Privacy Policy

Jobsite, operated by Jobsite LLC ("Jobsite," "we," "us"), provides construction safety training and compliance tools to construction companies and their workers. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

Who this policy applies to

We serve two types of users: companies (owners, managers, and admins who subscribe to Jobsite) and workers (employees or contractors added to a company roster). Data handling differs slightly for each; we note the distinction where it matters.

Information we collect

From companies

• Account details: company name, business address, email, phone, billing contact.
• User profile for each owner/manager: name, work email, password hash, role.
• Operational data: worksites and jobs, trade categories, worker roster, training records, signed forms, and the project records you keep in Jobsite (daily logs, drawings, RFIs, submittals, punch lists, schedules, budgets, contracts).
• Contacts you enter for the people you work with — subcontractors, clients, owners, architects — including their name, title, email, and phone.
• Project email you route to a Jobsite inbound address: the message, its sender and recipients, and its attachments.
• Records of your agreement to our Terms (version accepted, date and time, IP address, browser) and of the confirmation you give when adding workers to your roster.

From workers

• Name, mobile phone number (optional), email (optional), employer-assigned trade and employee ID, preferred language.
• Training and certification records: completions, quiz results, expiration dates — and credential documents your employer uploads about you, which can include occupational medical clearances such as a respirator medical evaluation.
• Photos: your profile photo; a clock-in photo when your employer turns on that requirement; and photos you take inside the app (jobsite photos, walkthroughs, incident and observation reports).
• Video and audio recordings you make inside the app, and the transcripts we produce from them.
• Location: coordinates when you clock in or out, and location data embedded in photos you upload.
• Signatures you draw on forms (hazard analyses, policy acknowledgments, tickets).
• Injury and incident records your employer files about you, including the detail OSHA recordkeeping requires — see Sensitive information below.
• 4-digit login PIN, generated by Jobsite or chosen by the worker. We store it only as a keyed hash, never the PIN itself, and it is shown once, when it is issued.
• SMS opt-in status, date/time of opt-in, and message body used to collect consent; and a record of your acceptance of our Terms (date and time, IP address, browser).

From any visitor

• Server logs: IP address, browser user agent, request timestamps. Retained 30 days for security.
• No cross-site advertising trackers. No sale of personal information.

Business contacts we research

For our own sales outreach, we obtain business contact information — name, job title, work email and phone, company, and public professional profile — for people who work at construction companies, from People Data Labs and public sources. We use it only to contact you about Jobsite. Email privacy@jobsitecerts.com to be removed.

Sensitive information

Jobsite is an OSHA injury-and-illness recordkeeping tool, so incident records can contain health information about a worker: a description of the injury or illness, the part of the body affected, the treatment given and where, whether the worker was hospitalized, days away from work, and the OSHA "privacy case" classification that keeps a worker's name off the printed log for certain kinds of cases. We collect this only as your employer enters it for its own recordkeeping. It is visible only to the authorized managers of that employer, never to other companies, and we do not use it for any purpose other than providing the service. Jobsite is not a healthcare provider and is not a HIPAA covered entity or business associate.

We do not collect Social Security numbers, dates of birth, home addresses, government ID numbers, or biometric identifiers. Photos and voice recordings are stored as images and audio; we do not measure faces, voices, or any other body characteristic to identify anyone.

How we use information

• Deliver the Jobsite service: user login, training delivery, certificate issuance, compliance reports, recordkeeping, and the project tools your company uses.
• Send transactional emails (welcome, cert earned, weekly compliance digest for managers).
• Send SMS messages to workers who have confirmed opt-in via reply YES. See our SMS Opt-In page.
• Product analytics limited to aggregate usage (page views, feature adoption). No individual tracking sold or shared.
• Security monitoring: rate limiting, PIN brute-force defense, fraud detection.

How we share information

We share personal information only with the following parties, and only as needed to operate the service:

