SiteV – Privacy Policy

What We Collect

• Email address: Used to link your account to a company workspace, manage invitations, and enable company-based access. We do not use your email for marketing.
• Company name: Provided by you or inferred from your email domain to enable company features (e.g., invites, workspace linking).
• Device ID: A unique ID generated on first open, used to enable secure device–web linking and document transfer.
• Project notes & inspection data: Notes, findings, metadata, and related records you save are stored in our managed database (Supabase).
• Inspection Photos (optional): When you run “Inspect,” the chosen photo is sent to OpenAI for analysis. You can choose to save the photo/result into your inspection record; if saved, it is stored in Supabase.
• Encrypted PDFs: If a PDF is sent from the website to your app, it is encrypted before storage. We cannot access its contents.

We do not collect other personal identifiers such as your phone number, precise GPS location, or your contacts.

How We Use Your Information

• Company linking & invites: Using your email and company to associate accounts with company workspaces and manage invitations.
• Core functionality: Saving your project notes and inspection data; enabling secure device–web linking and document transfer.
• Compliance & safety: To meet legal obligations and enforce our terms.

We do not sell your personal information.

How the Inspect Feature Works

The photo you select for inspection is sent directly to OpenAI for processing. By default, we don’t store that photo on our servers unless you choose to save it with your inspection record.

If you save the result (and optionally the photo), it is stored in Supabase as part of your inspection data.

OpenAI may temporarily retain submitted content for abuse monitoring, as described in their Privacy Policy.

How Your Data Is Stored

Supabase (managed database & storage): We store your project notes, inspection data, and account data (email/company) in Supabase with access controls.

Transfer storage for PDFs: If a PDF is sent from the website to your app, the file is encrypted and stored in Cloudflare private storage (temporary transfer storage). These files are intended to be temporary and may be deleted after transfer.

End-to-end encryption for PDF transfer: When you scan a QR code, your device and the website exchange public keys to derive a one-time shared encryption key. The private key never leaves your device. PDFs are encrypted with this key before upload, and only your app can decrypt them.

Technical note: PDFs are encrypted using AES-GCM with a shared key derived through ECDH (P-256). The private key remains on your device.

Data Retention

• Email & company details: Retained while your account is active and as needed for legal/operational purposes. Upon request, we’ll delete or de-identify this data unless we must retain it by law.
• Project notes & inspection data (Supabase): Retained until you delete them or request deletion, subject to legal retention requirements.
• Transfer storage (encrypted PDFs): Temporary by design and may be deleted after transfer completes.

Sharing & Service Providers

We share limited data with trusted providers strictly to run SiteV:

• Supabase (managed database/auth/storage for account, notes, and inspection data you save).
• OpenAI (only the photos/content you intentionally submit for Inspect).
• Cloudflare (secure temporary file transfer and hosting).

These providers process data on our behalf under contracts that limit use to providing the service. We do not sell your data.

Your Privacy Rights

You can request access to, correction of, or deletion of your email/company information and the notes/inspection data stored in Supabase. If you saved a photo in an inspection record, you can delete it from within the app or by contacting us.

If you’re in a region with specific rights (e.g., New Zealand Privacy Act 2020, GDPR/EEA, CCPA/CPRA), you may have additional rights. Contact us and we’ll help.

International Transfers

We may process and store information on servers located outside your country. We take steps to protect your information consistent with this policy and applicable law.

Children

SiteV is not directed to children. If you believe a child provided us personal information, contact us and we’ll delete it.

Changes to This Policy

We may update this policy from time to time. We’ll change the “Last updated” date above, and, if changes are material, we’ll notify you by reasonable means.

Contact

Questions or requests? Contact Jimmy James:

info@sitev.co.nz