Privacy Policy

When you create a SiteSafe account, we collect your name, email address, company name, and payment details. Payment processing is handled entirely by Stripe — we never see or store your full card number.

When visitors check in at your sites, we store the data you choose to collect: full name, company, phone (optional), email (optional), host name, safety acknowledgment, pre-screening answers, photos, and digital signatures.

We use your account information to provide the SiteSafe service: creating and managing your account, sending service-related emails, and processing payments. We use visitor data solely to power the check-in and visitor management features you enable. We do not mine, sell, or advertise based on your data. Period.

All data is stored on secure servers provided by Vercel and Neon (PostgreSQL). Data is encrypted in transit using SSL/TLS and at rest using AES-256.

Visitor records are retained for as long as your account is active. You can delete individual visitor records or entire sites at any time from your dashboard. When a visitor record is deleted, all associated data — including photos and signatures — is permanently removed. If you cancel your account, all data is deleted within 30 days.

We use the following services to operate SiteSafe. Each has its own privacy policy:

We do not use third-party advertising trackers or analytics that follow users across the web.

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data, or to object to or restrict certain processing.

To exercise your rights, contact us at hello@thesift.space. We respond within 30 days.

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or via a notice on our website. Continued use of SiteSafe after changes take effect constitutes acceptance of the updated policy.