, deletion, correction) on your behalf; we verify agent authority and your identity before acting. This applies only to privacy requests directed at Sirveil — it does not permit anyone to operate the Services on another person's behalf (see Terms of Service, Section 4). Separately, when you purchase services from Sirveil, Sirveil acts as your authorized agent toward data brokers and federal agencies under Terms of Service Section 5 — that is Sirveil working outward for you, which is different from an agent acting toward Sirveil on your behalf
• Right to Appeal: If we decline a request, we will explain why, and you may appeal by replying to our decision; where applicable you may also contact your state attorney general
• Sensitive Personal Information: FOIA Order Data includes items some state laws treat as sensitive personal information (for example, citizenship status). We collect it only to prepare and submit the government requests you order, use it for no other purpose, and do not sell it, share it, or use it to infer characteristics — uses state law permits without a "Limit the Use of My Sensitive Personal Information" link

Global Privacy Control & Do Not Track: We recognize Global Privacy Control (GPC) signals. Because we do not sell personal information or share it for cross-context behavioral advertising, there is nothing for the signal to switch off — but we honor it as a matter of design, and our public website sets no advertising or analytics cookies for it to act on. Browser "Do Not Track" signals are treated the same way.

To exercise any of these rights, email [email protected]. We verify each request to protect you — typically by confirming control of the email on the account — and respond within the time your state's law requires.

Our services are not intended for, and may not be used by or on behalf of, individuals under 18 years of age. We do not knowingly collect personal information from children, and the Services may not be used to search for or act on a child's information (see Terms of Service, Section 4).

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through our service. Your continued use of Sirveil after changes constitutes acceptance of the updated policy.

Sirveil, Inc.
Email: [email protected]

If any provision of this Privacy Policy is held invalid, illegal, or unenforceable, that provision shall be enforced to the maximum extent permissible and, if it cannot be so enforced, severed — and the validity and enforceability of the remaining provisions shall not be affected or impaired. This Policy should be read together with our Terms of Service, which govern your use of the Services.