Account data: your email address and authentication metadata, used to sign you in.

Structured records: data extracted from documents you sync, stored as schema-validated JSON on a regional database node in your jurisdiction.

Usage data: authentication events and your vault's transparency log, which records every third-party query against your data.

Your raw documents. Files remain in your own cloud storage (Google Drive, Dropbox) and are read over OAuth, parsed in memory, and the memory buffer is wiped. SabiProfile servers do not retain document files.

Structured records are stored on sovereign regional database nodes partitioned by jurisdiction, designed to satisfy NDPC (Nigeria), GDPR (European Union), and equivalent residency requirements.

Cryptographic hashes (SHA-256) of verified records are anchored to a public blockchain. A hash cannot be reversed into your data.

Only you, by default. Third parties can query specific categories of your vault only when they present a scoped API key that you issued, and only within that key's category scope, expiry, and quota.

Every such query is written to your transparency log, visible in your vault. You can revoke any key at any time; revocation takes effect on the next query.

We use essential cookies for authentication sessions. With your consent, we use privacy-respecting product analytics. You can accept or decline analytics cookies from the consent banner, and change your choice by clearing site data.

You may export, correct, or delete your structured records from your vault at any time. Deleting a record removes it from the database node; the on-chain hash remains as an unlinkable proof artifact and contains no personal data.

For privacy requests, contact us through the contact page with the topic set to Support.