Is Sift safe with your data?
Sift
Weak disclosure · high confidence
Sift earns a D (40/100) because it leaves much about its data practices unstated.
Dealbreaker flag
- D1.1: Sift may use the Customer Data ... for the limited purpose of providing, maintaining, and improving the Sift Services, which includes improving its machine learning algorithms and data models
- D1.4: grants Sift an unlimited, irrevocable, perpetual, sublicensable, royalty-free license to use any such feedback or labels for any purpose without any obligation or compensation to Customer
#150
of 216 apps ranked
40
score · Security & compliance avg 49
-9
vs category average
Sift discloses clear recipient categories, a named privacy contact and a ninety-day deletion window, but it reserves the right to train its models on customer data without any opt-out, takes a perpetual sublicensable licence over customer feedback, names no retention period, and commits to no breach notification.
What Sift's privacy policy and terms of service say about your data
Trains on customer data with no opt-out
Sift states it may use customer data to improve its machine learning algorithms and data models, and commingles that data with data from other customers. No opt-out or opt-in mechanism appears anywhere in the policy.
Perpetual, sublicensable licence over feedback
Fraud labels and feedback submitted by customers are taken under an unlimited, irrevocable, perpetual, sublicensable, royalty-free licence usable for any purpose, with no compensation and no limit to service delivery.
Deletion is conditional on the training carve-out
Customers may request deletion only upon termination, and the ninety-day deletion commitment is expressly made subject to the clause that lets Sift keep using customer data to improve its models.
No retention period and no breach notice
Retention is described only as an ongoing legitimate business need with no number attached, and the policy sets out no breach notification commitment or timeframe. Security controls are described only as technical and organizational.
What the policy is silent or vague on
- Not stated: keeping user inputs out of model training
- Not stated: a way to opt out of training
- Not stated: whether training use differs by plan
- Not stated: your ownership of generated outputs
Sift privacy rating
Details
- Category
- Security & compliance
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2026-04-20
- Region scored
- Global / US-default
- Last assessed
- 2026-10-13
Documents examined
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.