Privacy Policy

1. Who We Are

SanctionsAnalyzer is operated by EdgeCorp, LLC ("we," "our," or "us"). We provide sanctions screening software to compliance professionals and businesses. This Privacy Policy applies to all users of our website and Service.

2. Information We Collect

Category	Examples	How collected
Account data	Name, email address, company, job title, password (hashed)	You provide at registration
Billing data	Cardholder name, last 4 digits, billing address	Collected by Stripe; we receive limited tokenized data
Usage data	Search history, scan counts, API call logs, report names	Automatically generated as you use the Service
Technical data	IP address, browser type, session identifiers	Automatically collected by our servers
Customer screening data	Names, identifiers, and records you upload for screening	You provide via file upload or API

We do not collect Social Security numbers, government ID numbers, or financial account numbers as part of our account or billing process.

3. How We Use Your Information

We use the information we collect to:

Provide, operate, and improve the Service
Process payments and manage subscriptions
Send transactional emails (welcome, receipts, password resets)
Respond to support requests
Enforce our Terms of Service and detect abuse
Comply with legal obligations
Send product updates or promotional content (you may opt out at any time)

We do not use your data to train AI or machine learning models, and we do not sell your personal information to third parties.

4. Information Sharing

We share your information only in the following circumstances:

Service providers: We work with trusted vendors (Stripe for payments, AWS for email and infrastructure) who process data on our behalf under data processing agreements.
Legal requirements: We may disclose information when required by law, subpoena, or to protect the rights and safety of SanctionsAnalyzer, our users, or the public.
Business transfer: If we merge with or are acquired by another company, your information may be transferred as part of that transaction, subject to the same privacy protections.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

5. Screening Data

Data you upload for sanctions screening ("screening data") is treated with heightened care:

Screening data is used solely to perform the screening you requested
It is stored in our SQL Server database hosted in our infrastructure
It is not shared with any third party for screening or other purposes
Completed scan items are retained for 30 days to allow report retrieval, then purged
You are responsible for ensuring you have the right to submit the data you upload

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Specifically:

Account data: Retained while your account is active and for 90 days after deletion upon request
Screening/scan data: 30 days after scan completion, then purged
Search history records: Retained for the life of the account for audit trail purposes
Billing records: Retained for 7 years as required by tax law
Server logs: 90 days

To request deletion of your account and associated data, contact us at privacy@sanctionsanalyzer.com.

7. Security

We implement industry-standard technical and organizational measures to protect your information, including:

TLS encryption for all data in transit
Bcrypt hashing for passwords (never stored in plaintext)
SQL Server with access controls and encrypted connections
Session tokens stored server-side with secure, HttpOnly cookies

No system is completely secure. If you believe your account has been compromised, contact us immediately at security@sanctionsanalyzer.com.

8. Cookies and Tracking

We use a minimal set of cookies necessary to operate the Service:

Session cookie: Keeps you logged in during your browser session. Required for the Service to function.
Preference storage: We use browser IndexedDB (not cookies) to store your folder handle and column mapping preferences locally on your device.

We do not use advertising cookies, third-party tracking pixels, or analytics services that profile your behavior across other websites.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you
Correction: Update inaccurate information in your account settings
Deletion: Request deletion of your account and personal data
Portability: Request your data in a machine-readable format
Opt-out: Unsubscribe from marketing emails at any time using the link in any email we send

To exercise any of these rights, contact us at privacy@sanctionsanalyzer.com. We will respond within 30 days.

10. Children's Privacy

The Service is intended for business use by adults. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected information from a minor, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice within the Service. The "Last updated" date at the top of this page reflects when changes were last made.

Contents