Privacy Policy

1. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us, including:

• Name, email address, phone number, and job title
• Company name, address, and industry information
• Billing and payment information
• Employee count and other business-related data
• OSHA compliance and safety records you choose to upload

Automatically Collected Information

When you visit our website, we automatically collect certain information, including:

• IP address and device information
• Browser type and version
• Pages visited and time spent on our site
• Referring website or source
• Usage patterns and preferences

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain our OSHA compliance services
• To process transactions and send related information
• To send technical notices, updates, and support messages
• To respond to your comments, questions, and customer service requests
• To send promotional communications (with your consent)
• To monitor and analyze usage patterns and improve our services
• To detect, prevent, and address technical issues or fraud
• To comply with legal obligations

3. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: With trusted third parties who assist in operating our website and services
• Legal Requirements: When required by law, court order, or government request
• Protection of Rights: To protect our rights, privacy, safety, or property
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: In any other manner with your explicit permission

4. Data Security

We implement industry-standard security measures to protect your personal information, including:

• AES-256 encryption for data at rest and in transit
• Regular third-party security audits
• SOC 2 Type II compliance
• Strict access controls and authentication protocols
• Secure AWS cloud infrastructure
• Encrypted token storage for OSHA credentials

5. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request copies of your personal data
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal data
• Objection: Object to processing of your personal data
• Portability: Request transfer of your data to another party
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us at [email protected].

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. OSHA compliance records are retained according to regulatory requirements (typically 5 years). When information is no longer needed, we securely delete or anonymize it.

7. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

8. California Privacy Rights

California residents have specific rights under the California Consumer Privacy Act (CCPA). To learn more about your rights, please contact us at [email protected].