Privacy Policy

Last updated: 25 May 2026

This Privacy Policy explains how Sifter (“we”, “us”) collects, uses, stores, and protects your personal data when you take part in the sift simulation, in line with the EU General Data Protection Regulation (GDPR) and the UK GDPR. By ticking the consent box before running a sift, you agree to the processing described here.

1. Who is responsible for your data

Sifter is the data controller for the personal data you provide through the sift simulation. If you have any questions about this policy or wish to exercise your rights, contact us at privacy@sifter.app.

2. What data we collect

When you run a sift, we process:

the contents of the CV you upload or paste, which may include your name, contact details, employment history, education, and other information you choose to include;
the role and experience level you select;
your account identifier and the timestamp of each sift, so we can apply usage limits and link your consent to your submission.

3. Why we use it and the legal basis

We process your CV data on the basis of your consent (Article 6(1)(a) GDPR), which you give by ticking the consent box before each sift. We use the data to:

run the sift simulation and return your result;
improve the accuracy of the sift — for your own future simulations as well as for other users — including by using submissions as reference material for pairwise comparison and model evaluation.

4. How long we keep it

We retain your submissions only for as long as necessary to provide and improve the simulation. You can ask us to delete your data at any time (see your rights below), and we will do so unless we are required to keep it to meet a legal obligation.

5. Who we share it with

We do not sell your personal data. We share it only with the infrastructure and AI processors needed to run the simulation (for example, our hosting and model providers), each bound by appropriate data-processing terms. Where data is transferred outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses.

6. Your rights

Under the GDPR you have the right to:

access the personal data we hold about you;
have inaccurate data corrected;
have your data erased (“right to be forgotten”);
restrict or object to processing;
receive your data in a portable format;
withdraw your consent at any time, without affecting processing already carried out before withdrawal.

To exercise any of these rights, email privacy@sifter.app. You also have the right to lodge a complaint with your local data protection authority.

7. Changes to this policy

We may update this policy from time to time. The “last updated” date above reflects the most recent revision. Continued use of the sift simulation after a change means you accept the updated policy.