1. Introduction
Safegram.io ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our social media platform. We handle personal data in line with the GDPR, the CCPA and other applicable data protection laws.
2. Information We Collect
2.1 Information You Provide
- Account Information: Username, email address, password (stored only as a one-way hash), bio, profile picture, cover photo
- Content: Posts, comments, messages, images, documents, videos you share
- Profile Data: Bio, location (if provided), website links
- Communications: Messages sent through our Service, support requests
- Identity verification (optional): legal name, country, date of birth, ID document and selfie, entity details — only if you choose to verify
2.2 Automatically Collected Information
- Usage Data: Pages viewed, features used, time spent, clicks, interactions
- Device Information: IP address, browser type, operating system, device identifiers
- Browser storage: your sign-in token and display preferences (no analytics or advertising cookies)
- Location: only if you choose to share a location in a message
2.3 Information from Third Parties
- Payment processors (transaction data, not full card details)
- Email delivery providers (to send you account emails such as password resets)
3. How We Use Your Information
We use your information to:
- Provide the Service: Create and manage your account, enable features, display content
- Improve the Service: Analyze usage, fix bugs, develop new features
- Personalize Experience: Show relevant content, recommendations, ads
- Communicate: Send notifications, updates, promotional messages (with consent)
- Safety & Security: Detect fraud, prevent abuse, enforce policies, moderate content
- Legal Compliance: Comply with laws, respond to legal requests, protect rights
- Analytics: Understand user behavior, measure engagement, improve performance
4. Legal Basis for Processing (GDPR)
We process your data based on:
- Consent: You explicitly agree to data processing (e.g., cookies, marketing)
- Contract: Processing necessary to provide the Service you signed up for
- Legitimate Interest: Fraud prevention, security, improving the Service
- Legal Obligation: Compliance with laws, court orders, regulatory requirements
5. How We Share Your Information
We share information with:
5.1 Public Information
Your public profile, posts, comments, and interactions are visible to other users based on your privacy settings.
5.2 Service Providers
- Cloud hosting and database providers (where the Service and its data are hosted)
- Payment processors (Stripe), only when you make a purchase
- Email service providers (account emails such as password resets and invitations you send)
5.3 Legal Requirements
We may disclose information if required by law, court order, or to protect rights, property, or safety.
5.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity.
6. Your Privacy Rights
6.1 GDPR Rights (EU Users)
- Right to Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your data ("right to be forgotten")
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent for data processing at any time
6.2 CCPA Rights (California Users)
- Right to Know: Request disclosure of collected data
- Right to Delete: Request deletion of personal information
- Right to Opt-Out: Opt-out of the sale of personal information (we don't sell data)
- Right to Non-Discrimination: Not be discriminated against for exercising rights
6.3 Exercising Your Rights
To exercise these rights, go to Settings → Privacy or contact us at privacy@safegram.io. We will respond within 30 days (GDPR) or 45 days (CCPA).
7. Data Retention
We retain your data for as long as your account is active or as needed to provide services. When you delete your account, we will delete or anonymize your data within 90 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, resolving disputes).
8. Data Security
We implement security measures including:
- HTTPS (TLS) encryption for all communications
- Password hashing (bcrypt); passwords are never stored in readable form
- Access controls, so conversations can only be opened by their members
- Identity-verification documents kept in a separate private store, never cached, and deleted with your account
- Rate limiting and account-lockout protection against password guessing and abuse
Messages are not end-to-end encrypted today: they are encrypted in transit and stored on our servers, where access is restricted. End-to-end encryption is on our roadmap. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. More detail is on our security page.
9. Cookies, Local Storage and Tracking
Safegram does not use third-party analytics or advertising trackers. We store a small amount of data in your browser:
- Sign-in: your session token and basic profile, kept in your browser's local storage so you stay signed in
- Preferences: your light/dark theme and display style
Ads on Safegram are selected on our own servers from the content of your profile; no advertising cookies are set and no data is shared with ad networks. You can clear this stored data at any time by signing out or clearing your browser's site data.
10. Children's Privacy (COPPA)
Safegram.io is not intended for children under 13. We do not knowingly collect data from children under 13. If we learn we have collected such data, we will delete it immediately. Users aged 13-17 require parental consent. If you believe a child under 13 has provided data, contact us at privacy@safegram.io.
11. International Data Transfers
Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses) to protect your data in accordance with GDPR and other regulations.
12. Do Not Track (DNT)
Because Safegram does not track you across other websites or use third-party analytics, there is no tracking for a Do Not Track signal to switch off.
13. Third-Party Links
Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these sites. Please review their privacy policies.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or prominent notice on the Service. Continued use after changes constitutes acceptance of the updated policy.
15. Contact Us
Safegram.io is operated by RWA Global Inc.. For privacy questions or to exercise your rights, email privacy@safegram.io.
Your Privacy Matters: We are committed to transparency and protecting your personal data. You have full control over your information.