Privacy notice

This notice covers visitors to this website and people who use the SiteProof AI application. Where an organization uses SiteProof to verify its contractors, that organization decides what is entered about its projects and people, and we process that data on its behalf. Questions can be sent through the contact page.

• Account details: your name and e-mail address, and your role within an organization.
• Project data you or your team enter: projects, contractors, bills of quantities, milestones, claims, decisions and payment recommendations.
• Evidence files: photographs and documents uploaded during inspections, with the capture time and location contained in the files, a fingerprint of each file and measured quality.
• An audit trail: a record of who did what and when inside an organization.
• Contact requests: the name, e-mail, company and message you send through the contact form, and a one-way hash of your network address used only to limit abuse.

• To provide the service: verifying claims, recording decisions and producing evidence packs.
• To keep it secure, prevent abuse and investigate problems.
• To reply to messages you send us.

We use only the cookies the application needs to work: a session cookie that keeps you signed in, and a cookie that remembers which organization you are working in. We do not use advertising or tracking cookies, and this website does not run third-party analytics.

The application stores its data in a managed PostgreSQL database with authentication and private file storage provided by Supabase, and runs on a hosting provider chosen at deployment. We do not sell personal data. Shared evidence packs are visible to anyone you give the link to, until it expires or you revoke it.

Organization data is kept for as long as the organization uses the service, or until it asks us to delete it. The audit trail is append-only by design, so entries are not edited or removed while the organization exists. Contact requests are kept for as long as needed to reply and follow up. Automated deletion schedules are not built yet.

Data is separated between organizations by the database itself, access is limited by role and by project, and evidence is stored privately. See the FAQ for what is and is not built yet.

You can ask to see, correct or delete personal data we hold about you, or object to how it is used, by contacting us. If you are an employee of an organization using SiteProof, your organization's administrator may be the right first contact for data they control.

We will update this notice as the product changes and show the date of the latest update at the top of the page.