Privacy Policy

We build privacy tools, so it would be absurd to run a vague privacy policy. This page describes exactly what this website does with data — no more, no less.

The short version

• We set no cookies on this website.
• We use privacy-friendly, cookieless analytics that don't identify you.
• We don't run advertising, retargeting or cross-site tracking.
• We only get your personal details if you type them into a form or tell them to Sentry, our AI assistant.
• We don't sell or rent anything you give us.
• We don't train AI models on your conversations.

What we collect

Source	What is collected, and why
Analytics	We use Plausible Analytics, which is cookieless and does not collect personal data. It records aggregate page views, referrer and rough country — no cross-site profile, no device fingerprint, nothing that identifies you individually.
Contact & interest forms	When you submit a form we collect the fields you fill in: name, work email, company, organization size, role, enquiry type and your message. These are processed by Formspree and delivered to our team by email. We use them to reply to you and, if relevant, to scope a deployment.
Sentry (AI assistant)	If you open Sentry and send a message, we collect what you type, plus the page you started on and your browser's time zone (so it can offer meeting times in your own clock). Anything you choose to tell it — name, work email, company, role, size, what you're trying to solve — is collected because you said it. See Sentry below for how it is handled.
Abuse prevention	Sentry counts requests per IP address for an hour at a time, to stop the widget being used as a free AI endpoint. The counters hold an IP address and a number — no message content — and are deleted automatically once they expire.
Server logs	This site is served as static files by our hosting provider, which keeps standard request logs (including IP address) for operational and security purposes. We do not build profiles from them.

Third-party resources

Some assets on this site load from third-party networks. Because your browser requests them directly, those providers necessarily see your IP address and user agent. We don't send them anything else about you.

• fonts.googleapis.com and fonts.gstatic.com — web fonts
• cdnjs.cloudflare.com, cdn.jsdelivr.net, unpkg.com — icon and library assets
• plausible.io — analytics
• formspree.io — form delivery, only when you submit a form

Photo Scrubber

Photo Scrubber removes metadata from images. It's worth being precise about how it handles your files:

• Your images never leave your browser. Files are read locally and processed on a canvas element. We do not upload or store your photos, and we never see them.
• GPS coordinates are the exception. If a photo contains GPS location data in its EXIF metadata, the tool sends those coordinates — latitude and longitude only, never the image — to a third-party geocoding service (OpenStreetMap Nominatim, with Photon as a fallback) so it can show you the place name. This is how the tool tells you what your photo was revealing.
• If you'd rather no coordinates leave your device at all, work offline or strip location data before uploading the file to the tool.

Sentry, our AI assistant

Sentry is the chat assistant in the corner of this site. It is an AI, it says so in its first message and in its header, and it will confirm it plainly if you ask. It is there to answer questions about our products and, if it's useful to you, to book you a call.

• Your messages are sent to Anthropic to generate replies, using the Claude API. We do not train AI models on your conversations, and Anthropic does not train its models on API traffic.
• The conversation is stored for 30 days in our Azure storage, in the same region as the rest of our infrastructure, and is then deleted automatically by a scheduled job. That deletion is not a manual promise; it runs on a timer.
• If you give contact details, the conversation goes to our sales team — by email and Microsoft Teams, and into our CRM alongside your enquiry. Those copies are a record of a real sales conversation and are kept under normal business retention, which is longer than 30 days. In other words: the 30-day clock covers our working copy of the chat, not a lead record you created by asking us to get in touch.
• If you book a call, the appointment is created in Microsoft Bookings with the name and email you gave, and you get a calendar invitation.
• We don't log what you typed into our monitoring. Operational telemetry records timings, error codes and counts, not message content.
• Please don't paste credentials, API keys, live incident detail or customer data into it. Sentry will tell you the same thing if you start.

You never have to use it. Every page carries our contact form, and sales@privify.io reaches a person directly — the address is printed in Sentry's own header for exactly that reason. If you'd like a conversation deleted before the 30 days are up, ask and we'll do it.

How long we keep things

Form submissions arrive as email and are retained in our inbox and CRM for as long as needed to handle your enquiry and any resulting relationship. Sentry conversations are deleted from our working store after 30 days; if you shared contact details, the copy sent to our sales team is kept with your enquiry under the same CRM retention as a form submission. Analytics data is aggregate and holds no personal identifiers. If you'd like your enquiry deleted, ask and we'll do it.

Your rights

Depending on where you live, you may have rights to access, correct, delete or restrict use of your personal data, and to object to processing. To exercise any of them, email sales@privify.io. We'll respond within the timeframe required by applicable law, and we won't make you jump through hoops.

Changes

If we change how this site handles data, we'll update this page and its "last updated" date. Material changes will be called out clearly rather than buried.

Contact

Questions about this policy: sales@privify.io
Security issues: security@privify.io
Everything else: our contact form