Security & Privacy

A backup app only works if you trust it with everything your clients gave you. This page is the plain-English truth about what we copy, where it lives, how it's protected, who can touch it, and how you stay in control. Where something is still on our roadmap, we say so — we will never claim protection we don't yet provide.

What we back up — and what we leave alone

When you install RecoveredSafe on a sub-account, we read and store copies of your CRM data so we can restore it later: contacts (with custom fields, tags, notes, and tasks), opportunities, calendars and appointments, custom objects, email templates and campaigns, products and invoices, and conversation history. We also keep a safe archive of structures GoHighLevel gives us no way to rewrite — pipelines, forms, workflows, funnels, and payment records — to guide a rebuild.

We do not access anything we don't need to protect you, and we are honest about restore scope: all of your CRM data is one-click restorable; workflows, funnels, and forms are archived for a guided rebuild. See the full scope on our home page.

Encryption

• In transit: every connection — backup reads and restore writes — uses TLS 1.2+.
• At rest: your backups are encrypted with AES-256.
• Per-agency envelope encryption: each agency's backups are encrypted with their own data key, wrapped by a master key held in a managed key store. That means one agency's data is cryptographically isolated from every other agency's — a breach of one cannot expose another.
• Key management: master keys live in a managed secret store and are rotated; per-agency data keys are never stored in application code.
• Zero-knowledge tier Roadmap — a future option where you hold the key and even we cannot read your backups. It adds real lost-key risk, so it will be optional, not the default.

Least privilege & access

• Minimal OAuth scopes: we request only the read scopes a backup needs — nothing more. A short permission list means a smaller, safer install.
• Read-only in normal operation: we only ever write to your account when you trigger a restore. We never push data into your account on our own.
• No standing human access to the contents of your backups. Backups run automatically. Any exceptional "break-glass" access is logged and you are notified.

Where your data lives

Backups are stored as encrypted objects on Cloudflare R2. We disclose the storage region and will notify you before any material change to where your data is held. Because backups are structured text, storage is small and inexpensive — which is why generous retention is a choice you get to make, not a cost we pass on.

Your control over your data

• Configurable retention Roadmap — choose how long to keep history (e.g. 30 / 90 / 365 days / forever). Retention length is your call.
• Self-serve export: download a full copy of any backup at any time. Your data is portable and there is no lock-in.
• Delete-on-leave: when you cancel or uninstall, we purge your backups after a short grace window, honoring the right to erasure under laws such as the GDPR and CCPA.

What we will never do

Your data is used for exactly one purpose: to back it up and restore it for you. We will never sell it, share it, mine it, use it to target ads, or use it to train AI models. Ever.

Transparency

• Customer-visible audit log: every backup run and every access or restore is recorded — who, and when — and visible to you.
• Backup notifications: we confirm successful backups and alert you promptly if one ever fails.

Subprocessors

We keep our vendor list short and purposeful:

Each processes data only as needed to provide RecoveredSafe. We'll update this list before adding a subprocessor that touches your data.

Compliance & credentials Honest today

We follow SOC 2-aligned practices — least privilege, encryption, logging, and change control — today. A formal SOC 2 Type II audit and an independent penetration test are on our roadmap, not yet complete. We will publish them here when they are, and we will not claim a certification we don't hold.

Incident response

If we ever discover a security incident affecting your data, we will investigate promptly, take steps to contain and remediate it, and notify affected customers without undue delay, consistent with applicable law.

Reporting a concern

Found something, or have a security question? Email [email protected] and a real person on the RecoveredSafe team will respond.