Who we are
SAFETY-VERSE® is a safety knowledge and community platform operated by Sevron Ltd.
This notice explains what personal data we collect, why, what we do with it, and the rights you have over it. It covers the platform only.
Still to confirm: The registered company name, address, ICO registration number, and the contact point for data protection questions. Also whether Sevron Ltd and SAFETY-VERSE are the same controller, or separate controllers sharing data.
What we collect, and why
We collect only what the platform needs to work. There is no advertising on SAFETY-VERSE®, and we do not sell personal data or share it for marketing.
| What | Why | Lawful basis |
|---|---|---|
| Your name and email address | To create and identify your account, verify that the address is yours, and let you recover access to it | Performance of a contract |
| Your password | Stored only as a one-way hash. We cannot see or recover it, which is why a forgotten password is reset rather than retrieved | Performance of a contract |
| Your role or area of interest, if you give it | To make what the platform shows you more relevant | Consent: it is optional and can be removed |
| Questions you ask VERA or an Oracle, and the answers given | So you can return to them, and so the answer can follow a conversation rather than treating each question as new | Performance of a contract |
| What you post in the Orders, and how people vote on it | To run the community, and to calculate credits and rank | Performance of a contract |
| Your Academy email address, if you link one | To find your course enrolments on The Knights of Safety Academy and show your progress here | Consent: linking is optional and can be undone |
| Your answers to the Safety Readiness Check | To produce your score, and to keep a history so you can see it change | Performance of a contract |
| Your IP address, briefly | Only to count requests against a rate limit, so one visitor cannot exhaust a shared service. It is not used to identify or track you, and is not linked to your browsing | Legitimate interests: keeping the service available |
| A request identifier in our logs | So a failure you report can be found. Logs record failures and slow requests, not what you read | Legitimate interests: operating a reliable service |
What we do not collect
We do not use advertising or analytics trackers, and we do not build a profile of you for marketing.
We do not ask for special category data: health, beliefs, and so on. Please do not put it in a post or a question. If you describe an incident, describe what happened and what was learned, not who was involved.
We do not take payment details on this platform.
Who else processes your data
We use a small number of providers to run the platform. Each one only receives what it needs to do its part.
| Provider | What they receive | Why |
|---|---|---|
| Railway | Everything the platform stores, as our hosting and database provider | Hosting |
| OpenAI | The text of your question, and the earlier turns of that conversation | To generate the answer. Your name, email and account are not sent |
| Amazon Web Services (SES) | Your email address and the contents of the message | To send verification, password reset and Academy confirmation emails |
| Thinkific | The Academy email address you choose to link | To find your course enrolments. Only if you link an account |
Still to confirm: Whether a data processing agreement is in place with each provider, and the international transfer mechanism used for those outside the UK (OpenAI and AWS in particular), the IDTA or the UK Addendum.
Your questions and the AI
When you ask VERA or an Oracle a question, the text is sent to OpenAI to generate an answer. Your name, email address and account details are not sent with it.
Please do not include personal information about yourself or anyone else in a question. You will get a useful answer describing a hazard or a task without naming a person or a site.
The answers are saved to your account so you can return to them. You can delete a saved conversation at any time.
What other people can see
What you post in an Order is visible to other members of that Order, under your name.
Your rank is visible alongside your posts. Your credit balance and your renown score are not shown to anyone else.
Your Safety Readiness Check answers and results are private to you. Your saved conversations with VERA and the Oracles are private to you.
Moderators can see reported content and who reported it, so they can act on it.
How long we keep it
We keep your account data for as long as you have an account.
Safety Readiness Check runs are kept so you can watch your score change over time: the three most recent runs from any single day, and earlier days indefinitely.
Rate-limiting counters, which are the only place an IP address appears, are short-lived and expire automatically.
Still to confirm: Retention periods after account closure, for each category: account, posts, conversations, readiness runs, and audit records such as the credit and renown ledgers.
Your rights
Under UK data protection law you have the right to: be told what we hold about you and receive a copy; have inaccurate data corrected; have data erased in certain circumstances; restrict or object to how we use it; and receive your data in a portable form.
Where we rely on your consent: your role or area of interest, and a linked Academy account: you can withdraw it at any time without affecting anything done before.
To exercise any of these, contact us using the details below. We will respond within one month.
Complaining to us
If you think we have handled your personal data wrongly, you can complain to us directly. Tell us by any route you like: the contact address below is easiest, but we will accept a complaint however it reaches us.
We will acknowledge your complaint within 30 days, look into it, and tell you the outcome.
You do not have to complain to us first. You can go straight to the Information Commissioner's Office at ico.org.uk, or call 0303 123 1113, at any point.
Keeping your data safe
Passwords are stored as one-way hashes and cannot be read by us or recovered. Verification and reset links are stored the same way, so a copy of our database does not yield a working link.
Traffic between you and the platform is encrypted. Access to the systems holding personal data is limited to the people who need it.
If a breach occurs that is likely to put your rights at risk, we will tell the ICO within 72 hours and tell you without undue delay.
Changes to this notice
If we change how we use personal data in a way that affects you, we will tell you rather than relying on you noticing an updated page. The date at the top always shows when this was last changed.