Draft for launch review

Privacy at SafeJ1

SafeJ1 is designed to collect as little personal information as possible and to avoid collecting identity documents through the public website.

Privacy commitment: SafeJ1 collects only the information needed to review and respond to a help request. Please do not submit highly sensitive identifiers or credentials.

Information we collect

If you request help, SafeJ1 may collect your name, contact information, country and time zone, limited J-1 program information, a general description of the issue, actions already taken, and the kind of help requested.

Information you must not submit

  • Your complete Social Security number
  • Passwords, PINs, authentication codes, or recovery codes
  • Complete bank, card, loan, or other account numbers
  • Copies of passports, Social Security cards, visas, or other identity documents
  • Information about another person unless you are authorized to provide it

How requests will be protected

The help form uses encrypted transmission, encrypted storage, server-side validation, automated spam protection, restricted administrative access, and multi-factor authentication. Email notifications will not contain the complete submission.

How information may be used

Information may be used to review and respond to your request, help organize possible next steps, maintain security, and improve SafeJ1’s educational resources. Anonymized pattern information will be used for research or prevention work only when the requester gives separate permission.

Retention and deletion

SafeJ1 will retain identifiable help-request information while a request is active and for up to 180 days after the last substantive communication. After that period, the identifiable information will be securely deleted unless a longer period is required by law, needed to address abuse or a security incident, or requested by the individual for continued assistance.

You may request deletion of your identifiable help-request information at any time by emailing contact@safej1.org. SafeJ1 will complete a verified deletion request within 30 days, subject to any limited legal or security obligation to preserve specific information. Deleted information may remain in restricted system backups until those backups expire, no later than 30 days after deletion. Security and access logs may be retained for up to 90 days.

If you separately consent, SafeJ1 may retain anonymized statistical information without a fixed expiration date to study fraud patterns and improve prevention resources. Anonymized information will not include direct identifiers and will not be used to contact you.

External websites

SafeJ1 links to government agencies, credit bureaus, and other external resources. Their privacy and security practices are controlled by those organizations. Verify the address before entering sensitive information on any external site.