Privacy Policy

Who we are

Globosafe Limited is a company registered in Ireland (company number 690739), with its registered office at May's Field, Beach Lane, Portrane, Dublin, Ireland, K36 X015. We are the data controller for the information described in this policy.

For any privacy question, use our contact form.

The short version

• We collect your email address and payment status. That's it, for account purposes.
• We do not store the messages you paste in. They are analysed and the result is returned to you. No copy is kept.
• We do not sell your data, and we do not use it to train AI models.
• You can ask us to delete your account at any time.

What we collect

Account information

Your email address, and whether your subscription is active. We need this to let you sign in and to check that your subscription is current.

Payment information

Payments are handled by Stripe. We never see or store your card details. Stripe holds your payment information as an independent controller under its own privacy terms. We receive only confirmation of payment, the plan you chose, and a customer reference.

The messages you check

When you paste a message into Globosafe, the text is processed to produce your result and is then discarded. We keep a record that a check took place — a timestamp, the outcome category, and a count — so we can operate and improve the service. We do not keep the message itself, and we do not keep the verdict detail tied to you.

Links and domains

To check a message, we extract any web addresses it contains and look them up against threat-intelligence databases and domain registration records. These lookups involve the address only — not the message content, and not your identity.

Technical information

Like any website, our host processes standard request data (IP address, browser type, timestamp) to serve pages and protect against abuse. We do not build advertising profiles and we do not run third-party tracking, advertising or analytics cookies.

Cookies

We set one cookie, gs_sid, and only after you sign in. It contains a signed token so the site knows you are logged in. It is required for the service to work, expires after 30 days, and is not used for tracking. There are no analytics or advertising cookies.

Why we are allowed to process this

• To perform our contract with you — providing the service you have paid for, which includes your account and payment records.
• Our legitimate interests — keeping the service secure, preventing abuse, and understanding at a high level how it is used.
• Legal obligations — retaining financial records as required by Irish and EU law.

Who processes data on our behalf

We use a small number of service providers. Each is bound by contract to process data only on our instructions:

• Cloudflare — hosting and content delivery for this website.
• Stripe — subscription payments and billing.
• Google — threat-intelligence lookups for links contained in messages.
• Automated language-model analysis — used to read a pasted message and produce your result. Message text is processed for that purpose only and is not retained by us.
• Our email provider — used to send sign-in links and service messages.

Some of these providers process data outside the European Economic Area. Where that happens, the transfer is protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

How long we keep things

• Messages you check — not stored at all.
• Check counts — retained while your account is open, then deleted.
• Account and subscription records — while your account is open, then deleted.
• Financial and tax records — retained for the period required by Irish law (currently six years).

Your rights

You have the right to:

• ask for a copy of the personal data we hold about you;
• have inaccurate data corrected;
• ask us to delete your data, where we are not required to keep it;
• object to, or ask us to restrict, certain processing;
• receive your data in a portable format;
• withdraw consent where processing is based on consent.

Use our contact form and we will respond within one month. We may ask you to confirm your identity first.

If you are unhappy with how we have handled your data, you can complain to the Irish Data Protection Commission at dataprotection.ie. We would prefer the chance to put it right first.

Security

We use encryption in transit, signed session tokens rather than passwords, and access controls on our own systems. No service can promise perfect security. If a breach ever affects your data, we will tell you and the Data Protection Commission as required by law.

Children

Globosafe is a service for businesses and is not intended for anyone under 18. We do not knowingly collect data from children.

Changes to this policy

If we change this policy we will update the date at the top and, where the change is significant, tell you by email.