Consumer Notice

Last updated: October 15, 2026

You are probably reading this because a website you visited mentioned SafeBind in its privacy policy, or because you followed a link from a form you filled out. This page explains, in plain language, what SafeBind records, what it never records, who is in charge of that record, and what you can do about it. It is a companion to our full Privacy Policy.

The short version

When you fill out a form on a website that uses SafeBind, we make a tamper-evident record of that moment — what the page showed you, what you entered, and how you interacted with it — so the business can later prove you agreed to be contacted, and so you can't be contacted by someone falsely claiming you did. The business whose website you were on decides what happens to that record. We hold it for them; we do not sell it, and we do not use it for advertising.

1. What SafeBind records

When a business installs SafeBind on a web form, and you interact with that form, we record:

The page as it appeared to you — including the exact disclosure and agreement wording that was on screen.
What you entered on the form — the information you typed or selected, such as your name and contact details.
How you interacted with it — clicks, typing, the timing of what you entered, and which box or button you used to agree.
The address of the page you were on — shown to the businesses that hold the record without any information carried in the address after a question mark.
Your IP address, and your browser and device details — for example browser type, operating system, screen and time zone.
A device fingerprint — a non-reversible value derived from characteristics of your device. It identifies a device, not a person, it cannot be turned back into those characteristics, and it is used to spot fraud and automated submissions. We do not use it for advertising.
Network timing — how long a few small requests from your browser to our servers take. It describes the connection, not you, and is used only to spot traffic relayed through a hidden proxy.
Automation indicators — signals suggesting a form was filled by a bot rather than a person.

SafeBind is offered for United States traffic only.

2. What we never record

The SafeBind tag is designed to strip out sensitive fields in your browser, before anything is sent to us, so they are not in the record. It looks for fields such as:

Social Security numbers and other government ID numbers, such as driver's license and passport numbers
Payment card numbers and card security codes (CVV / CVC)
Bank account numbers
Passwords and security-question answers
Any other field the business has marked as sensitive

The business that runs the form is responsible for marking sensitive fields the tag might not recognize on its own.

The tag does not change its behavior in response to a browser's Global Privacy Control or Do Not Track signal; the business that runs the website decides on which pages, and when, the tag runs. The tag does note whether your browser sent such a signal. That note stays in our own records — it is not part of the signed record, it is not shown to the business that collected your information or to any business that buys it, and it is deleted when the record's evidence is. We also do not record what you do on other websites: SafeBind is present only on the pages of the businesses that installed it, and it does not follow you around the internet or build an advertising profile of you. The device fingerprint is used only within the record it belongs to, to spot automated or fraudulent submissions, and never to advertise to you or to build a list of what you are shopping for.

3. Why the record exists

Federal law — in particular the Telephone Consumer Protection Act (TCPA) — requires a business to have your express written agreement before contacting you in certain ways. If that is ever disputed, someone has to be able to show what actually happened.

SafeBind exists to make that record independent and tamper-evident: it is signed and independently timestamped when it is created, so it cannot be quietly altered or backdated afterwards. That cuts both ways, and deliberately so. It helps an honest business prove you agreed — and it makes it much harder for anyone to manufacture an agreement you never gave.

4. Who controls it

The business whose website you were on is the controller of that record. SafeBind is a service provider: we capture, store, and verify the record on that business's behalf and under their instructions. We do not sell it, share it for advertising, or use it for our own purposes.

That business may pass the record to a company it sells or refers your enquiry to, so that the receiving company can confirm the agreement is genuine and relates to you before contacting you.

5. How long it is kept

If no receiving company saves the record and the record shows no agreement was given — for example, you left the page without finishing — we keep it for 90 days from the date it was created.
If no receiving company saves the record but the record shows that you agreed, we keep it for 12 months from the date it was created. Whether the record shows an agreement is our system’s reading of the page, not a judgment about what you did.
If a receiving company saves it, we keep it for five years from the date they saved it — the period in which a dispute about the contact could still be raised.

These periods are set by SafeBind and are not adjustable by the businesses that use us.

The results of our automated analysis of a record — for example whether a submission looked automated — are deleted 30 days after the record was created (a legal hold can keep them longer); the record itself is kept for the periods above. When we delete those results, we may keep a copy of the disclosure wording the page showed and of our reading of it, with nothing that identifies you, the business, or the record, and use it only to make our analysis more accurate.

6. Your choices & rights

Because the business that ran the website is the controller, privacy requests should go to that business — including requests to access, correct, or delete your information. Their privacy policy will say how to reach them. SafeBind will help them respond as the law and our agreement with them require.

If a company the business passed your enquiry to has saved the record, that company holds its own copy and controls it, so requests about that copy, including deletion, go to that company. Deleting the record at the business whose website you were on does not remove a copy another company has saved.

One thing to be aware of: a consent record may be needed by that business to establish, exercise, or defend a legal claim — for example, to answer a TCPA complaint — or to meet a legal obligation. Where that applies, the law may permit them to retain specific evidence for the relevant limitation period even after a deletion request. That decision is theirs to make as the controller, not ours.

If you do not know which business to contact, email us at the address below with whatever detail you have and we will do our best to point you to the right controller.

7. Contact

SafeBind AI LLC — [email protected]

For the complete picture, including how we handle information about our own website visitors and customers, see our Privacy Policy. Businesses looking for example language to put in their own privacy policy will find it in the SafeBind console, on the Install page.

We may update this notice. When we do, we will revise the "Last updated" date above.