Privacy policy

SafeFix is run by [COMPANY NAME], [COMPANY ADDRESS], [COUNTRY] (“we”). We decide how your personal data is used, so we are its controller.

Questions about your data: support@safefix.dev.

Only what the web app needs to work:

• Your account: your email address, a user id from our sign-in service, and your view setting (Simple or Developer).
• Organizations and projects: their names, who is a member, and each member’s role.
• Scan results you upload: each finding (what was checked, how serious it is, the name of the table, file or setting, an explanation, and the suggested fix), the grade, the date, the SafeFix version, and the git branch and commit if your upload includes them. Every secret is redacted before it is stored: at most its first and last 4 characters are kept, never enough to use it.
• Upload tokens: only a fingerprint (a hash) and the first characters, never the full token.
• An activity log of important actions in your organization, for example who created or revoked a token.
• Billing: your Stripe customer and subscription ids, your plan, and whether it is active. Your card, billing address, billing email and invoices are kept by Stripe, not by us.
• Technical logs: error messages and event ids from our servers.

• The data rows of your app. SafeFix checks your database’s structure and rules, never the rows in your tables.
• Full secrets. Keys and passwords are masked before a scan result is stored, and our server refuses an upload that still contains a full secret.
• Your source code. The SafeFix CLI and the scan inside your AI tool run on your own computer. Only the findings are sent, and only when you choose to upload them.
• Card numbers. Payments go straight to Stripe.

Everything we store is in Amazon Web Services, region eu-west-3 (Paris, France): the app servers, the database and its backups. The database and its backups are encrypted, and all traffic uses HTTPS.

Stripe may handle payment data in other countries, including the United States, under its own safeguards. [LAWYER: confirm the transfer mechanism, for example Standard Contractual Clauses.]

• Amazon Web Services ([AWS CONTRACTING ENTITY]): hosting, the database, sign-in (Amazon Cognito) and sign-in emails (Amazon SES). Region: Paris.
• Stripe ([STRIPE CONTRACTING ENTITY] and its group companies): payments, invoices and the billing portal. See stripe.com/privacy.

• To run the service you signed up for: sign-in, your projects and your scans.
• To bill paid plans and keep billing records that the law asks for.
• To keep SafeFix secure and to fix errors.
• To send emails about your account (sign-in codes, a failed payment, important changes). No marketing emails without your consent.

We do not sell your data, show ads, or use your scan results to train AI models. [LAWYER: list the legal bases, for example contract, legal obligation and legitimate interest.]

• Account, organizations and projects: until you delete them or your account.
• Scan results: until you delete the project or your account. On the Free plan the dashboard shows the last 14 days, but older results are kept so they come back if you upgrade. Ask us and we delete them sooner.
• Database backups: 7 days, then they are replaced.
• Technical logs: 14 days.
• Billing records: as long as tax law requires ([NUMBER] years in [COUNTRY]).

Write to support@safefix.dev from the email address of your account and ask us to delete it. We confirm, then within 30 days we delete your account, the organizations where you are the only owner, and all their projects and scan results. Backups that still contain them are replaced within 7 more days.

If you pay for a plan, cancel it first in Settings, Plan and billing, Manage billing (or ask us to). We keep billing records that the law asks us to keep.

You can ask to see, correct, export or delete your data, and to object to or limit how we use it. Write to support@safefix.dev. We answer within one month.

You can also complain to your data protection authority. [LAWYER: name the lead authority for [COUNTRY], and the EU representative if one is needed.]

We only use cookies that sign-in needs: a session cookie (12 hours) and a short sign-in cookie (10 minutes). No advertising, tracking or analytics cookies.

SafeFix is not for children under 16, and we do not knowingly collect their data.

When we change this policy, we update the date at the top. For important changes we also email the owners of each organization before the change starts.