Privacy Policy
What personal data this website processes, why, and the rights you have over it. The short version: we collect only what you type into our forms, we use it to answer you and to deliver documents you request, and we count visits with a cookieless statistics tool that cannot identify you. No advertising trackers.
Who we are
SafeDescent.AI (“SafeDescent”, “we”) is operated by Jan Broniowski Software, Krakow, Poland. We are the data controller for the personal data described in this policy. You can reach us at contact@safedescent.ai.
What we collect and why
Contact form. When you write to us through the contact form we process your email address and, if you provide them, your name, company, role, and message. We use this data to respond to your inquiry. Your IP address and country, provided by our hosting infrastructure, are attached to the submission so we can filter abuse and spam.
Document downloads. Our field guides and briefs are delivered in exchange for an email address; name and company are optional. We use this data to send you the document, to keep a record of which document you requested, and to follow up with you about it. This data is stored in our contact management system.
Server logs and security. Our hosting provider processes IP addresses and request metadata to serve the site, defend it against attacks, and distinguish people from bots on our forms. We see this data only in aggregate or when investigating abuse.
Traffic statistics. We measure how the site is used with Umami, a privacy-focused analytics tool. It records which pages are viewed, the referring site, the country, and the browser and device type, together with clicks on selected buttons and whether a form was submitted. It sets no cookies and stores nothing in your browser. Your IP address is used only for a moment to derive the country and a daily-rotating, non-reversible visitor hash; it is not stored, and the hash cannot be linked back to you or across days. We never send what you type into a form to the statistics tool.
We do not use advertising trackers or social media pixels, and we do not sell or rent personal data to anyone.
Legal bases
Where the GDPR applies, we rely on the following legal bases: responding to your inquiry rests on taking steps at your request prior to a possible contract and on our legitimate interest in answering people who write to us. Delivering requested documents and following up on them rests on our legitimate interest in understanding and serving the readers of our publications. Traffic statistics rest on our legitimate interest in understanding which content is useful, which we can pursue without consent because the tool uses no cookies and cannot identify you. Abuse prevention and security rest on our legitimate interest in keeping the site available and safe.
Who processes data for us
We use a small number of processors: Cloudflare (website hosting, content delivery, and the Turnstile bot check on our forms), Brevo (transactional email and contact storage), and Umami Software, Inc. (cookieless traffic statistics). Each processes data on our instructions under its own data processing terms. Some of these providers operate globally, and transfers outside the EEA are covered by standard contractual clauses or equivalent safeguards.
How long we keep data
Contact form submissions are kept for as long as the correspondence they started remains active, then archived or deleted. Download records are kept so we can serve you relevant material; we periodically review stored contacts and remove records that are no longer needed. You can request deletion at any time and we will action it without undue delay.
Your rights
You have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. Where processing rests on consent, you may withdraw that consent at any time. To exercise any of these rights, email contact@safedescent.ai. You also have the right to lodge a complaint with your data protection supervisory authority.
The self assessments
Our ERA self assessments run in your browser. Your answers stay on your device and are not sent to us unless you explicitly choose to share your results with our team. The ERA application lives on its own subdomain and may publish its own privacy notice; where it does, that notice governs the application.
Changes to this policy
We will update this policy when our processing changes, and the date at the top always reflects the latest revision. Material changes will be visible on this page; we do not silently repurpose data collected under an earlier version.