Security & Privacy

How to report a security issue and how Safo handles privacy and data breaches.

Report a security issue

We welcome reports from security researchers and users. Please disclose responsibly and give us a reasonable time to fix issues before public disclosure.

Data breach response

  • Detection through monitoring, audits and reports.
  • Containment within 24 hours of confirmation.
  • Assessment of risk to user rights and freedoms.
  • Notification to the supervisory authority within 72 hours where legally required (GDPR Art. 33).
  • Notification to affected users without undue delay where the breach is likely to result in a high risk (GDPR Art. 34).
  • Post-incident review and remediation.

Data retention

See our full Privacy Policy and the in-app Data Retention page (signed-in users).

Your rights

Under GDPR you have rights of access, rectification, erasure, restriction, portability, objection, and consent withdrawal. Signed-in users can exercise these from Settings → Privacy & Security. Email privacy@safoapp.com for assistance.