Data Handling
Last updated: August 20, 2026 — a developer-facing description of exactly what data the Safe4 API touches. It complements the Privacy Policy.
What a request contains
A call to the authorization endpoint carries the fields you send: task, purchase, purchase purpose, amount, currency, counterparty, service category, allowed service categories, and optional task and agent identifiers. All of it is free-form text you control.
What we store
Each delivered decision writes one entry to an append-only audit log: sequence number, timestamp, a hash of the request payload, a summary of the request (task, purchase, counterparty, category), the decision with its reason code and matched concepts, the amount and currency, the paying wallet address, and the settlement reference. Idempotency records are kept so a retried request returns its original answer instead of being charged again.
Why the log is append-only
Each audit entry’s hash covers the hash of the entry before it, so any retroactive edit to a past decision is detectable. That tamper-evidence is the product; it is also why individual entries cannot simply be rewritten or deleted without breaking the chain.
What we never hold
Private keys, seed phrases, and wallet credentials. API payments are authorized with an EIP-3009 signature produced by your wallet — Safe4 receives the signature, never the key. Safe4 takes no custody of funds: fees settle through Circle Gateway to a payout address.
Payment data
Settlement is performed by Circle Gateway under Circle’s terms. Gateway balances and anything written to public blockchains are held by those systems and are visible to their participants; they are not under Safe4’s control once written.
Transport and hosting
All traffic is encrypted in transit with TLS.
Do not send what we do not need
Task and purchase fields are free-form. Do not put personal data, secrets, or credentials in them: whatever you submit becomes part of a durable audit record.
Deletion requests
Email support@safe4.ai. The integrity caveat from the Privacy Policy applies: where the law permits, entries that cannot be removed without breaking the chain are preserved with their use restricted.