Privacy Policy
Last updated: March 4, 2026
OFACScreen ("we," "us," or "our") is committed to protecting the privacy and security of your information. This Privacy Policy describes how we collect, use, disclose, and safeguard your data when you use our website and sanctions screening platform ("Service"). By using the Service, you consent to the practices described in this policy.
1. Information We Collect
Account Information: When you create an account, we collect your name, email address, company name, and password. If you subscribe to a paid plan, we collect billing information through our payment processor (see Section 6).
Screening Data: When you use the Service to screen names or entities, we process the search queries you submit. Search queries, results, and timestamps are logged to provide audit trail functionality.
Usage Data: We automatically collect information about how you interact with the Service, including IP address, browser type, device information, pages visited, and feature usage.
Contact Information: If you contact us through our website or support channels, we collect the information you provide in your message, including name, email, company, and message content.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Process your sanctions screening requests and return results
- Maintain audit logs for your compliance records
- Process payments and manage your subscription
- Send transactional communications (account confirmations, billing receipts, service updates)
- Respond to your inquiries and provide customer support
- Monitor usage for security, fraud prevention, and abuse detection
- Analyze usage patterns to improve features and user experience
We do not sell your personal information to third parties.
3. Data Storage and Security
Your data is stored on secure servers within the United States. We implement industry-standard security measures to protect your information, including:
- Encryption of data in transit (TLS/SSL) and at rest
- Regular security audits and vulnerability assessments
- Access controls limiting data access to authorized personnel
- Secure password hashing
While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
4. Your Privacy Rights (CCPA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):
- Right to Know: You may request details about the personal information we collect, use, and disclose.
- Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
- Right to Opt-Out: You may opt out of the sale of personal information. Note: we do not sell personal information.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise these rights, contact us at [email protected]. We will respond to verifiable requests within 45 days.
5. Cookies and Tracking Technologies
We use cookies and similar technologies for the following purposes:
- Essential Cookies: Required for the Service to function, including session management and CSRF protection.
- Analytics Cookies: Help us understand how users interact with the Service so we can improve it.
You can control cookie preferences through your browser settings. Disabling essential cookies may prevent you from using certain features of the Service.
6. Third-Party Services
We share data with the following third-party service providers, solely to deliver the Service:
- Stripe: Payment processing. When you subscribe to a paid plan, your payment information is collected and processed directly by Stripe. We do not store your full credit card number. Stripe's privacy policy governs the handling of your payment data.
- Cloud Hosting Provider: Our infrastructure is hosted on cloud servers within the United States. The hosting provider processes data on our behalf under a data processing agreement.
We do not share your screening data (search queries or results) with any third party. Sanctions list data is sourced directly from public government databases.
7. Data Retention
We retain your data according to the following schedule:
- Account Data: Retained for the duration of your account. Deleted within 90 days of account closure, unless required by law.
- Screening Audit Logs: Retained for 7 years to support regulatory compliance requirements (consistent with BSA/AML recordkeeping standards).
- Usage Data: Retained in aggregated, anonymized form indefinitely for analytics purposes.
- Contact Form Submissions: Retained for 2 years from submission.
8. Children's Privacy
The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take steps to delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a notice on the Service. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.
10. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
Email: [email protected]
You can also reach us through our contact page.