Privacy Policy

1. Controller

The controller of User data (account, payments, contact) is Patryk Plucinski, Roszków 63-200, Polska, support@safitab.com. For data protection matters write to support@safitab.com.

For personal data contained in uploaded Files, the User is the controller and the Operator processes it on the User’s behalf (Terms, section 6).

2. What we process

• Account: email, name (optional), password hash (argon2id — we never know the password), preferences (language, theme, privacy), Plan and usage.
• Files and Results: the content of uploaded Files and the tables produced from them — only for the retention period (section 5).
• Layouts: column names, table shape and cleaning steps — no values from Files.
• Payments: Plan, subscription period and status, amounts and transaction IDs. We never receive card details — the payment provider handles them.
• Technical data: a hash of IP address and browser (for rate limits and abuse prevention), error logs without File contents.
• Product statistics: events (e.g. “file dropped”, “result shown”) linked to your Account or browser session, with the first page of the visit and where it came from (utm_source, ref or the referring site’s domain) — no File contents, no extra cookies and no third-party analytics. The first page and source of the visit that ended in signup are also saved on your Account.
• Contact: name, email and message content from the contact form.
• Problem reports about a file: technical details of the job (file types and sizes, steps run, checks, error codes — no File content, file names or column names), your description and — only if you tick the box — the first 20 rows of the File.

3. Purposes and legal bases

• Providing the service and the Account — performance of a contract (Art. 6(1)(b) GDPR).
• Payments and accounting — contract performance and legal obligations such as tax law (Art. 6(1)(b) and (c) GDPR).
• Security, limits, abuse prevention and statistics to improve the service — legitimate interest (Art. 6(1)(f) GDPR).
• Replying to messages — legitimate interest (Art. 6(1)(f) GDPR).

We do not do marketing, profiling or sell data.

4. Artificial intelligence

Most Files are cleaned by rules, without AI. For unusual layouts an AI model receives a small sample (a dozen rows, headers, column statistics) — never the whole File. By default we mask personal data first (names, emails, phone numbers, national IDs, tax IDs, account numbers). Settings show exactly what would be sent.

The model returns a recipe (a list of steps) that we execute ourselves. Scans without a text layer are read by the model from the page image — masking is not possible then, and we say so next to the result.

The model provider is Anthropic (USA). Data sent through the API is not used to train models. Transfers rely on standard contractual clauses or an adequacy decision.

5. Retention

• Files and Results: deleted after 24 hours by default. On paid Plans you can choose to keep them longer, up to 30 days, in settings; on any Plan you can shorten this to 1 hour or delete them sooner with one click.
• Job history (file name, date, row count — no data): 7 to 365 days depending on the Plan; jobs without an account — 7 days.
• Account and Layouts: until the Account is deleted.
• Payments: as long as tax and accounting laws require (usually 5 years).
• Anonymous product events: 13 months. Contact messages: 2 years.
• Problem reports: the File sample (if you attached one) — 30 days; the rest of the report — 180 days.

6. Sub-processors

We use providers that process data on our behalf, only as needed to run the Service:

• our hosting and file storage provider — the servers that run the Service and hold Files during the retention period;
• Anthropic, PBC (USA) — AI models; only when AI is needed, and it receives a masked sample;
• Paddle.com Market Ltd (UK) — merchant of record: payments, invoices, sales tax and VAT, refunds;
• Resend (USA) — email delivery (address confirmation, password resets, receipts);
• Google LLC (USA) — only if you choose Google sign-in.

Transfers outside the EEA rely on standard contractual clauses or an adequacy decision. We announce changes to this list in advance.

7. Your rights

You have the right to access, rectify and erase your data, restrict processing, data portability and to object to processing based on legitimate interest. Data export (JSON) and account deletion are available in settings.

You can also lodge a complaint with your data protection authority (in Poland: the President of the Personal Data Protection Office, UODO).

8. California residents (CCPA/CPRA)

You have the right to know what personal information we collect and why, to request deletion or correction, and not to be discriminated against for using these rights. The categories we collect are listed in section 2 and the purposes in section 3.

We do not sell personal information and do not share it for cross-context behavioural advertising. To make a request, email us from the address on your Account; we verify requests against that address. An authorised agent may act for you with your written permission.

9. Security

Connections are encrypted (HTTPS). Files are processed in isolated processes with time and memory limits; macros and external links are never executed. Only the owner can access their Files. Passwords are stored only as argon2id hashes.

10. Cookies

We only use essential cookies — see the Cookie Policy.