Privacy Policy

What we collect

Job answers

Everything you type into the builder for a job: company and project details, the general contractor and its contact, dates, crew size and languages, the names, titles and phone numbers or emails of people you list (such as your safety representative, foreman, competent persons and the people who prepare and approve the plan), emergency details, task and site-condition selections, and any text you write or approve. If you record a safety professional's review of a plan, we also keep the reviewer's name, credential or role and company, the review date, and the name and date you sign with, as part of that job. Please enter only information you are entitled to share; if you list other people, make sure they know their details are in the plan.

Email and account

Your email address if you sign in, buy a Job Pack or subscribe, and the jobs, purchases and subscription linked to it.

Purchases

Payments are handled by Stripe. We receive the plan you bought, the amount, the payment status, your email and a Stripe customer reference, and we keep them with the job, your anonymous visitor ID and the campaign details described below. We never see or store your full card number.

Usage and analytics

• An anonymous visitor ID, created at random and stored in your browser's local storage, so we can tell how many visitors start the builder, reach the preview and buy. It is not linked to your email unless you sign in or buy from that browser.
• Product events: page views, builder steps, reaching the preview, Draft requests, checkout clicks, purchases, downloads and sign-in requests. Each event is stored as its own record with your anonymous visitor ID, the page path and, when the event is about a job, the job ID. If you arrived from an ad or a link, the record also keeps the campaign details from the address (UTM parameters and the Google Ads click ID), your first landing page and the referring site.
• Private job links (the secret keys that let your browser reopen a job) are stored in your browser's local storage.
• Standard server logs (IP address, browser type, time and page requested) kept by our hosting provider for security and troubleshooting.

Google Ads tag

When it is enabled, we load Google's advertising tag (gtag.js) to measure whether visitors who clicked our ads go on to buy. Google may set cookies and receive information about your visit and purchase under Google's advertising policies. You can limit ad personalization at adssettings.google.com and block third-party cookies in your browser.

AI drafting

When you click Draft in the builder, the answers for that job are sent to Google's Gemini API, which writes the narrative paragraphs. Nothing is sent to Gemini unless you click Draft. Google processes that request under its API terms for our account. AI-drafted text is marked in the builder and stays flagged until you approve or rewrite it.

How we use information

• to build, save, preview and export your documents and let you reopen them;
• to process payments, manage subscriptions and give you access to what you bought;
• to send service email you ask for or need (sign-in links, receipts, subscription notices);
• to measure and improve the product and our ads (for example, which pages lead to builder starts and purchases);
• to keep the service secure, prevent abuse and meet legal obligations.

We do not sell your personal information for money, and we do not use the content of your plans to advertise to you.

Who processes it for us

• Supabase (database and sign-in), where job answers, emails and purchase records are stored;
• Stripe (payments and subscription billing);
• Google (Gemini API for AI drafting when you click Draft; Google Ads conversion measurement when enabled);
• our website hosting provider and our email delivery provider.

We may also disclose information when the law requires it, to protect rights and safety, or as part of a sale or reorganization of the business.

How long we keep it

• Jobs that nobody paid for or saved while signed in are deleted 90 days after they were last changed.
• Analytics events are deleted 13 months after they are recorded.
• We keep paid jobs and every purchase and subscription record until you ask us to delete them, even after a refund, a dispute or the end of a subscription. Stripe keeps its own records of the payment.
• A job saved by someone signed in, you or someone you shared its link with, stays with that account until you or they ask us to delete it.

Deleting your information

To delete a job, or your account and the jobs saved to it, email support@sitesafetypack.com from the address you sign in with. For a job you made without signing in, send us the job's link. We delete it within 30 days of your request. Our backups hold a copy for up to 30 days longer, until we delete them, and we delete your information again if we restore one. Stripe keeps its own records of payments, which we cannot delete.

After a deletion we keep only what prevents it from being undone. We permanently keep the IDs of the deleted jobs and the Stripe IDs of the payments and subscriptions we deleted, with the date but never your email, so that Stripe's records of them are never copied back here. A payment you made for someone else's job stays on that job, without your email, visitor ID, Stripe customer or campaign details. For 30 days we also keep a list of what we deleted, by ID, so that we can delete it again if we restore a backup.

Your choices

• Ask for a copy of your information or a correction the same way: email support@sitesafetypack.com from the address on your account, or send the job link for a job without one. Depending on where you live, you may have additional rights under state privacy laws; we will honor them as the law requires.
• Clear your browser's local storage to remove the anonymous ID and saved job links from that browser (you will lose access to anonymous jobs unless you saved the links).
• Block cookies or ad tags in your browser settings; the builder still works.

Security

We use HTTPS, access controls and secret job keys, and our providers secure their systems. No service is perfectly secure, so keep your job links and email account private.

Children

SitePack is a business service for adults and is not directed to children. We do not knowingly collect information from anyone under 16.

Changes

If we change this policy in a material way, we will update the date above and, where appropriate, tell account holders by email.

Contact

SitePack · support@sitesafetypack.com