Privacy Policy

Last updated: 1 March 2026

FreshSift ("we", "our", "us") operates the website freshsift.com and delivers AI-curated email newsletters. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our service.

By subscribing to FreshSift, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect the minimum information necessary to deliver our service:

• Email address — provided when you subscribe, used to deliver newsletters and service communications.
• Language preference — your chosen language for newsletter delivery.
• Newsletter selections — the topics you have subscribed to.
• Subscription metadata — timestamps for subscription, confirmation, and unsubscription events.
• Referral data — if you arrived via a referral link, we store the referral code to credit the referrer.

We do not collect your name, physical address, phone number, payment information, or any other personal data beyond what is listed above.

2. How We Use Your Information

Your information is used solely for the following purposes:

• Delivering weekly newsletters to your email address in your chosen language.
• Sending a one-time confirmation email when you subscribe (double opt-in).
• Processing unsubscription requests.
• Tracking bounce and complaint events to maintain email deliverability and comply with anti-spam regulations.
• Generating anonymous, aggregate statistics about subscriber counts and newsletter popularity.

3. Data Storage and Security

Your data is stored securely using the following infrastructure:

• Amazon DynamoDB (US West — Oregon region) — stores subscriber records.
• Amazon S3 — stores newsletter archives and website assets.
• Amazon SES — processes email delivery.

All data is transmitted over HTTPS (TLS 1.2+). We do not store passwords as no account creation is required. Access to our infrastructure is restricted to authorised personnel only.

4. Data Sharing

We do not sell, rent, trade, or share your personal information with any third parties for marketing purposes. Your data is only processed by:

• Amazon Web Services (AWS) — our infrastructure provider, acting as a data processor under their Data Processing Addendum.
• OpenAI — provides AI content generation for newsletters. No subscriber personal data is sent to OpenAI; only publicly available news content is processed.

5. Cookies and Tracking

FreshSift does not use cookies, tracking pixels, analytics tools, or any form of browser tracking on our website. We do not use Google Analytics, Facebook Pixel, or any similar services.

Our emails may contain standard email tracking headers required by Amazon SES for bounce and complaint processing. We do not use open-tracking pixels in our emails.

6. Your Rights

You have the following rights regarding your personal data:

• Unsubscribe — every email contains an unsubscribe link. One click removes you from that newsletter. You can also email us to unsubscribe from all newsletters.
• Access — you can request a copy of all data we hold about you.
• Deletion — you can request complete deletion of all your data from our systems.
• Portability — you can request your data in a machine-readable format.
• Rectification — you can request correction of any inaccurate data.

To exercise any of these rights, contact us at the address below. We will respond within 30 days.

7. Data Retention

Active subscriber data is retained for as long as your subscription is active. When you unsubscribe, your email address and subscription status are retained for up to 90 days to prevent accidental re-subscription and to process any pending bounce or complaint events. After 90 days, unsubscribed records are permanently deleted.

Newsletter archive content (the newsletters themselves) is retained indefinitely as publicly accessible web pages.

8. International Data Transfers

Our infrastructure is hosted in the United States (AWS US West — Oregon). If you are located outside the United States, your data will be transferred to and processed in the United States. By subscribing, you consent to this transfer. AWS maintains appropriate safeguards for international data transfers under their Data Processing Addendum.

9. Children's Privacy

FreshSift is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has subscribed to our service, please contact us and we will promptly delete their data.

10. Affiliate Links and Advertising

Some newsletters may contain affiliate links. If you purchase a product or service through an affiliate link, we may earn a small commission at no additional cost to you. Affiliate relationships do not influence the editorial content of our newsletters. All affiliate links are clearly disclosed within the relevant newsletter.

FreshSift does not display third-party advertisements on our website or within our newsletters.

11. AI-Generated Content Disclaimer

FreshSift newsletters are curated and generated using artificial intelligence. While we strive for accuracy, AI-generated content may occasionally contain errors or inaccuracies. Newsletter content is for informational purposes only and should not be relied upon as professional, financial, medical, or legal advice.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. If we make material changes, we will notify active subscribers via email. Continued use of our service after changes constitutes acceptance of the revised policy.

13. Legal Basis for Processing (GDPR)

For subscribers in the European Economic Area (EEA) and United Kingdom, we process your data on the following legal bases:

• Consent — you provide explicit consent through our double opt-in subscription process.
• Legitimate interest — maintaining email deliverability through bounce and complaint processing.

You may withdraw your consent at any time by unsubscribing or contacting us. You also have the right to lodge a complaint with your local data protection authority.

14. Contact