• The worker's own employer. By design, a worker's training records are visible to managers of the construction company they belong to.
• Service providers who process data on our behalf: Supabase (database, authentication, and file storage), Vercel (application hosting), Resend (email delivery), Twilio (SMS delivery), Stripe (subscription billing and subcontractor payments), People Data Labs (business-directory lookup at signup), Sentry (server error reports, scrubbed of personal information before they are sent), and our AI providers — Anthropic, OpenAI, and Google Cloud Vertex AI — each of which is contractually prohibited from training models on your data. Each is engaged to process your records only as we direct. One qualification their own published terms make: Stripe, Twilio, and Resend also process a narrow slice — payment-transaction data, communications-usage data (and, for abuse prevention, message content), and sending/account metadata respectively — as independent controllers for the limited purposes their terms enumerate, such as fraud and abuse prevention, billing and legal compliance, and service improvement; that is standard for payment, telecom, and email infrastructure. The full register, naming what each one actually receives, is on our Security & Privacy page.
• Third-party code running in your browser: analytics, maps, the sign-in bot check, and embedded video players see the IP address you browse from. They do not see the address of the page you are on — analytics is given the route pattern (/rfi/respond/[token]) rather than the link, which matters because many of our links are share links where the address is the credential that opens them. They receive no project record. The address autocomplete necessarily receives what you type into that one field; the others receive nothing you type anywhere. Each is named, with what it receives, on our Security & Privacy page.
• AI assistants your company connects: a manager can connect an AI assistant, such as Claude, through our MCP connector (see Connect Jobsite to Claude). A connection is approved by a signed-in manager for one company; it can read that company's records within the access the manager granted and, only if the manager allowed it, add workers, set worker custom fields, and create RFIs as that manager, behind that manager's own permissions. When the assistant asks, we send it the requested records, and from then on its provider processes them under its own terms and privacy policy, not ours. We receive only the parameters of each request (for example, a job filter), never your conversations with the assistant. We keep the assistant's name and return address, which manager approved it, a log of each change it makes, and one-way hashes of the credentials we issue (access credentials expire after an hour). A manager can revoke a connection at any time under Integrations › API & agent access, which ends its access immediately.
• People your company chooses to share with: when a manager generates a share link — for an inspector, an owner, a subcontractor, or a client — only the linked record is shared with whoever holds that link.
• Law enforcement when required by valid legal process, and only the minimum information required.

We do not sell, rent, or share personal information with advertisers, data brokers, or marketers.

SMS data

Phone numbers collected for SMS opt-in are used only to deliver the messages described on the SMS Opt-In page. Mobile opt-in data, consent records, and phone numbers are never shared with third parties for marketing or promotional purposes, and are not passed to any affiliates.

Data retention

• Active company account: data retained for the life of the subscription.
• Cancelled account: we keep your data after you cancel, so it is still there if you come back — we do not delete it on a timer. When you want it gone, email privacy@jobsitecerts.com and we delete it within 30 days of your request, unless retention is required by law (e.g., OSHA recordkeeping).
• Training and certification records: the company may be required by OSHA or other regulators to keep these for up to 5 years; we retain them on the company's behalf.
• SMS logs and opt-in evidence: retained at least 12 months, per carrier compliance requirements.
• Terms-acceptance and roster-confirmation records: retained as evidence of the agreement for as long as the law allows a claim under it, including after the account or worker record is deleted. These records hold a version, a timestamp, an IP address, and a browser string — not the content of your account.
• Server logs: 30 days.

Security

• All traffic is encrypted in transit with TLS 1.2+.
• Passwords are hashed with bcrypt. Worker PINs are four digits, stored only as a keyed hash (never the PIN itself) and shown once when issued, and are protected by per-worker and per-company rate limits with lockout on repeated failure.
• Database access is restricted via Postgres row-level security; each company sees only its own data.
• We log authentication events and monitor for unusual patterns.

Your rights and choices

• Access and correction. Workers can view their own records in the worker portal; managers can view and correct roster data.
• SMS opt-out. Reply STOP to any Jobsite text to unsubscribe immediately.
• Email unsubscribe. Every email includes an unsubscribe link; transactional emails (password reset, cert earned) cannot be unsubscribed while your account is active.
• Deletion. To request deletion of personal information, email privacy@jobsitecerts.com. We will honor requests within 30 days, subject to legal retention obligations.
• Content complaints. To report content on Jobsite that is defamatory about you, discloses your private information, impersonates you, or infringes your copyright, see our Copyright and Content Complaints page. Requests to delete or correct personal information use the address below instead.
• California and similar state rights. California, Colorado, Virginia, Connecticut, and Utah residents have additional rights under their state privacy laws (access, deletion, correction, portability). Contact us at the address above to exercise them.

Children

Jobsite is not intended for anyone under the age of 16. We do not knowingly collect information from minors. If you believe a minor has been added to a company roster, contact us and we will remove the record.

International users

Jobsite is operated from the United States and data is processed in the U.S. If you access the service from outside the U.S., you consent to the transfer of your information to the U.S.

Changes to this policy

We may update this policy from time to time. Material changes will be announced by email to account owners at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the most recent change.

Contact

Questions, requests, or concerns about privacy: email privacy@jobsitecerts.com. For general support, support@jobsitecerts.com.