Legal

Privacy Policy

Effective date: February 24, 2026. Last reviewed: February 24, 2026.

SafetyDataSheetAPI is a product of DscvryAI. This Privacy Policy describes how we collect, use, disclose, and retain information when you use safetydatasheetapi.com, including sample SDS uploads, API-related requests, and contact submissions.

1. Data We Collect

We may collect the following categories of data:

  • Contact data: full name, work email, company, role title, and message content submitted through contact or sample forms.
  • Document metadata: file name, size, language hint, schema version, and extraction processing metadata.
  • Technical data: IP address, user agent, request path, country/region/city, and related request metadata provided by Cloudflare.
  • Security and abuse-prevention data: Cloudflare Turnstile verification outcomes and anti-abuse telemetry.

2. How We Use Data

  • Operate and secure the website and API endpoints.
  • Process sample uploads and return structured extraction outputs.
  • Respond to contact requests and implementation inquiries.
  • Detect abuse, fraud, and unauthorized access attempts.
  • Monitor system reliability and improve service performance.
  • Comply with legal and regulatory obligations.

3. Legal Bases (Where Applicable)

For EEA/UK users, processing may rely on one or more of the following legal bases: legitimate interests, contract pre-steps, legal obligation compliance, and consent (where required).

Our privacy operations are designed to support compliance with applicable frameworks, including EU GDPR (Regulation (EU) 2016/679), UK GDPR and UK data protection law, and California privacy law (CCPA as amended by CPRA), where those laws apply.

4. SDS Sample Content and Retention

Sample uploads are intended for evaluation and abuse-controlled processing. We do not use customer-submitted SDS documents to train public foundation models. Data retention periods may vary by deployment and contract terms. For enterprise deployments, retention windows can be configured.

5. Processors and Infrastructure

We use infrastructure and security service providers, including Cloudflare for hosting, edge security, and bot mitigation controls. For extraction processing, configured model providers may receive uploaded document content solely to return extraction results.

6. International Data Transfers

Data may be processed in countries other than your own depending on chosen deployment model. Where required, we implement appropriate safeguards for cross-border data transfers.

7. Your Rights

Depending on jurisdiction, you may have rights to request access, correction, deletion, portability, restriction, objection, or appeal related to your personal data. To exercise rights, email [email protected].

8. U.S. State Privacy Notice

If you are covered by applicable U.S. state privacy laws (including laws effective in states such as California and other U.S. states with comprehensive privacy statutes), you may have rights to know, delete, correct, and opt out of certain data uses. We do not sell personal information in exchange for monetary consideration.

Because U.S. state privacy law requirements continue to expand, we review this policy periodically and update notice language to reflect newly effective state-level requirements.

9. Cookies and Similar Technologies

We may use strictly necessary technologies for security, session handling, and anti-abuse controls. If optional analytics or preference technologies are introduced, this policy will be updated accordingly.

10. Security

We maintain administrative, technical, and organizational safeguards designed to reduce unauthorized access, alteration, disclosure, and destruction risk. No internet transmission or storage system can be guaranteed as 100% secure.

11. Children

The service is intended for business users and is not directed to children under 16.

12. Policy Updates

We may update this Privacy Policy to reflect operational, legal, and regulatory changes. Updates become effective on publication unless a different date is stated.

13. Contact

Privacy or data-rights requests: [email protected].

Notice: This policy is informational and does not constitute legal advice.