SiftPrivacy Policy
Last updated 6 August 2026.
Sift is a data and list cleaning application for GoHighLevel, operated by SYNRGII ("we", "us"). This policy describes what the application collects, why, and what happens to it. It covers the Sift application only.
Who the data belongs to
When you use Sift to clean a list, that list is yours. We process it on your instruction and for your purposes. We do not sell it, share it, license it, or use it to build any product, model, or dataset of our own.
What we store
| What | Why | How long |
|---|---|---|
| GoHighLevel access and refresh tokens | To act on the sub-account you installed Sift into, without asking you to sign in again | Until you uninstall |
| Your GoHighLevel location id and company id | To know which sub-account an install belongs to | Until you uninstall |
| Install timestamp | Support and troubleshooting | Until you uninstall |
| Run counts (rows in, rows out, reasons) | To show you the report for a run | Returned to you with the run; not retained afterwards |
What we do not store
- Your uploaded lists. A list is processed in memory and the cleaned result is returned to you. We do not retain the file after the run completes.
- Contact records from your CRM. Where a run compares against existing contacts, that comparison happens during the run and the retrieved records are discarded when it ends.
- Payment details. Any billing is handled by GoHighLevel, not by us.
Permissions we request
Sift asks for read access to contacts, write access to contacts, and read access to location details. Read access lets a run avoid creating duplicates of contacts you already have. Write access is used only when you explicitly choose to import a cleaned result. Location access confirms which sub-account an install belongs to.
Sift does not request access to conversations, calendars, payments, opportunities, or recordings. If a future version requires a permission it does not hold today, GoHighLevel will present you with a new consent screen. Permissions cannot be widened without it.
Sub-processors
The application runs on Cloudflare, which provides hosting and the encrypted store that holds install tokens. Cloudflare processes data on our behalf under its own data processing terms. No other third party receives data from Sift.
Security
All traffic is served over HTTPS. Install tokens are held in an encrypted key-value store and are never exposed to the browser or written into page content. Client credentials are stored as platform secrets and are not present in the application's source.
Deleting your data
Uninstalling Sift from a sub-account deletes the stored tokens and identifiers for that sub-account. If you want written confirmation, or want anything else removed, email support@synrgii.com and we will action it and confirm within 30 days.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you, and to object to or restrict processing. Contact us at the address above and we will respond within the period your law requires.
Children
Sift is a business tool. It is not directed at anyone under 18 and we do not knowingly collect data from children.
Changes
If this policy changes materially, we will update the date at the top and notify installed sub-accounts. Continued use after a change means you accept the updated policy.
Contact
SYNRGII
support@synrgii.com