Site Secure ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information through our web and mobile applications, websites, and related services (collectively, the "Services") located at sitesecure.io. The Services help construction and field-service organizations manage worker records, job sites, timecards, certifications, toolbox talks, documents, messaging, incidents, scheduling, time off, compliance review, and related workplace workflows. Available features depend on your role and your organization's subscription and settings.
Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Services. By accessing or using Site Secure, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.
1. What Data We Collect and Why
Account Information
When you create a Site Secure account, we collect:
- • Name and email address
- • Phone number, including for one-time password (OTP) sign-in when your organization enables phone authentication
- • Organization or company name
- • Job title or role
We collect this information to create and manage your account, provide customer support, and send you service-related notifications.
Location Data
For workers using our mobile app during active shifts, we collect:
- • GPS coordinates and precise location data
- • Background location data only where enabled, needed for the workflow, and permitted by the device and platform
- • Clock-in/clock-out locations
- • Geofence checks used to verify on-site presence during punch workflows
We collect location data to help verify worker presence on job sites, support timecard accuracy, review incidents, and provide job-site activity records to the worker's organization. Location data is intended to be collected only when a worker has actively clocked in or is using a workflow that requires location. Users must grant location permissions on their device, and platform behavior may differ between iOS, Android, and web.
Photos and Images
We collect photos and images for:
- • Worker certification documents (licenses, cards, etc.)
- • Worker documents uploaded for organization review
- • Safety inspection photos
- • Incident documentation and evidence
- • Site conditions and equipment checks
- • Selfie images captured during clock-in when your organization enables selfie verification
Photos are collected to maintain worker and job-site records, document safety conditions, and support incident review.
Digital Signatures
We collect:
- • Digital signatures on toolbox talks and safety documents
- • Timestamps of signature events
- • Signature metadata and context
We collect signature data to create records of worker acknowledgment, including timestamps and related context.
Work Hours and Timecards
We collect:
- • Clock-in and clock-out times
- • Break duration and timing
- • Job site assignments
- • Hours worked per project or job
This data is collected to track worker attendance, generate payroll records, and provide accurate project time allocation.
Safety Training Records
We collect:
- • Toolbox talk completion records
- • Training completion dates and times
- • Certification expiration dates
- • Safety or training status shown to your organization
We collect training data to track assigned trainings, certification renewals, and worker readiness for job-site workflows.
Messages and Communications
When your organization uses in-app messaging, we collect:
- • Message content and replies you send in the app
- • Message timestamps and delivery status
- • Organization broadcast and reminder content sent through the platform
Messages are shared with your organization and used for crew communication, reminders, and workplace coordination.
Incident Reports
When you submit or participate in incident reporting, we collect:
- • Incident descriptions, notes, and classifications
- • Related photos, signatures, and timestamps
- • Job site, worker, and organization context linked to the report
Incident data supports safety review, organization records, insurance, and dispute handling.
Time Off and Scheduling
When your organization enables these modules, we collect:
- • Time-off requests, dates, and approval status
- • Shift assignments and schedule changes
- • Calendar and crew scheduling context
This information helps organizations manage staffing, coverage, and worker availability.
Push Notification Tokens
We collect device tokens to send you real-time push notifications about:
- • Expiring certifications
- • Pending toolbox talk assignments
- • Incident reports and site alerts
- • Schedule changes and important updates
Usage Data and Product Analytics
To understand how the Services are used and improve reliability, we collect product interaction and diagnostic data:
- • On the web app: page views, feature usage events, and optional in-depth analytics events when enabled in your account settings
- • On the mobile app: screen and navigation activity, taps, session activity, app version adoption, custom workflow events (such as authentication, timecard, document, certification, and alert interactions), and related device metadata
- • Crash logs, error reports, and performance diagnostics
Web analytics are processed through Vercel Analytics. Mobile product analytics are processed through Vexo Analytics when analytics is enabled for the mobile build. On mobile, signed-in users are associated with a hashed analytics identifier rather than a raw account identifier. Vexo may also support product analytics features such as funnels, dashboards, heatmaps, and session replay for troubleshooting and product improvement. Analytics data is used for product analytics only and is not used for third-party advertising, ad attribution, ad measurement, data sale, or data brokerage.
Device Information
We collect:
- • Device type and model
- • Operating system and version
- • Mobile app version
- • Device identifier
We collect device information for app optimization, troubleshooting, crash reporting, mobile product analytics, and ensuring compatibility across different platforms.
2. How We Use Your Data
We use the information we collect for the following purposes:
- • Service delivery: To provide, operate, and maintain the Site Secure platform
- • Safety and training workflows: To track worker certifications, training completion, and job-site records
- • Payroll: To generate accurate timekeeping records and payroll exports
- • Site safety: To verify worker presence, manage crew assignments, and respond to emergencies
- • Communication: To send service updates, in-app messages, support responses, and push notifications
- • Incident and compliance review: To document, investigate, and report on safety incidents and compliance status for your organization
- • Analytics: To understand how users interact with our web and mobile apps, diagnose issues, and improve functionality. Web usage analytics are handled through Vercel Analytics. Mobile product analytics are handled through Vexo Analytics when enabled for the mobile app.
- • Business and legal obligations: To support recordkeeping, respond to lawful requests, and enforce our agreements
- • Fraud prevention: To detect and prevent unauthorized access and misuse of the platform
3. Data Sharing and Third Parties
Within Your Organization
Your personal information may be shared with:
- • Organization administrators and managers (to manage crew, assignments, and compliance)
- • Payroll and HR departments (for timekeeping and payroll processing)
- • Project managers and site supervisors (for scheduling and site management)
Admins can only access data appropriate to their role within your organization.
