Privacy notice
Last updated: 19 August 2026
Who we are
SafeNest is operated by Eventra ("Eventra", "we", "us"), trading as SafeNest. Eventra is the data controller for the personal data described here, which means we decide why and how it is processed. You can reach us at privacy@safenestvault.live.
Your vault is encrypted
The contents of your vault items and uploaded files are encrypted on your device using a key derived from your master password before they reach our servers. We store only ciphertext and cannot read those contents. This notice covers the account and usage data we can see.
What we collect and why
- Account data (email address, name if you provide it, login credentials and authentication identifiers): to create and secure your account and sign you in. Legal basis: performance of our contract with you.
- Vault metadata (encrypted item records, item type, timestamps, plan tier): to store and sync your vault and apply your plan. Legal basis: contract.
- Support messages you send us: to answer your questions. Legal basis: contract and legitimate interests.
- Usage and telemetry, device identifiers, IP address, error logs: to keep the service secure, prevent fraud and abuse, diagnose faults and improve the product. Legal basis: legitimate interests in a secure, working service, and legal obligation where we must retain security records.
- AI feature inputs (the document image or search question you submit when you use scanning or plain-language search): to return the result you asked for. Legal basis: contract. These inputs are sent to our AI processing provider and are not used by us to train models.
- Marketing preferences, if you opt in to product emails. Legal basis: consent, which you can withdraw at any time.
Who we share data with
- Service providers and subprocessors — hosting, database, authentication, AI processing, email delivery, error monitoring and support tooling, acting on our instructions under contract.
- Paddle.com, our Merchant of Record, for the sale of subscriptions, subscription management, payments, tax compliance and invoicing.
- Professional advisers — legal, accounting and audit, where needed.
- Authorities, where we are required to disclose by law or to protect rights and safety.
We do not sell your personal data.
International transfers
Our providers may process data outside your country, including outside the UK and EEA. Where that happens we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses, together with encryption in transit and at rest.
How long we keep data
Account and vault data are kept while your account is active. If you delete your account we delete your vault data and account record within 30 days, except where we must keep limited records longer (for example billing and tax records kept by Paddle, and security logs kept up to 12 months). Support messages are kept up to 24 months. When data is no longer needed it is deleted or anonymised.
Security
We use appropriate technical and organisational measures, including client-side end-to-end encryption of vault contents, encryption in transit (TLS), row-level access controls so accounts can only reach their own records, least-privilege access for staff and infrastructure, and monitoring for suspicious activity. No system is perfectly secure, and your master password cannot be recovered if you lose it.
Your rights
Subject to local law you can request access to your data, correction of inaccurate data, erasure, restriction of processing, portability, and object to processing based on legitimate interests. Where we rely on consent you can withdraw it at any time. Email privacy@safenestvault.live and we will respond within one month. If you are in the UK or EEA you can also complain to your supervisory authority (in the UK, the Information Commissioner's Office).
Cookies and similar technologies
We use strictly necessary cookies and local storage to keep you signed in, remember your accessibility settings and protect the service — these are required for SafeNest to work. Our checkout provider Paddle sets cookies needed to complete a purchase. We do not use advertising cookies. Where we use optional analytics cookies we ask for your consent first, and you can clear or block cookies in your browser settings at any time.
Children
SafeNest is not intended for children under 16.
Changes
We will post updates to this notice on this page with a new date, and tell you in the app if the changes are significant.