Privacy Policy

When we decide (we are the controller). When you visit saffely.com, create a Saffely account, subscribe to a consumer service such as drone alerts, or contact support, we determine why and how your information is used. Under California law we act as a "business" for this information.

When a customer decides (we are a service provider). Property managers, security companies, universities, homeowner associations, municipalities and similar customers use Saffely to run their own security operations. That customer decides which cameras and sensors exist, where they point, which alert rules and watchlists are active, who on their team can see the results and how long records are kept. For that information we act as a service provider or processor and we handle it under our agreement with the customer and on the documented instructions of that customer. We do not use it for our own purposes.

If you believe a Saffely customer has recorded you and you want to exercise rights over that recording, contact the organization that operates the property or the security program. If you contact us instead, we will refer your request to that organization and assist them in responding.

Information you provide. Your name, email address, phone number, and the credentials or one time codes used to sign in. If you join an organization, we record your membership and role. We also keep the messages you send us for support and sales.

Consumer alert services. If you subscribe to drone alerts or community alerts, we collect the address you want monitored and its coordinates, the monitoring radius you select, your plan and subscription status, and the contacts you designate to receive alerts, including their name, phone number and email address. You are responsible for having permission to add a person as a recipient.

Payment information. Card payments are processed by Stripe. We receive the billing result, the last four digits of the card, its expiration and the subscription record. We do not receive or store the full card number.

Device and usage information. IP address, browser and device type, operating system, application version, push notification tokens, pages and screens viewed, and timestamps. We collect diagnostic and crash reports when something goes wrong. We use privacy friendly website analytics that do not set cross site advertising cookies. Our applications set cookies that are necessary to keep you signed in and to remember interface preferences.

The categories below are captured through equipment and applications operated by a customer, or by Saffely on behalf of a customer. Availability depends on what that customer has deployed and enabled.

• Video and images. Live and recorded video from fixed cameras, body cameras worn by security personnel, and drone video, together with still images and short clips derived from them, including cropped images of people and vehicles.
• Biometric identifiers. Where face recognition is enabled, our systems create a face template, which is a numeric representation of facial geometry, from faces that appear on camera. Templates from the same person are grouped into a recurring identity record so an organization can see when that person was seen and where. Face images and templates are biometric information under the laws of several states. See section 11.
• Appearance and vehicle information. Descriptive attributes such as clothing and appearance, vehicle type, make and color, and license plate characters read from images by optical character recognition.
• Audio and transcripts. Push to talk radio transmissions carried through the platform, and automated text transcripts of those transmissions, which are attached to the relevant incident record.
• Security personnel information. Precise location and heading of personnel while they are signed in and on duty, shift and patrol assignments, body camera recordings, incident notes, photographs, checks and messages.
• Airspace information. Radio identification broadcast by nearby uncrewed aircraft, which can include the aircraft identifier, its position, altitude and flight track and, when the aircraft broadcasts it, the reported position of the operator or the takeoff point. We receive these broadcasts passively. We do not interfere with, jam or take control of any aircraft.
• Incident records. Reports, comments, media, timestamps, locations and the people or vehicles a customer associates with an incident.
• Watchlist and vault records. Identity records that a customer adds to its own watchlist, and reference records in vaults that Saffely compiles from publicly available sources such as published law enforcement listings.

• To provide, operate and maintain the Services and the equipment we manage.
• To detect events a customer has asked us to watch for, to raise alerts, and to deliver those alerts by push notification, email or text message.
• To create, route and document incidents, patrols, shifts and reports.
• To authenticate you, secure accounts and prevent abuse of the Services.
• To process payments, manage subscriptions and provide customer support.
• To diagnose failures, monitor reliability and improve performance.
• To comply with law and to establish, exercise or defend legal claims.

We may create aggregated or de-identified statistics, such as counts of detections or system uptime, and use them to operate and improve the Services. We do not attempt to re-identify that information.

We do not use customer video, images, audio or biometric templates to train general purpose models for other customers, and we do not use any of it for advertising.

The Services rely on automated analysis. Cameras and sensors feed software that detects people, vehicles and objects, groups faces into identity records, reads license plate characters, classifies uncrewed aircraft, converts radio audio to text and generates short written descriptions of what a camera saw. Some of this analysis uses third party models, including the Google Gemini API, which receives imagery for the purpose of returning a description or classification.

These results are probabilistic. A match, a plate reading or a description can be wrong. Alerts are presented to a person for review rather than acted on automatically. We do not use automated matching alone to make decisions that produce legal or similarly significant effects about an individual, and our agreements require customers not to do so either.

