Privacy

The consultation form

The SAF Radar page has a form to request a consultation and demo. It asks for your name, your email address, your company if you want to give it, and your message.

Why: so SAF Path can answer your request. We use it for nothing else, and we do not add you to a mailing list.

Where it goes: it is sent as one email to SAF Path's inbox, info@safpath.com, through Resend, the service that delivers SAF Radar's email. SAF Radar itself does not store what you write in the form.

How long: SAF Path keeps your request for as long as it needs it to answer you and follow up, and no longer than two years after your last contact with us, unless it becomes part of an agreement with SAF Path.

To stop misuse, the form counts requests from each network address. SAF Radar keeps only a scrambled form of the address, never the address itself, for 90 days.

Your account

Access to SAF Radar is by invitation. If you have an account, SAF Radar keeps:

• your email address and, if you give one, your name. Your password is held by our sign-in service in scrambled form only;
• your organization, your role in it, and its access term and seats;
• your second factor, your recovery codes in scrambled form, and your signed-in sessions (the browser and device);
• what you make in the desk: saved views, lists, collections, alert rules, settings, and your requests to SAF Path with any files you attach;
• the account email sent to you: invitations, password links and access notices;
• a record of account and staff actions, kept for security.

Why: to give you access, keep your account secure and send you account email.

Where it goes: SAF Radar's database and sign-in service (Supabase) and its hosting (Vercel). Account email is sent through Resend. SAF Path does not sell your data.

How long: while you have an account. You can download your data or delete your account from your account page; deleting it removes your own data at once. The record of account and staff actions is kept. These service records are kept for set periods:

The audit log, which records who did what in an organization and on the staff side, can only be added to and is kept. Deleting an account logs the deletion without the person's name or email; earlier entries keep the email address they named.

Visiting the site and cookies

Only essential cookies are set, to keep you signed in and to remember your cookie choice. Analytics are off unless you turn them on. When on, they are daily counts per page, with nothing that identifies you.

Our hosting service records each visit's network address in its own logs for a short time, to run and protect the site.