Privacy policy

Who we are

SafeSpace AI is provided by Gaston Software Solution LLP ("we", "us"), reachable at www.gss-tec.com and info@gss-tec.com. We are the data controller for the personal data described in this policy. This policy covers the SafeSpace AI web app and the "SafeSpace AI for Kids" browser extension.

SafeSpace helps a parent or guardian protect a child online. It blocks websites the guardian has chosen, enforces quiet hours and daily limits, and flags messages or page text that may show grooming, sextortion, bullying, scams or self-harm, so a trusted adult or a trained responder can help.

Data the extension handles

• Website addresses are checked against the guardian's rules on the device. Only blocked visits are reported, as the domain, category and time. Full browsing history is never uploaded.
• Page text is checked on the device by built-in rules. Only short excerpts that look risky are sent to the SafeSpace API for an AI risk score. The server stores the score and category and keeps any excerpt encrypted at rest.
• Active minutes, a count of time online, are used to enforce daily limits.
• A pairing token stored in extension storage links the browser to one child profile.

Data the web app stores

• Account details: name, email or username, phone (optional), password hash and role.
• SafeChat messages, encrypted at rest with AES-256-GCM. By default guardians see risk summaries, not full conversations.
• Risk events, cases, alerts, referrals and an append-only audit log of who viewed or changed what.
• The version of these policies you accepted, and when, as proof of consent.

Children's data

SafeSpace is used by children, so we minimise what we hold. A child's account is created or linked by a guardian, who consents on the child's behalf and can review, export or delete the child's data. Risk detection runs on short excerpts and scores; we do not keep full browsing history and, by default, guardians do not see the full text of a child's private conversations.

AI processing

Risk scoring uses SafeSpace's own text model and Supabase embeddings. If an administrator enables it, short text and image checks are also sent to OpenAI's moderation API, and case summaries are drafted by an OpenAI model. OpenAI does not use API data to train its models by default. SafeSpace never builds or trains models on child sexual abuse material.

Sharing

We do not sell data and do not use it for advertising. Data is shared only with the guardian linked to the child, responders assigned to a case and, when a case meets the referral threshold or someone is in danger, the relevant child-protection service (for example Sauti 116 or the Uganda Police). Infrastructure providers (Supabase for hosting and database, Vercel for the website, and optionally OpenAI, Twilio and Resend) process data only to run the service.

Legal basis and international transfers

We process personal data to perform our contract with the guardian, to comply with legal obligations, for our legitimate interest in keeping children safe, and, for a child's account, with the guardian's consent. Some providers store data outside your country; where that happens we rely on appropriate safeguards such as standard contractual clauses.

Retention and your choices

• Removing the extension, or unpairing the device in the guardian dashboard, stops all collection from that browser.
• Guardians can ask for a child's data to be exported or deleted by emailing info@gss-tec.com.
• Case records needed for an open child-protection referral may be kept as required by law.

Your rights

You can ask to see, correct, export, restrict or delete personal data, and object to certain processing. Email info@gss-tec.com and we will respond within the time the law allows. If you are unhappy with our response you may complain to your local data-protection authority.

Changes and contact

We will update this policy when our practices change and will show a new version date. Questions or requests: info@gss-tec.com, or www.gss-tec.com. Children who need help now can call Sauti 116 (free, 24 hours) in Uganda.