Data Protection

Privacy Policy

Last updated : 20/06/2026

1 Data Collected

SafeInventa only collects data strictly necessary for the service to function: email address (for authentication and account recovery), language preference, and account creation date. We never collect your name, surname, physical address, phone number, or any other personally identifying data.

2 Cookies and Local Storage

SafeInventa exclusively uses:

  • A technical session cookie (required for authentication, non-traceable, deleted when browser closes).
  • Local storage (localStorage) to remember your preferences (language, cookie consent).
  • No advertising, analytics, or third-party tracking cookies are used. We do not use Google Analytics, Facebook Pixel, or any tracking tool.

3 Encryption and Zero-Knowledge Architecture

All inventory data (item names, estimated values, notes, photos, invoices) is encrypted client-side with AES-256-GCM before any transmission to the server. The encryption key is derived from your password via PBKDF2 at 600,000 iterations. SafeInventa never stores your password in plain text and holds no key capable of decrypting your data. EXIF metadata (including GPS coordinates) is automatically stripped from all uploaded photos.

4 Data Retention Period

Your data is retained as long as your account is active. If you delete your account, all associated encrypted data is irreversibly destroyed within 30 days. Security logs (login attempts) are kept for a maximum of 12 months and then automatically purged.

5 Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to access, rectify, port, and delete your personal data. You can exercise these rights directly from the "Security" page of your account, or by contacting us at contact@safeinventa.com. All requests are processed within 30 days.

6 Data Protection Officer Contact

For any questions regarding the protection of your personal data, you may contact our DPO at: dpo@safeinventa.com. In case of an unresolved dispute, you have the right to file a complaint with your national data protection authority.