Privacy Policy

1. Scope and Role

SafeLogs operates as a service provider / data processor for business customers. Customer organizations control how the Services are used and what data is entered.

This Privacy Policy applies to information collected by SafeLogs and does not govern how Customers use data within their own organizations.

2. Information We Collect

2.1 Information You Provide Directly

We collect information provided by you or your organization, including:

• Account information (name, email address, phone number, role)
• Business information (organization name, location details, contact information)
• Operational and compliance records (logs, checklists, audit responses, training records)
• Uploaded content (photos, documents, forms, attachments)
• Communications with SafeLogs support
• Billing and subscription details (processed through third-party payment processors; SafeLogs does not store full credit card numbers)

2.2 Automatically Collected Information

When you use the Services, we automatically collect limited technical information, including:

• Device and browser data
• IP address and general location data
• Usage logs, timestamps, and error reports
• Authentication and session metadata
• System diagnostics and performance metrics

2.3 IoT Sensor and Hardware Data

If you use SafeLogs-supported sensors or gateways, we collect device-generated data, including:

• Environmental readings (e.g., temperature)
• Battery status and signal strength
• Device identifiers and gateway metadata
• Timestamps and system health indicators

Sensor data is used solely to support monitoring, alerts, diagnostics, and system functionality.

2.4 Cookies and Analytics

We use limited cookies and analytics technologies, including:

• Essential cookies for authentication and session management
• Analytics tools for anonymized traffic and performance monitoring

We do not use advertising cookies, tracking pixels, cross-site profiling, or behavioral advertising technologies.

3. How We Use Information

We use collected information to:

• Provide, operate, and maintain the Services
• Generate records, reports, alerts, and system outputs
• Support hardware integrations and diagnostics
• Improve system performance and reliability
• Detect, prevent, and respond to security incidents or misuse
• Communicate service updates, notices, and support messages
• Comply with applicable legal obligations

SafeLogs does not sell Personal Data. SafeLogs does not use Personal Data for advertising purposes.

4. Legal Bases for Processing (EEA/UK)

Where applicable, we process Personal Data on the following legal bases:

• Performance of a contract: To provide the Services as agreed
• Legitimate interests: To improve the Services, ensure security, and communicate with users, where these interests are not overridden by data subject rights
• Legal obligation: To comply with applicable laws and regulations
• Consent: Where specifically required and obtained

5. Disclosure of Information

5.1 Service Providers and Subprocessors

We may share information with vetted third-party providers that assist with:

• Cloud hosting and infrastructure
• Database and storage services
• Analytics and monitoring
• Email and communications
• Payment processing
• IoT and network integrations

These providers process data only on our instructions and are subject to written agreements imposing confidentiality and security obligations. A current list of subprocessors is available at safelogs.in/subprocessors.

5.2 Legal and Safety Disclosures

We may disclose information where required to:

• Comply with applicable law or legal process
• Respond to lawful government requests
• Protect the security, rights, or safety of SafeLogs, Customers, or others
• Investigate fraud, abuse, or misuse of the Services

5.3 Business Transfers

If SafeLogs undergoes a merger, acquisition, reorganization, or sale of assets, Customer Data may be transferred as part of the transaction. We will provide notice prior to any such transfer and ensure the receiving entity is bound by commitments substantially similar to this Privacy Policy.

6. Data Retention

We retain Customer Data for the duration of an active subscription.

Upon termination:

• Customers may request a data export within thirty (30) days
• Data will be deleted within sixty (60) days after the export period, unless applicable law requires longer retention
• Certain data may be retained as required by law or for legitimate business purposes (e.g., billing records, legal claims)

SafeLogs does not guarantee indefinite data storage.

7. Security Measures

SafeLogs implements reasonable administrative, technical, and organizational safeguards, including:

• Encryption in transit (TLS 1.2+) and at rest
• Role-based access controls
• Secure authentication mechanisms
• Logging and monitoring
• Regular code and dependency reviews
• Segregated production environments

No system is completely secure. Customers are responsible for maintaining secure devices, credentials, and networks.

8. Data Subject Rights

Where applicable under laws such as GDPR, CCPA/CPRA, or similar regulations, individuals may have the right to:

• Access Personal Data held about them
• Request correction of inaccurate data
• Request deletion of Personal Data
• Request data portability
• Object to or restrict processing
• Withdraw consent (where processing is based on consent)
• Lodge a complaint with a supervisory authority

Requests may require verification of identity and authority. We will respond to verified requests within the timeframes required by applicable law.

For CCPA purposes: SafeLogs does not sell Personal Data and does not share Personal Data for cross-context behavioral advertising. California residents may exercise their rights by contacting privacy@safelogs.in.

A Data Processing Addendum (DPA) is available upon request for regulated entities.

9. International Data Transfers

SafeLogs primarily processes and stores data in the United States. Where Personal Data is transferred from the European Economic Area, United Kingdom, or Switzerland, appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, as detailed in our Data Processing Addendum.

10. Children's Information

The Services are intended solely for business use and are not directed to individuals under sixteen (16) years of age. SafeLogs does not knowingly collect Personal Data from children. If we become aware that we have collected Personal Data from a child, we will take steps to delete such data promptly.

11. Do Not Track

The Services do not currently respond to "Do Not Track" browser signals. We do not engage in cross-site tracking.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Services, by email to account administrators, or by other reasonable means at least thirty (30) days before the changes take effect. Continued use of the Services after the effective date constitutes acceptance of the updated policy.

13. Contact Information

Jet Innovative Media LLC d/b/a SafeLogs
Email: privacy@safelogs.in
General Support: support@safelogs.in
Website: safelogs.in