Privacy Policy
Learn how DeclassifAI protects your privacy with end-to-end encryption and minimal data collection.
Last Updated: October 15, 2025
Encrypted Processing
Files are encrypted end-to-end before upload, processed securely on our backend, and returned encrypted.
Minimal Data Collection
We only collect essential account information. No document content is ever stored.
GDPR Compliant
Full compliance with GDPR, CCPA, and international privacy regulations.
Table of Contents
Introduction
Welcome to DeclassifAI. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By using DeclassifAI, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.
DeclassifAI is operated by Safe Media AI AS. We are committed to protecting your privacy in accordance with Norwegian law, GDPR, and international privacy standards.
Critical Privacy Feature
All documents are encrypted end-to-end before leaving your browser. Our backend processes encrypted files and immediately deletes all data upon completion. We do not store document content on our servers.
Interpretation and Definitions
For the purposes of this Privacy Policy:
- Account: means a unique account created for You to access our Service or parts of our Service.
- Company: (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to DeclassifAI, affiliated with Safe Media AI AS.
- Device: means any device that can access the Service such as a computer, a cellphone or a digital tablet.
- Personal Data: is any information that relates to an identified or identifiable individual.
- Service: refers to the DeclassifAI website and application.
- Usage Data: refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
- You: means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
Collecting and Using Your Personal Data
DeclassifAI is designed to minimize data collection. We only collect information necessary to provide and improve the Service.
Personal Data
When you create an account or contact us, we may collect personally identifiable information, including but not limited to:
- Email address
- First name and last name
- Account preferences and settings
Document Data - NEVER STORED
Documents you process through DeclassifAI are encrypted end-to-end before upload. Our backend processes the encrypted files and immediately deletes all data upon completion. We do not store document content on our servers.
Usage Data
We may collect limited Usage Data automatically when you use the Service. Usage Data may include:
- Your Device's Internet Protocol address (IP address)
- Browser type and version
- Pages you visit and time spent on pages
- Diagnostic data to help us improve the Service
Tracking Technologies and Cookies
We use minimal tracking technologies:
- Cookies: Small files stored on your device to maintain your session and preferences.
- Local Browser Storage: Used to store your settings and preferences locally in your browser. You can disable this feature entirely in settings. When enabled, only configuration data is stored - never document content.
Use of Your Personal Data
The Company may use Personal Data for the following purposes:
- To provide and maintain our Service, including to monitor the usage of our Service.
- To manage Your Account: to manage Your registration as a user of the Service.
- To contact You: To contact You by email regarding updates or informative communications related to the Service.
- To provide You with news and general information about other services we offer, unless You have opted not to receive such information.
- To manage Your requests: To attend and manage Your requests to Us.
- For business transfers: We may use Your information to evaluate or conduct a merger, divestiture, restructuring, or sale of some or all of Our assets.
Retention of Your Personal Data
The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.
The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service.
Document Data - NEVER RETAINED
Documents processed through DeclassifAI are encrypted before upload, processed on our secure backend, and all data is immediately deleted upon completion. We do not retain any document content on our servers.
Transfer of Your Personal Data
Your information, including Personal Data, may be processed at the Company's operating facilities and in any other places where the parties involved in the processing are located. This means that this information may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of Your jurisdiction.
Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer. The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy.
Document Processing Location
Documents are encrypted end-to-end in your browser before being sent to our secure backend servers for processing. All processing data is immediately deleted after completion.
Disclosure of Your Personal Data
Business Transactions
If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.
Law Enforcement
Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).
Other Legal Requirements
The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:
- Comply with a legal obligation
- Protect and defend the rights or property of the Company
- Prevent or investigate possible wrongdoing in connection with the Service
- Protect the personal safety of Users of the Service or the public
- Protect against legal liability
Security of Your Personal Data
The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.
DeclassifAI is designed with security in mind. All documents are encrypted end-to-end before transmission, processed securely on our backend, and all data is immediately deleted after processing.
