What you share
Your account uses a verified email address for sign-in. Scans use that email to search for public web mentions. Findings include source links, public snippets, and your review status. Removal requests contain the text you choose to save. Monitoring records your preference and the time of scheduled checks.
Do not enter passwords, private keys, seed phrases, payment details, government identifiers, or identity documents into Safuy. Example scan reports use fictional records. Starting a personal scan requires wallet sign-in and email verification.
Why it is processed
Information is processed to authenticate your account, run scans you request, organize results, prepare and track removal requests, provide answers, and run monitoring when you enable it. Limited request metadata and rate-limit records help operate and protect the service.
Safuy does not publish your scan queries, findings, or removal requests to a public blockchain. Token transactions and wallet addresses are public blockchain records and follow the relevant network’s rules.
Service providers
The deployed service uses Vercel for hosting and Supabase for authentication and account records. Live scans send your verified email to Apify and the operator’s configured search provider. When AI is enabled, the conversation messages you send are processed by OpenAI. These providers may process information outside your country under their own service terms and data policies.
An example or guided conversation may use built-in informational answers without a live AI request. The interface identifies this mode. Removal drafts are not automatically sent to publishers by Safuy.
Storage and retention
Workspace records remain with your account until you delete the account or the operator removes records under its retention policy. Conversations are held in the current browser session and are not saved to the Safuy database. Live AI calls request that model responses are not stored as retrievable API response objects; provider security and abuse-monitoring retention can still apply.
Authentication uses session cookies. Wallet ownership is verified with an offchain message signature. The server issues a signed, HttpOnly wallet session that expires after eight hours. Your wallet address is processed for sign-in and is separate from public token activity. Example reports use session storage on your device. Clearing browser storage resets your example report. Operational logs and provider backups follow the configured providers’ retention schedules and may not be immediately erased when an account is deleted.
Your choices
You can pause scheduled monitoring, export your workspace, or permanently delete your Safuy account in Settings. Account deletion removes associated workspace records from the active database. Information held by publishers, search engines, caches, archives, and blockchains must be handled separately with those services.
Depending on where you live, you may have rights concerning access, correction, deletion, restriction, or objection to processing. Account controls provide direct access to the export, monitoring, and deletion actions available in this version.
Security and changes
Access controls and private account records reduce exposure; no online service can guarantee absolute security. You are responsible for protecting your email account and the device used to access Safuy. Avoid sharing sign-in links.
This policy may change as features and providers change. The date above indicates the current version. Safuy is intended for adults using the service to manage their own information.