Draft — Pending Attorney Review. This Privacy Policy has not yet been reviewed by a licensed attorney. It is not final and should not be relied upon as legal advice.
Legal

Privacy Policy

SafJob LLC · Last updated: August 2026

The short version:

We collect the information you give us to run the platform. We do not sell your data. We do not use your data for advertising. Safety records belong to your organization. You can request a full export at any time. OSHA-regulated records cannot be deleted inside their retention period, including by us.

Contents

  1. Who We Are
  2. Information We Collect
  3. How We Use Information
  4. Data Sharing & Sub-processors
  5. Data Retention
  6. Security
  7. California Privacy Rights (CCPA)
  8. Worker Data
  9. Children's Privacy
  10. Changes to This Policy
  11. Contact

1. Who We Are

SafJob is operated by SafJob LLC, a Washington limited liability company, located in Vancouver, Washington. This Privacy Policy describes how we collect, use, and protect information when you use the SafJob platform at app.safjob.com.

Contact: [email protected] · 541.579.8682

2. Information We Collect

3. How We Use Information

We do not sell your data. We do not use your data for advertising.

4. Data Sharing & Sub-processors

We share data only with the service providers required to operate the platform. Each is bound by a data processing agreement.

Sub-processor Purpose
SupabaseDatabase, authentication, and file storage
CloudflareHosting and content delivery
AnthropicAI-assisted suggestion generation. Customer data is not used to train AI models.
ResendTransactional email delivery (account and notification emails)
StripePayment processing

We may disclose data if required by law, court order, or a valid OSHA subpoena. In the event of a merger, acquisition, or asset sale, data may transfer to the successor entity with 30 days notice to users.

5. Data Retention

We retain your data as long as your account is active. OSHA-regulated records (incident reports, Form 300 / 300-A / 301 data, inspections, pre-task plans, and signed acknowledgments) are retained for at least the 5-year period required by 29 CFR 1904, and are not deletable from within the platform by any user, including account owners and SafJob staff. This is deliberate. A safety record that can be removed after the fact is not a record.

A project may be deleted by an account owner only while it holds no incident records. Once an incident exists on a project, that project can be archived but not deleted.

You may request deletion of non-regulatory data (for example a site logo or a profile photo) at any time by contacting [email protected]. We will respond within 30 days. We cannot delete OSHA-regulated records inside their retention period, even on request, and we will tell you so rather than quietly declining.

On account termination. Your access is suspended and your data is held, not deleted. You may request a full export during that period. Records outside the OSHA retention window are deleted on written request or 90 days after termination, whichever comes first. OSHA-regulated records are retained until their 5-year period expires and are then deleted. We will not delete anything without written notice to you first.

6. Security

We implement industry-standard security measures including AES-256 encryption at rest, TLS 1.2+ encryption in transit, role-based access controls, and audit logging.

SafJob personnel access. SafJob personnel have administrative access to platform data, including at the database level. That access is used solely to provide, maintain, and secure the Service, to comply with legal obligations, or to act on your request, and is bound by confidentiality. We tell you this because it is true of every hosted platform, and we would rather say it plainly than leave it implied.

No system is perfectly secure. In the event of a breach that may have affected your data, we will notify you within 72 hours of discovery.

7. California Privacy Rights (CCPA)

If you are a California resident, you have the right to: know what personal information we collect about you, request deletion of your personal information, opt out of the sale of your personal information (we do not sell personal information), and not be discriminated against for exercising these rights.

To submit a request, contact [email protected]. We will respond within 45 days.

Do Not Track. Some browsers send "Do Not Track" signals. The Platform does not track users across third-party websites, so there is nothing for such a signal to change, and we do not respond to it.

8. Worker Data

SafJob processes data about construction workers on behalf of your organization. Your organization is the data controller for worker records — we act as a data processor. You are responsible for ensuring workers are informed about how their safety data is collected and used.

SafJob will only process worker data as directed by your organization and as required to deliver the Service.

9. Children's Privacy

The SafJob platform is intended for use by adults 18 years of age or older. We do not knowingly collect personal information from individuals under 18. If you believe a minor has provided information through our platform, contact us at [email protected] and we will remove it promptly.

10. Changes to This Policy

We will notify you of material changes to this Privacy Policy via email or in-app notice at least 30 days before the changes take effect. Your continued use of the Platform after the effective date constitutes acceptance of the updated policy.

11. Contact

Privacy questions, data requests, or concerns:

[email protected]
541.579.8682
SafJob LLC · Vancouver, Washington