Condifi

Privacy

Counsel review pending

Entity-level public records only. We hold no information about any individual.

The short version

Entity-level public records only. We hold no information about any individual. We do not buy consumer data, we do not track you across the web, and we do not sell anything about you.

What we collect from you

Only what you type in. If you request access, ask us for something, or report an error, we keep your name, your email, what you wrote, and when — because we cannot answer you otherwise. If you subscribe, we keep what you bought and what you were charged. That is the whole list.

What we collect automatically

A salted, one-way hash of your IP address on public forms, used only to rate-limit abuse. It cannot be reversed to an address and it is not linked to your identity. We do not run advertising trackers or third-party analytics on our public pages.

Who we share it with

Nobody, for money, ever. We use service providers to run the platform — hosting, database, email delivery, payment processing — and they see only what they need to do that job. We disclose information if the law compels us to, and we will tell you when we are permitted to.

How long we keep it

For as long as you are a customer, and afterwards for as long as we need it to answer a question about what we did. One exception, deliberately permanent: if you ask never to be contacted again, that record is kept forever. Deleting it is the only way we could accidentally contact you again.

Your rights, wherever you are

Ask us what we hold about you and we will tell you. Ask us to correct it and we will. Ask us to delete it and we will, except the do-not-contact record explained above. Ask us to stop emailing you and one click does it. Email us and a person answers — none of these requires a form or a reason.

California residents (CCPA / CPRA)

You have the right to know what personal information is collected, to delete it, to correct it, to opt out of sale or sharing, and not to be discriminated against for exercising any of these. The honest position: we do not sell or share personal information as those terms are defined, we do not use it for cross-context behavioural advertising, and we collect no sensitive personal information. The rights above still apply and we will honour them.

Children

This is a business tool. It is not directed at children and we do not knowingly collect anything from anyone under 16.

What we use it for

To decide whether to offer you access, and to reply to you. To deliver what you ordered, to the address you gave us. To take payment for work already delivered. To keep the service secure and to limit abuse. And to reach you about your own account — a delivery, a term ending, a payment problem. Nothing else.

We do not train on you

We do not sell your personal data, share it with advertisers, or use it to train AI models. We also do not send customer information to any AI provider: every report, alert and feed we deliver is assembled by ordinary software from filed records, so there is nothing of yours to send. That is a property of how the delivery path is built, not a promise about how we behave.

Your lists are kept apart

If you provide a list of your own accounts for a product to watch, it is stored so that no other customer can read it, and it is used only to produce your alerts. It is never merged into anything shared, never used to improve products for anyone else, and never sold or disclosed. You may ask us to delete it at any time and we will.

Where your information lives

Our database and sign-in system are operated by Supabase, hosted on Amazon Web Services in the United States, with row-level security enabled so records are reachable only through the paths we have deliberately opened. The site is hosted by Vercel. All traffic is encrypted in transit.

The companies that help us run this

These are the only outside services that receive any information about you. Supabase — our database and sign-in provider. Vercel — hosts the website and processes requests to it. Stripe — takes payment; you enter your card on Stripe's own checkout page and we never receive, see, or store card details. Resend — delivers our email: your sign-in link, your reports, and account notices. Sentry — tells us when something breaks, so we can fix it.

Nothing of yours goes out

What you give us stays with us. We never pass your information to any source we read, and nothing you give us is ever mixed into the work we publish.

Changes, and how you will know

If we change this materially we will say so on this page with the date, and tell subscribers directly. We will not change it quietly. Write to privacy@condifi.ai and we will respond within 30 days.

Written to be read, not to hide. Pending review by counsel; when that completes this label comes off. Nothing here waits on it — this means what it says today. Last updated 23 August 2026.

Terms · Privacy · Data practices