Privacy Policy

1. Overview

Cambridge Holdings, LLC d/b/a SafeRedact ("SafeRedact," "we," "us," or "our") provides this Privacy Policy to explain how we collect, use, and protect your personal information when you use our document redaction service at saferedact.app (the "Service").

2. Data Controller

Cambridge Holdings, LLC is the data controller responsible for your personal data.

Cambridge Holdings, LLC
United States
Email: privacy@saferedact.app

For users in the EEA, UK, or Switzerland, SafeRedact acts as the data controller for personal data collected through the Service.

3. Information We Collect

Information You Provide

Information Collected Automatically

Information We Do NOT Collect

• Document contents or files: Original files remain in your browser; only extracted text is sent for AI analysis, is never used for model training, and is deleted by the AI provider within 30 days
• Detected sensitive information: SSNs, addresses, etc. are not stored
• Original files: We never see your original documents. Only extracted text is sent for AI detection.
• Redaction patterns: Your selections are not tracked

4. Legal Basis for Processing (GDPR)

For users in the EEA, UK, and Switzerland, we process personal data under these legal bases:

• Contract Performance: Processing necessary to provide the Service (account management, billing, support)
• Legitimate Interests: Processing for business interests that do not override your rights (security, fraud prevention, cookieless page-view counts)
• Consent: Where you have given consent for specific processing (marketing email)
• Legal Obligation: Processing necessary to comply with legal requirements

5. How We Use Information

We use collected information to:

• Provide, maintain, and improve the Service
• Process payments and manage subscriptions
• Send transactional emails (receipts, account updates)
• Respond to support requests
• Prevent fraud and abuse
• Comply with legal obligations
• Analyze usage to improve our product (in aggregate)

6. Information Sharing

We do not sell your personal information. We may share information with:

• Service Providers: Companies that help us operate the Service (see Section 7)
• Legal Requirements: If required by law, subpoena, or court order
• Business Transfers: In connection with a merger, acquisition, or sale
• With Your Consent: When you explicitly authorize sharing

7. Service Providers and Sub-Processors

We use the following third-party service providers:

Each sub-processor is contractually required to protect your data.

8. International Data Transfers

SafeRedact is based in the United States. If you are located outside the US, your data will be transferred to and processed in the United States. Some providers also process data in other countries, as shown in Section 7.

For EEA, UK, and Swiss Users

We transfer data using these legal mechanisms:

• Standard Contractual Clauses (SCCs): EU-approved contract terms with our sub-processors
• Supplementary Measures: Additional technical and organizational protections

9. Data Retention

• Document files: Original file binaries remain in your browser; only extracted text sent for AI analysis (not stored)
• Extracted text: Never stored by SafeRedact; deleted by our AI provider within 30 days and never used for model training
• Account data: Deleted within 30 days of account deletion
• Usage and security records (daily activity, and sign-ins with IP address and browser type): Kept for the life of the account and deleted within 30 days of account deletion
• Emails and staff notifications: Copies kept by Resend and Slack under their standard retention
• Payment records: Retained 7 years for tax/legal compliance

Enterprise Data Handling

SafeRedact Enterprise processes bulk document sets for DSAR compliance and other redaction workflows. Enterprise use is governed by separate written agreements (DPA, SOW, or enterprise license) which take precedence over this Privacy Policy to the extent of any conflict. Enterprise-specific data handling:

• Per-file records: For Enterprise jobs SafeRedact does not store job names, Data Subject identifiers, detection results, filenames, or document content on its servers. For each file processed it keeps a record with no document content: job and file identifiers, the user’s account identifier, character and byte counts, a one-way fingerprint of the extracted text, a case reference that is a keyed one-way hash computed in the browser, and the processing route. The record is used to measure each case against the band paid for it and to confirm at export that the reviewed text is the text that was measured.
• Activity indicator: SafeRedact retains a minimal daily activity indicator: one row per user per calendar day on which the user accessed the service. This contains no job identifiers, no Data Subject identifiers, no detection counts, no document contents, and no geographic data.
• Security log: Sign-ins, access to the service and acceptance of agreements, with IP address and browser user agent.
• Staff notifications: Notices to SafeRedact staff of account events, such as sign-ins, set-up, uploads, completed processing and download attempts, carrying the user’s email address and file counts but no document content, sent by Slack and by email.
• Document content: Only extracted text, with the details of the Data Subject entered for the case, is sent for AI analysis; original files remain in the browser. On the UK and EU route, analysis runs on Amazon Web Services in European regions. No document content is stored.
• Audit reports: Audit trails, per-decision logs, and processing summaries are generated client-side in the Enterprise user's browser and bundled into the deliverable ZIP. SafeRedact retains no copies. Because we hold no copy, we cannot reproduce these records on the Controller's behalf or in response to legal process: the Controller is the sole holder of their compliance evidence.
• Data Processing Agreements: Published at saferedact.app/enterprise/legal and accepted when an organization is set up.

Transport security

Text extracted from your documents is transmitted to our API over HTTPS with TLS 1.2 or higher. No document content is stored at rest on SafeRedact servers.

10. Your Rights

Depending on your location, you may have these rights:

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Request deletion of your data
• Portability: Receive your data in a portable format
• Objection: Object to certain processing
• Restriction: Request restriction of processing
• Withdraw Consent: Where processing is based on consent

Contact privacy@saferedact.app to exercise these rights. We respond within 30 days.

11. Additional Rights for EEA, UK, and Swiss Users

Under GDPR, you have additional rights:

• Right to Lodge a Complaint: Contact your local data protection authority
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

Supervisory Authorities

• EU: European Data Protection Board
• UK: Information Commissioner's Office (ICO)
• Switzerland: Federal Data Protection Commissioner (FDPIC)

12. Cookies & Local Storage

• Essential cookies: Required for authentication. Cannot be disabled.
• Vercel Web Analytics: Counts page views without cookies and without identifying you.
• No analytics or advertising cookies: The website sets none, so there is no cookie banner. The SafeRedact enterprise application, where your documents are processed, loads nothing from any advertising or analytics provider.
• Local storage: Stores preferences and guest usage limits.

13. California Privacy Rights (CCPA/CPRA)

California residents have additional rights:

• Right to know what personal information we collect
• Right to delete personal information
• Right to opt out of "sale" or "sharing"
• Right to non-discrimination

We do not sell or share personal information as defined under California law. The website runs no advertising or cross-context behavioral advertising tags.

14. Children's Privacy

SafeRedact is not intended for children under 16. We do not knowingly collect information from children. Contact privacy@saferedact.app if you believe we have.

15. Changes to This Policy

We may update this policy. Material changes will be posted with a new effective date and, for significant changes, communicated via email.

16. Contact Us

Cambridge Holdings, LLC
Privacy: privacy@saferedact.app
General: hello@...