Privacy Policy

Last updated: April 1, 2026

This Privacy Policy describes how Cifral Solutions LLC ("we", "us", or "our"), operating as Cifral at cifral.io, collects, uses, protects, and shares your personal information.

1. Information We Collect

1.1 Information You Provide

We collect personal information that you voluntarily provide when you:

• Contact us: Name, email address, company name, role/title, message content
• Join our waitlist: Name, email address, company name
• Use our services: Business information, project requirements, technical specifications
• Create an account: Email, password, company details (if applicable)

1.2 Automatically Collected Information

When you visit our website, we automatically collect:

• Technical data: IP address, browser type, device information, operating system
• Usage data: Pages visited, time spent, referral source, click patterns
• Cookies: See our Cookie Policy for details

2. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Consent: When you submit forms, subscribe to communications, or accept cookies
• Contract performance: To provide services you've engaged us for
• Legitimate interests: Website analytics, security, fraud prevention, business development
• Legal obligations: Tax records, compliance with applicable laws

3. How We Use Your Information

We use your personal information for the following purposes:

• Service delivery: Provide sales automation services, customer support, project management
• Communication: Respond to inquiries, send updates about our services, send transactional emails
• Product development: Improve our services, develop new features, understand user needs
• Marketing: Send promotional materials (only with your consent; you can opt-out anytime)
• Legal compliance: Meet tax, accounting, and legal requirements
• Security: Protect against fraud, abuse, and security threats

4. Data Retention

We retain your personal data only as long as necessary for the purposes set out in this policy:

• Contact form submissions: 2 years from submission
• Waitlist signups: Until product launch or 2 years, whichever comes first
• Service contracts: Duration of contract + 7 years for legal/tax purposes
• Marketing data: Until you unsubscribe or withdraw consent
• Website analytics: 26 months maximum

5. Data Sharing and Recipients

We do not sell your personal information. We may share data with:

• Service providers: Resend (email), Notion (CRM/database), Vercel (hosting)
• Professional advisors: Lawyers, accountants, auditors (under confidentiality obligations)
• Legal authorities: When required by law or to protect our rights

6. International Data Transfers

Your personal data may be transferred to and processed in countries outside your country of residence, including the United States. We ensure appropriate safeguards are in place.

7. Your Rights (GDPR & Privacy Laws)

Depending on your location, you have rights regarding your personal data including: access, rectification, erasure, restriction, data portability, objection, and withdrawal of consent.

To exercise your rights, email us at info@cifral.io. We will respond within 30 days (or as required by applicable law).

8. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience on our website. For detailed information, please see our Cookie Policy.

9. Data Security

We implement appropriate technical and organizational measures to protect your data including encryption, access controls, and regular security assessments.

10. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.

12. Contact Us