Privacy Policy

1. Introduction

SafeCrewHQ ("we," "our," or "us") operates the SafeCrewHQ platform at www.safecrewhq.com. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our construction safety management platform, including our website, portal, mobile interfaces, and integrations with third-party services.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, phone number, company name, and role within your organization.

Worker Information

Administrators may add worker profiles including names, phone numbers, and email addresses for the purpose of assigning and delivering Job Hazard Analysis (JHA) forms.

Safety Data

We collect data you submit through JHA forms, incident reports, near-miss reports, audit responses, and training records. This data is used to provide safety management services to your organization.

Integration Data

When you connect third-party services (such as Jobber or other CMMS/FSM platforms), we receive work order schedules, visit details, assigned worker information, and job site addresses from those services. We store OAuth tokens in encrypted form to maintain these connections.

Usage Data

We automatically collect information about how you interact with our platform, including pages visited, features used, and device information.

3. How We Use Your Information

We use your information to:

• Provide and operate the SafeCrewHQ platform
• Send JHA forms and safety notifications via SMS
• Synchronize work schedules from connected third-party services
• Generate safety reports and analytics for your organization
• Process billing and manage your subscription
• Communicate with you about your account and our services
• Improve and develop new features for our platform

4. SMS Communications

We use Twilio to send SMS messages containing JHA form links to workers. Phone numbers are shared with Twilio solely for the purpose of delivering these messages. Workers receive SMS only when their organization assigns them JHA forms or when work orders trigger automated dispatch.

5. Third-Party Integrations

When you connect third-party services to SafeCrewHQ:

• We access only the data scopes you authorize during the connection process
• OAuth access tokens and refresh tokens are encrypted at rest using AES-256-GCM encryption
• You can disconnect any integration at any time, which immediately revokes our access and deletes stored credentials
• We do not sell or share data received from third-party integrations with any other parties

6. Data Storage and Security

Your data is stored in secure, encrypted databases. We implement industry-standard security measures including:

• Encryption of sensitive data at rest and in transit
• Secure password hashing
• Organization-scoped data isolation (multi-tenancy)
• API key authentication with hashed storage
• HMAC signature verification for webhook endpoints

7. Data Sharing

We do not sell your personal information. We share data only with:

• Service providers who help us operate the platform (hosting, SMS delivery, payment processing)
• Third-party integrations you explicitly authorize
• Law enforcement when required by law

8. Data Retention

We retain your data for as long as your account is active. Safety records (JHA submissions, incident reports, audit results) are retained for the duration required by applicable workplace safety regulations. When you delete your account, we remove your personal information within 30 days, except where retention is required by law.

9. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and personal data
• Export your data in a portable format
• Disconnect any third-party integrations at any time

10. Cookies

We use essential cookies to maintain your session and authentication state. We do not use third-party tracking cookies for advertising purposes.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our platform or sending you an email.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at privacy@safecrewhq.com.