Privacy Policy
Effective May 6, 2026
This Privacy Policy describes how Fieldwise Technologies Inc. (“SiteProof,” “we,” “us”) collects, uses, shares, and protects information when you use the SiteProof website, mobile applications, and related services (the “Service”).
We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws in Canada. If you reside in another jurisdiction, additional rights may apply; contact us using the details at the end of this page.
1. Information We Collect
Account information. When you register, we collect your name, email address, phone number, role (Builder, Subcontractor, or Field Worker), and the company you belong to. Field Workers may also sign in via a single-tap SMS magic link without creating a password.
Work content. Photos, notes, drawings, markups, completion-evidence submissions, task descriptions, and progress reports that you or members of your project team upload or create.
Usage data. Pages visited, features used, submission timestamps, and high-level event analytics. We do not track your physical location.
Device data. Browser/operating system, device model, app version, and crash diagnostics — collected to keep the app working on the devices our users actually use.
2. How We Use Information
- To provide the Service: showing your tasks, projects, drawings, and reports.
- To share work-completion records with the General Contractor or Builder who requested the work (this is the core purpose of the Service).
- To authenticate your account and protect against unauthorized access.
- To send transactional emails (account verification, weekly digests).
- To diagnose bugs, improve performance, and prioritize features.
3. How We Share Information
With your project team. Builders, Subcontractor admins, and Field Workers who share a project see content appropriate to their role. Subcontractors’ private notes (e.g. internal markups, material plans) are not shared with the Builder.
With recipients of share links. If you (as a Subcontractor) generate a share link for a Work Report, anyone with that link — typically the Builder or General Contractor — can view the report without signing in. You can revoke a share link at any time.
With service providers. We use the following processors strictly to operate the Service:
- Cloudflare R2 — stores uploaded photos and PDFs (object storage).
- Resend — sends transactional emails.
- Twilio — sends SMS magic-link sign-in messages to Field Workers.
- Railway — hosts our PostgreSQL database and application servers.
- Sentry — collects crash and error diagnostics.
- PostHog — collects product analytics events (feature usage, funnels). No raw text content of your work is sent.
Each processor accesses only the data needed to perform their function and is bound by a data-processing agreement.
For legal reasons. We disclose information when required by law, court order, or to protect rights, safety, and property. We will notify you unless legally prohibited from doing so.
4. Data Location and Transfers
Service infrastructure is hosted in Canada and the United States. Some processors (e.g. Sentry, PostHog) may store data in other jurisdictions. Where we transfer personal information across borders, we rely on appropriate safeguards, such as contractual data protection clauses.
5. Retention
We keep account and work-completion records for as long as your account is active. Once you delete your account, we delete or anonymize personal information within 30 days, except where a longer period is required by law (e.g. tax records). Work submitted by you may persist in a project owned by another company if it’s part of that company’s historical record; contact us if you need it removed.
6. Your Rights
- Access the personal information we hold about you.
- Correct inaccurate information.
- Delete your account and associated personal information from within the app (Account → Delete Account) or by emailing us.
- Withdraw consent for processing where consent is the lawful basis.
- Lodge a complaint with the Office of the Privacy Commissioner of Canada.
7. Security
We use industry-standard practices: TLS for all data in transit, encryption at rest for stored files, hashed passwords (bcrypt), and least-privilege access controls. No system is perfectly secure; we encourage strong, unique passwords and prompt reporting of suspected unauthorized access.
8. Children
The Service is not intended for individuals under 16. We do not knowingly collect information from children. If you believe a child has provided us with information, contact us and we will delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The “Effective” date at the top of this page reflects the latest version. For material changes, we will notify you via email or an in-app notice before they take effect.
10. Contact Us
Fieldwise Technologies Inc.
Ontario, Canada
Email: privacy@mysiteproof.com