Privacy Policy

RecoveredSafe ("RecoveredSafe," "we," "us") is a backup and restore service. This policy explains what information we access when you install and use RecoveredSafe on your GoHighLevel sub-accounts, how we use and protect it, and the choices you have. By using RecoveredSafe you agree to this policy. For the deeper technical detail, see our Security & Privacy page.

Who our customer is

Our customer is the agency or business ("you") that installs RecoveredSafe on a GoHighLevel sub-account. The people whose records live in that account ("end customers") are your clients and contacts. We process that data on your behalf and at your direction, as a processor acting for you.

Information we access from your account

When you install RecoveredSafe, you grant it access via the platform's API to the data we back up on your behalf. In normal operation this access is read-only:

• CRM records — contacts (and their custom fields, tags, notes, and tasks), opportunities, calendars and appointments, custom objects, email templates and campaigns, products and invoices, and conversation history.
• Account structures — pipelines, forms, workflows, funnels, and payment records, which we archive so you can rebuild them.
• Sub-account details — business name, timezone, and identifiers needed to organize and label your backups.

We only write to your account when you explicitly trigger a restore.

Information we collect directly

• Account & settings — your authentication tokens (stored encrypted), backup schedules, retention preferences, and plan.
• Backups — the encrypted copies of your data described above, stored so we can restore or export them for you.
• Usage & logs — backup run history, restore/access events (your audit log), and basic security and reliability logs.

How we use information

• To create, store, and manage encrypted backups of your account on the schedule you choose.
• To restore your data, or to let you export it, when you ask us to.
• To show your backup-health dashboard and audit log, and to send backup success/failure notifications.
• To operate, secure, support, and improve the service.

We do not sell personal information, and we do not share, mine, ad-target, or use your data — or your end customers' data — to train AI models. It is used only to back up and restore.

How we protect it

Data is encrypted in transit (TLS 1.2+) and at rest (AES-256), with per-agency envelope encryption so each agency's backups are cryptographically isolated. Access is least-privilege and logged. Full detail is on our Security & Privacy page.

Subprocessors

We rely on a small set of trusted providers: Cloudflare for application hosting and encrypted object storage (R2), and the GoHighLevel platform we back up. Each processes data only as needed to provide RecoveredSafe.

Data retention & deletion

We retain your backups while RecoveredSafe is installed, according to the retention setting you choose. If you uninstall or cancel, we purge your backups after a short grace window, except where we must retain limited records to meet legal or accounting obligations. You can also export or request deletion of your backups at any time.

Your choices & rights

• Export anytime — download a full copy of any backup for portability.
• Uninstall anytime from your sub-account's app settings; this revokes access and triggers deletion of your backups after the grace window.
• Access, correction, or deletion — you or your end customers may exercise applicable rights under laws such as the GDPR and CCPA by emailing us.

Children

RecoveredSafe is a business tool and is not directed to children under 16. We do not knowingly collect their personal information.

Changes

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above, and where appropriate we will notify you.

Contact

Questions or requests: support@recoveredsafe.com.