Privacy Policy

1. Introduction

WorkSitePass ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy laws.

2. Information We Collect

Personal Information

When you create an account or use our Service, we may collect:

• Name and contact information (email address, phone number)
• Company name and business information
• Account credentials
• Billing and payment information (processed securely through Stripe)

Documents and Certificates

You may upload various documents to the Service, including:

• Safety certificates and training records
• Trade licenses and certifications
• Insurance certificates (COIs)
• Other compliance-related documents

Usage Information

We automatically collect certain information when you use the Service:

• Device information (type, operating system, unique identifiers)
• Log data (access times, pages viewed, app features used)
• Location data (only if you grant permission)
• Analytics data to understand how you use the Service

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your subscription and payments
• Send you expiration alerts and renewal reminders
• Respond to your inquiries and provide customer support
• Send important notices about the Service (updates, security alerts)
• Analyze usage patterns to improve user experience
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Information Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

Service Providers

We work with trusted third-party service providers who assist us in operating the Service:

• Cloud hosting and storage (Google Cloud Platform / Firebase)
• Payment processing (Stripe)
• Email communications (Resend)
• Analytics services

Legal Requirements

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers

If WorkSitePass is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Data Storage and Security

We take the security of your data seriously and implement appropriate technical and organizational measures to protect it:

• Data is encrypted in transit (TLS/SSL) and at rest
• Access to personal data is restricted to authorized personnel
• We use secure cloud infrastructure (Google Cloud Platform)
• Regular security assessments and monitoring
• Secure authentication mechanisms

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. After account deletion:

• We will delete or anonymize your data within 90 days
• Some data may be retained longer for legal or business purposes
• Backup copies may persist for a limited time

7. Your Rights

Under Canadian privacy law (PIPEDA), you have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Withdrawal of consent: Withdraw consent for certain data processing
• Data portability: Request your data in a portable format

To exercise these rights, please contact us at support@worksitepass.ca. We will respond to your request within 30 days.

8. Cookies and Analytics

Our website uses cookies and similar technologies to:

• Keep you signed in to your account
• Remember your preferences
• Understand how you use the Service (analytics)
• Improve our Service based on usage patterns

You can control cookies through your browser settings. Disabling cookies may affect some features of the Service.

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than Canada, including the United States (where our cloud infrastructure providers operate). These countries may have different data protection laws than Canada.

By using the Service, you consent to the transfer of your information to these countries. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending you an email notification
• Displaying a notice in the app

Your continued use of the Service after changes become effective constitutes acceptance of the revised Privacy Policy.