• Inside your organization. Members of an organization see the data that their assigned role permits. Administrators can see and export records for their organization, including personnel location and recordings.
• Parent and related organizations. Where a customer has configured a parent organization over sub organizations, the parent can receive alerts and records from those sub organizations.
• Vault matching. A customer can arm a vault, which is a set of reference identity records. When armed, faces captured on that customer's cameras are compared against the vault, and a match produces a record visible to that customer. Vaults that a customer creates belong to that customer.
• Share links and reports. Customers can generate links that let a recipient view a specific incident or alert without a Saffely account, and can schedule report emails to recipients they designate. Anyone holding such a link can view the shared content for the period the customer selects.
• Service providers. The vendors listed in section 7, under contracts that limit them to processing information on our behalf.
• Law enforcement and legal process. We disclose information when required by valid legal process, or where we believe in good faith that disclosure is necessary to prevent serious harm. Separately, customers can share their own footage and records with police directly, which is their decision and not ours.
• Business transfers. If Saffely is involved in a merger, acquisition or sale of assets, information may transfer as part of that transaction, subject to this policy.

We do not sell personal information, and we do not share it for cross context behavioral advertising, as those terms are defined under California law. We do not sell, lease, trade or otherwise profit from biometric information.

We use the following providers to operate the Services:

This list can change as we add or replace providers. Enterprise customers can request the current list, along with our data processing terms, at legal@saffely.com.

• Account information is kept while your account is active and for a reasonable period afterwards, then deleted or de-identified.
• Billing records are kept as long as tax, accounting and audit obligations require.
• Video, images, audio and incident records are kept for the period the customer organization configures. They are deleted when the customer deletes them, when the configured retention period elapses, or within a commercially reasonable period after that customer stops using the Services.
• Face templates and other biometric identifiers are destroyed when the purpose for collecting them has been satisfied, when the customer deletes the associated identity record or account, or no later than three years after the last interaction between the individual and that customer, whichever occurs first.
• Diagnostic and analytics data is kept on a rolling short term basis.

Deleted records can persist briefly in encrypted backups before those backups age out on their normal cycle.

We use TLS for data in transit, rely on encryption at rest provided by our storage and database providers, restrict internal access on a least privilege basis, log administrative activity, support multi factor authentication, and review our providers before they handle information for us. Video and image links are served through expiring signed URLs rather than public buckets.

No system is perfectly secure. If we learn of a breach affecting your information, we will notify you and any affected customer as required by law.

Depending on where you live, you may have the right to know what personal information we hold about you, to obtain a copy, to correct it, to delete it, to limit the use of sensitive personal information, to opt out of sale or targeted advertising (we do neither), and not to be discriminated against for exercising these rights.

To make a request, email legal@saffely.com. We will verify your request using the account details we already hold. An authorized agent can act for you with written proof. If we decline, you may appeal by replying to our response.

Where we act as a service provider for a customer organization, we will forward your request to that organization, since they control the underlying records.

You can turn off push notifications in your device settings, unsubscribe from marketing email using the link in the message, and stop location sharing in the field application by signing out, which also ends your duty status.

Where face recognition is enabled, our systems collect and store face images and face templates. We use them only to detect and group repeat appearances, to match against watchlists and vaults a customer has armed, and to support incident investigation for that customer. We do not use them for any other purpose.

We do not sell, lease, trade or otherwise profit from biometric identifiers. We disclose them only to the customer they belong to, to service providers acting for us, or when required by valid legal process or by the written consent of the individual.

We destroy biometric identifiers on the schedule described in section 8. Customers are responsible for providing the notice and obtaining the written consent that laws such as the Illinois Biometric Information Privacy Act, the Texas Capture or Use of Biometric Identifier Act and similar laws require before biometric collection begins in their locations.

If you use the Saffely field application as part of your job, your employer configures what is collected. While you are signed in, the application reports your precise location and heading so that a dispatcher can see your position and route you to incidents. Your radio transmissions are carried through the platform, can be recorded and are automatically transcribed onto incident records. Body camera video you capture is uploaded and retained under your employer's settings.

Signing out ends location reporting. Your employer, not Saffely, is responsible for notifying you about workplace monitoring and for obtaining any consent that employment and recording laws require.

If a camera, body camera or sensor operated by a Saffely customer recorded you, that organization controls the recording. Contact the property owner, property manager or security provider for the location to request access or deletion. If you are not sure who that is, write to us and we will try to route your request.

The Services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information directly, contact us and we will delete it. Cameras operated by our customers can incidentally record minors who are present in a monitored area. Customers are responsible for the lawfulness of monitoring in their locations.

Saffely is based in the United States and information is processed and stored in the United States. If you use the Services from another country, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

We may update this policy. When we do, we will revise the date at the top of this page. If the changes are material, we will provide additional notice, such as an email or an in product message. Continued use of the Services after an update means you accept the revised policy.

Questions, requests and complaints about privacy can be sent to legal@saffely.com.

Baba Do LLC, doing business as Saffely.