Service Providers
We share data with carefully selected vendors who help us operate the platform:
- • Supabase (PostgreSQL): Database hosting and storage
- • Vercel: Web application hosting, deployment, and web usage analytics
- • Sentry: Error tracking and crash reporting
- • Vexo Analytics: Mobile app product analytics, including usage events, session activity, and related diagnostics when mobile analytics is enabled. See Vexo's Privacy Policy.
- • Expo: Push notification delivery for the mobile app
- • Resend: Transactional email delivery for account, notification, and service messages
All service providers are bound by confidentiality agreements and are only permitted to use your data as necessary to provide their services. Vexo Analytics is used for product analytics only and is not used for advertising, ad attribution, ad measurement, data sale, or data brokerage.
Legal and Safety
We may disclose your information when:
- • Required by law, court order, or government request
- • Necessary to prevent fraud, security threats, or physical harm
- • Required for regulatory compliance or safety investigations
- • Necessary to protect our legal rights or enforce our agreements
No Third-Party Marketing
We do not sell, license, or share your personal information with third parties for their marketing or advertising purposes. The Site Secure mobile app does not contain third-party advertisements or ad-network tracking pixels. Vexo Analytics is used for product analytics only. Your data is only shared as described in this Privacy Policy.
4. Data Retention
We retain your personal information for as long as necessary to provide our Services and fulfill the purposes outlined in this Privacy Policy. Retention periods include:
- • Account information: For the duration of your account and for a limited period after deletion when needed for backups, fraud prevention, dispute handling, or required records
- • Timecards and work history: Retained for the organization's payroll, billing, recordkeeping, and dispute needs, subject to organization policy and applicable requirements
- • Safety training records: Retained while needed by the organization for training history and job-site records
- • Location data: Retained while needed for timecard review, job-site activity records, incident review, or dispute handling. Deletion may require organization approval where the data is part of employer records.
- • Incident reports: Retained while needed for organization records, investigation, insurance, or dispute handling
- • Photos and signatures: Retained while needed for the associated document, certification, training, timecard, or incident record, subject to organization policy and applicable requirements
- • Messages and scheduling records: Retained while needed for organization communication, staffing, and workplace coordination
- • Usage and analytics data: Retained according to our analytics providers' retention settings and operational needs for product improvement and diagnostics
You may request deletion of certain data, but some records may be retained when needed for your organization's records, security, fraud prevention, dispute handling, backups, or legal obligations. We may retain de-identified or aggregated data for analytics and service improvement.
5. Your Privacy Rights and Choices
Right to Access
You may request a copy of personal information associated with your account. Contact us at team@pulsecommunityagency.com with your request.
Right to Correct
You may correct or update inaccurate personal information through your account settings or by contacting us.
Right to Deletion
You may request deletion of your account and associated personal information. Account deletion is permanent and cannot be undone. Some historical records, such as timecards, incident records, signatures, or organization documents, may be retained where needed for organization records, dispute handling, security, backups, or legal obligations.
Right to Opt-Out
You may opt out of push notifications and marketing emails through account or device settings where available. On the web app, you can disable in-depth analytics in your account dashboard preferences. Disabling operational notifications or required analytics needed for app operation may affect reminders, timecards, certifications, or other app workflows.
Right to Data Portability
Where applicable and technically feasible, we can provide personal information associated with your account in a portable, machine-readable format.
Right to Withdraw Consent
You may withdraw consent for location tracking or other optional data collection through your device settings or account preferences where available. Some workflows may stop working if required permissions are disabled.
6. Children's Privacy
Site Secure is not intended for children under 13 years of age, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will delete such information immediately and terminate the child's account.
Parents or guardians who believe their child has provided information to Site Secure should contact us immediately at team@pulsecommunityagency.com.
7. Data Security
We use administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, alteration, and disclosure:
- • Encryption: Data is transmitted over HTTPS, and service providers use encryption controls for hosted data
- • Authentication: Secure password requirements and account verification workflows
- • Access controls: Role-based access limits information to authorized personnel only
- • Monitoring: Error tracking, logging, and review processes to help identify issues
- • Incident response: Internal procedures for investigating security issues and taking corrective action
While we implement strong security practices, no system is completely secure. We cannot guarantee absolute security of your information.
8. Privacy Requests
Depending on where you live and how your organization uses Site Secure, you may have privacy rights under applicable law. We will review and respond to requests as required by applicable law, including requests to:
- • Access personal information associated with your account
- • Correct inaccurate personal information
- • Delete personal information, subject to organization records, backups, dispute handling, security, and legal obligations
- • Receive a portable copy of personal information where applicable and technically feasible
To make a privacy request, please contact us at team@pulsecommunityagency.com. We may need to verify your identity and coordinate with your organization before fulfilling a request.
9. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact:
Site Secure Privacy Team
Built by Pulse Community Agency
We will review privacy inquiries and respond as soon as reasonably possible. Response timing may depend on the request, your location, and whether your organization controls the record.
10. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- • Posting the updated policy on our website with a new "Last Updated" date
- • Sending you an email notification of significant changes
- • Requiring your acceptance of the updated policy upon next login
Your continued use of Site Secure after changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this policy periodically to stay informed about how we protect your information.
Last updated: June 17, 2026
Effective date: May 13, 2026