The privacy, retention, and subprocessor detail behind the security commitments. Everything on this page is technically true today; anything set per engagement says so.
The lead and pipeline data required to research, score, and file each record for your raise: contact and role information, source and engagement history, the lead's own self-reported answers, and the receipts of every write Gold Sifter makes. Scoring never uses race, ethnicity, religion, health, or other protected attributes.
Your investor records live in your own CRM throughout the engagement. Gold Sifter's working copy is tenant-isolated on encrypted, operator-managed infrastructure in the US, fronted by Cloudflare.
Engagement-term retention by default. You can request a clean export at any time; it includes scores, tiers, confidence, and per-lead reasoning.
On cancellation, Gold Sifter's copy is handled per the retention terms of your agreement and deleted on request, confirmed to you in writing.
Any cross-raise aggregate use is governed by the aggregate-use terms in your agreement. One raise's records are never visible to another client.
No advertising trackers and no third-party cookies. This site uses a first-party, cookieless page-view counter only, and never places personal data in URLs.
The third parties that can touch engagement data, and what each does. This list changes only with notice at the engagement level.
| Provider | Role | Notes |
|---|---|---|
| Anthropic | AI model provider (research, scoring, analyst) | Commercial terms; customer data is not used to train shared models |
| Cloudflare | Edge network, DNS, transport | TLS on every connection |
| Google Workspace | Email delivery (dossiers, digests, replies) | Engagement email only |
| Stripe | Payments | Gold Sifter never sees card or bank numbers |
| Identity-verification vendor | Third-party verification and enrichment | Engaged only when the verified-identity add-on is purchased; named at onboarding |
A data processing addendum is signed as part of every engagement; request the current DPA for review during diligence. Formal public Privacy Policy and Terms of Use pages are in preparation; today, the engagement agreement and its data processing terms govern, and this page states the operating practice.