Privacy Policy

1. Who this policy covers

This policy describes the JobsiteStamp website and browser application at jobsitestamp.com and its native mobile companion apps when available (the “Service”). “JobsiteStamp,” “we” and “us” refer to the provider of this Service. It covers website visitors, company administrators, invited users and people who contact us.

If your company gives you access, it decides how to use its workspace and which business records to create, share and retain. Your company may have its own notices and obligations. Contact your administrator about your company’s use of your information; use the form below for questions or requests to JobsiteStamp.

2. Information we collect

• Account and company details: your name, email, company name, user ID, role, membership, invitation and account-access information. Our authentication service processes the credentials needed to sign in.
• Load records: photographs you submit, device-reported GPS coordinates and accuracy, capture and submission times, driver and contractor names, material, truck reference, notes and resolved location labels.
• Subscription information: the company plan, payment status, Stripe customer and subscription references, and invoice or transaction information needed to administer billing. Card details are entered on Stripe-hosted pages; our application does not store your full payment-card number or security code.
• Service and activity information: aggregate daily page-view counts by page and approximate country/state or region supplied by our hosting provider (without analytics cookies, stored IP addresses or visitor identifiers), account and administrative activity, request times, IP addresses, browser/device information and technical logs used by the Service and its hosting providers.
• Privacy and support requests: the name, email, company and message you provide. The privacy form also uses a coded, daily network identifier to limit abusive submissions rather than storing the raw IP address in the request record.

Only include information needed to document the work. Avoid unnecessary faces, vehicle plates or private documents in photos and notes. Do not send passwords, payment-card details or government ID documents through the privacy form.

3. Camera and location permissions

When you choose to record a load, JobsiteStamp asks your browser for camera and location access. A new camera photo and a location reading are required to submit a load. Location information includes coordinates, reported accuracy and the time of the reading. The Service does not continuously track your location in the background.

You can change permissions in your browser or device settings. Without camera or location access, you will not be able to complete a load record. GPS and street labels depend on device reception and mapping information and may be approximate.

4. How we use information

We use information to create and authenticate accounts; provide company workspaces, photo records and reports; manage invitations and permissions; administer trials, subscriptions and invoices; send account and service messages; respond to requests; troubleshoot problems; and protect the Service against misuse. We also use or retain information when needed to meet applicable legal obligations or resolve disputes.

JobsiteStamp does not include advertising pixels or sell personal information through this Service. We do not use your jobsite photos or company records as public marketing examples without permission.

5. Who can access information

Your company: authorized users can view records according to their roles and workspace permissions. Company administrators manage team access. Authorized users may download reports and share them outside JobsiteStamp; their handling of those copies is governed by their company’s practices.

JobsiteStamp administration: authorized platform administrators can access information needed to operate the Service, support accounts and handle requests.

Service providers: we use Supabase for authentication, database and photo storage; Vercel for hosting and server functions; Stripe for checkout, billing and payment-related services; and transactional email services for account messages. Providers process information needed for their services and may have their own privacy terms. Read Supabase’s policy, Vercel’s policy and Stripe’s policy.

Location services: after a load or service record is saved, its coordinates are sent to OpenStreetMap’s Nominatim service to look up an approximate street, city and ZIP code automatically when available. Lookups are cached and temporary failures are retried. Names, photographs and notes are not sent for this lookup. Choosing a map link opens an external map provider with the selected coordinates. Those providers’ own terms apply to that interaction.

Other disclosures: information may be disclosed when necessary to comply with law, protect people or the Service, resolve a dispute, or carry out a business transfer subject to appropriate confidentiality protections.

6. Browser and device storage

The application uses browser storage to keep your sign-in session and essential preferences, including whether an installation prompt has been dismissed. Its service worker caches a small set of app-shell assets for installation and the offline screen; it is not an offline database of your load photos or tickets.

You can log out and clear site data in your browser. Doing so may sign you out or reset preferences, but does not delete company records held by the Service. Stripe-hosted pages and external providers may use their own cookies or storage under their policies.

In the native mobile companion apps, sign-in tokens are stored using iOS Keychain or Android Keystore-backed encrypted storage. The app does not store your password. Unsent camera photos are temporary; native camera and exported report files may use the app cache. The app attempts to remove these files after use, and the operating system manages remaining cache files. Choosing the system share action sends the report to the application or recipient you select. Native apps do not continuously track location in the background.

7. Retention, security and processing locations

We retain account and company information while needed to provide the Service and support the company’s business records, and as necessary for billing, legal obligations, security and disputes. We assess deletion requests in light of these purposes and the company’s responsibilities. Backup copies may remain until replaced or removed through the provider’s backup lifecycle.

Ending a trial or subscription does not automatically delete saved records. A request to delete a person’s login is different from a request to erase shared company records, and cancelling a subscription is a separate billing action.

We use HTTPS and account and workspace access controls. Photo access is restricted to authorized requests. No storage or transmission method can guarantee complete security. Protect your password, use authorized devices and log out on shared devices.

Information may be processed in the United States and other countries where our providers operate. Their processing locations and applicable protections can differ from those where you live.

8. Your choices and requests

You may ask to access, correct or delete information associated with you, or ask how it is used. Available rights and exceptions depend on applicable law and the company’s relationship with you. Use the form below even if your workspace is paused or you no longer have login access.

We may verify your identity and authority before sharing or changing information and may coordinate with your company administrator. Some records may need to be retained for legitimate business or legal purposes. We will explain the result of a request; submitting it does not automatically erase records or cancel billing.

The Service is intended for construction businesses and their authorized teams, not for children under 13. If you believe a child has provided information, contact us through the form below.

Policy changes

We may update this policy as the Service changes. The date at the top identifies the current version. Where required, we will provide additional notice of a material change.