Our Security Measures
- • End-to-end encryption - documents are encrypted before upload and during processing
- • Immediate data deletion - all processing data is deleted upon completion
- • Minimal data collection - we only store essential account information
Service Providers
We may employ third party companies and individuals to facilitate our Service ("Service Providers"), to provide the Service on our behalf, to perform Service-related services or to assist us in analyzing how our Service is used.
These third parties have access to Your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. We use minimal third-party services:
- Analytics (opt-in only) - to help us understand how users interact with the Service
- Hosting services - Google Cloud Platform (europe-west4 region in Netherland) for infrastructure
- Authentication services - if using third-party login (e.g., Google OAuth)
- Email services - for account-related communications
Note: Analytics tracking is opt-in only and can be disabled at any time in your account settings.
GDPR Privacy
If You are a resident of the European Economic Area (EEA), You have certain data protection rights under the General Data Protection Regulation (GDPR). DeclassifAI aims to take reasonable steps to allow You to correct, amend, delete, or limit the use of Your Personal Data.
Your GDPR Rights
- Right to Access: You have the right to request copies of Your Personal Data.
- Right to Rectification: You have the right to request that We correct any information You believe is inaccurate or complete information You believe is incomplete.
- Right to Erasure: You have the right to request that We erase Your Personal Data, under certain conditions.
- Right to Restrict Processing: You have the right to request that We restrict the processing of Your Personal Data, under certain conditions.
- Right to Object: You have the right to object to Our processing of Your Personal Data, under certain conditions.
- Right to Data Portability: You have the right to request that We transfer the data that We have collected to another organization, or directly to You, under certain conditions.
To exercise these rights, please contact us at support@safemediai.no. We will respond to Your request within 30 days.
Legal Basis for Processing
- Consent: You have given Your consent for processing Personal Data for specific purposes.
- Performance of a Contract: Provision of Personal Data is necessary for the performance of an agreement with You.
- Legal Obligations: Processing Your Personal Data is necessary for compliance with a legal obligation to which the Company is subject.
- Legitimate Interests: Processing Your Personal Data is necessary for the purposes of the legitimate interests pursued by the Company.
CCPA Privacy (California Residents)
If You are a California resident, You have specific rights under the California Consumer Privacy Act (CCPA) regarding Your Personal Information.
Your CCPA Rights
- Right to Know: You have the right to request that We disclose certain information to You about Our collection and use of Your Personal Information.
- Right to Delete: You have the right to request that We delete any of Your Personal Information that We collected from You.
- Right to Opt-Out: You have the right to opt-out of the sale of Your Personal Information. Note: We do NOT sell Your Personal Information.
- Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising Your CCPA rights.
To exercise these rights, please contact us at support@safemediai.no.
We do not sell Personal Information and have not sold Personal Information in the past 12 months.
State Privacy Rights (US)
Residents of several US states have additional privacy rights under state-specific legislation:
Colorado Privacy Act (CPA)
Colorado residents have rights to access, correct, delete, and obtain a copy of their Personal Data, as well as opt-out of certain processing activities.
Connecticut Data Privacy Act (CTDPA)
Connecticut residents have rights similar to CCPA, including the right to access, correct, delete, and port their Personal Data.
Utah Consumer Privacy Act (UCPA)
Utah residents have rights to access, delete, and obtain a copy of their Personal Data.
Virginia Consumer Data Protection Act (VCDPA)
Virginia residents have comprehensive privacy rights including access, correction, deletion, and portability of Personal Data.
Privacy Rights for Canadian Residents
If You are a resident of Canada, You have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial privacy laws.
Canadian residents have rights to access their Personal Information, challenge its accuracy, and withdraw consent for processing, subject to certain legal or contractual restrictions.
Data Privacy Framework Compliance
DeclassifAI complies with applicable data protection frameworks and standards. We implement appropriate technical and organizational measures to protect Personal Data in accordance with international privacy principles.
Children's Privacy
Our Service is not intended for use by children under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13.
If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers.
Links to Other Websites
Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site.
We strongly advise You to review the Privacy Policy of every site You visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
Changes to this Privacy Policy
We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this Privacy Policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
For significant changes, We will provide a more prominent notice (including, for certain services, email notification of Privacy Policy changes).
Contact Us
If you have any questions about this Privacy Policy, You can contact us: