Skip to main content

Privacy Policy

Last updated: August 29, 2026

This Privacy Policy explains what SAFTAY collects and how we use it when you create an account, search for a place, purchase a Brief or SAFTAY+ membership, submit a Help request, or view a Travel Intelligence Brief.

Information we collect

  • Account and security data: email address; password credentials stored in protected, hashed form; account and session information; and information needed for email verification, password recovery, and email-change workflows. If you choose to sign in with a supported third-party authentication provider, or to enable an optional sign-in or security method we offer, we also store the related account-security information for that method.
  • Search and Brief data: places and addresses you submit; normalized or geocoded location information; pending search continuation state in sessionStorage; generated Briefs; saved stay and report history; and other information needed to prepare and operate a Brief.
  • Purchase and membership data: checkout correlation identifiers, one-time purchase records, and SAFTAY+ membership / billing cycle facts needed to fulfill access. Payment card data is processed by Stripe and is not stored by SAFTAY.
  • Help and Support data: the email address you supply with a Help request, the reason or category you select, the message and details you send, a support reference, and related operational metadata such as when the request was submitted. We store this so we can respond to and operate support.
  • Technical and security data: correlation and request identifiers, route names, and limited operational events. For security and session purposes we may also keep a truncated network prefix, not a full IP address, and a sanitized browser or user-agent description. We do not intentionally log passwords, raw session tokens, Stripe secrets, or full payment payloads.

How we use information

We use this information to authenticate you, prepare and authorize Briefs, fulfill one-time purchases and SAFTAY+ membership access, respond to Help requests, send operational account messages, prevent abuse, and operate the service. We do not sell personal information.

Service providers and data sources

We share information with service providers and send necessary location or query context to data sources so we can operate SAFTAY. That operating use is not a sale of personal information. Categories include:

  • Payment processing: Stripe processes payments. SAFTAY stores checkout and entitlement information needed to fulfill a purchase and does not store full card or payment credentials.
  • Transactional email delivery: an email-delivery service sends operational account and support messages.
  • Hosting and infrastructure: hosting providers store and run the service.
  • Authentication providers: if you choose to sign in with a supported third-party authentication provider, that provider receives the information needed to complete sign-in.
  • Place search and geocoding: place-lookup services help identify a submitted location.
  • AI presentation: an AI service may help present or summarize Brief information that SAFTAY has already prepared.
  • Location and safety information sources: public and commercial sources used to retrieve available location or safety information for a Brief.

When you ask SAFTAY to evaluate a place, we may send the submitted or normalized location, coordinates, search text, or other necessary location context to those services and sources so we can identify the place, retrieve available location or safety information, and prepare the requested Brief. Not every source receives every field.

AI presentation

SAFTAY may use an AI service to help present or summarize information that SAFTAY has already gathered and structured for a Brief. The AI service does not independently select the underlying safety records or determine whether a place is safe. AI wording is not a guarantee of completeness or accuracy.

We send only minimized location context and approved Brief findings needed for that wording. We do not send raw provider records, traveler account email or identity, or individual registered-offender identity or details. We configure these AI requests not to be stored as retrievable application state. The AI service may retain limited request information for security, abuse prevention, service operation, or legal requirements according to its own data-handling policies. If the AI service is unavailable or unsuitable, SAFTAY still presents the Brief using the information already prepared.

Communications

We send operational account-security messages, including email verification, password reset or recovery, email-change verification or notices, and other security or account transactional messages. We use an email-delivery service provider to send these messages. These messages are transactional. They are not marketing, and sending them does not mean you have agreed to receive promotional email.

When you submit a Help request, we store it so SAFTAY personnel can review and respond. The request may also be sent internally through the same transactional email infrastructure so it can be noticed and handled.

Report privacy

Owned Briefs default to private and require your signed-in account. Unclaimed or anonymous report identifiers are not treated as indefinite public access secrets. Intentional link sharing, when enabled for a report, is a separate visibility mode.

Retention

Account, session, and saved-report relationships are retained while your account is active. Purchase and audit records may be retained after account retirement where needed for financial and security records. You may request account deletion from Account settings; we verify the request and handle personal identity according to this policy while retaining required purchase records.

Cookies and browser storage

We use an HttpOnly session cookie for authentication. We also use browser sessionStorage for authenticated session flow and for pending traveler search state after sign-in or checkout. We do not use advertising trackers on the core traveler path.

Getting help

Privacy requests: Help & Support. Related: Terms of Use, Refund & Purchase Terms.