Privacy Policy

Last updated: April 2, 2026

CircleFunds ("we", "us", "our") operates Sight by CircleFunds (the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using the Service, you agree to the practices described in this policy.

1. Information We Collect

Account Information

When you register, we collect your name, email address, and a hashed password. For paid plans, payment information is processed directly by Stripe — we do not store card details on our servers.

Uploaded Documents

Bank statement PDFs and JSON files you upload are stored securely in AWS S3 and processed solely to generate your analysis. We do not sell, share, or use these documents for any purpose other than providing the Service to you.

Usage and Log Data

We collect standard server logs including IP addresses, request timestamps, pages visited, and feature interactions. This data is used for security monitoring, debugging, and improving the Service.

Device and Browser Information

We may collect browser type, operating system, and device identifiers to ensure compatibility and to detect abuse or unusual activity.

2. How We Use Your Information

To provide, operate, and improve the Service.
To process payments and manage your subscription.
To send transactional emails (account confirmation, receipts, alerts).
To respond to support requests and inquiries.
To detect and prevent fraud, abuse, or security incidents.
To comply with legal obligations.
To generate anonymised, aggregated analytics about platform usage (never linked to you individually).

We do not use your uploaded bank statement data to train any AI or machine learning models, internally or externally. Our AI providers are contractually bound by this restriction.

3. Sharing and Disclosure

We do not sell your personal information. We share data only in the following limited circumstances:

Service Providers: AWS (storage), Stripe (payments), Google (AI processing) — each bound by data processing agreements and prohibited from using your data for their own purposes.
Legal Requirements: We may disclose information if required by law, court order, or to protect the rights, property, or safety of CircleFunds, our users, or the public.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred. You will be notified before your data is subject to a different privacy policy.

4. Data Retention

Free accounts: uploaded statements and analysis data are automatically deleted after 7 days. Basic, Pro, and Enterprise accounts: data is retained for the duration of your active subscription, or per the terms of your Enterprise agreement. When you delete your account or request data deletion, we remove your personal data and uploaded documents within seven business days. Some data may be retained in backups for up to 30 days before being purged.

5. Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. Despite these measures, no system is completely secure. Please contact us immediately at hello@circlefunds.io if you believe your account has been compromised.

6. Cookies

We use cookies and similar technologies for authentication (session management) and to understand how the Service is used. We do not use third-party advertising cookies. You can disable cookies in your browser settings, though this may affect Service functionality.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your personal data ("right to be forgotten").
Object to or restrict certain processing activities.
Data portability — receive your data in a structured, machine-readable format.
Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email us at hello@circlefunds.io. We will respond within 30 days.

8. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, contact us and we will promptly delete it.

9. International Transfers

Your data may be stored and processed in countries outside your own, including where our cloud infrastructure operates. We take appropriate measures to ensure your data is protected in accordance with this policy and applicable law wherever it is processed.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by updating the "Last updated" date and, where appropriate, by email. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions, requests, or concerns, contact us at hello@circlefunds.io.