Privacy policy
Effective 2026-10-05. How SitesLogix handles the information you and your crews put into it.
Who we are
SitesLogix is a product of SitesMark LLC, an Arizona limited liability company (“SitesMark”, “we”, “us”). You can reach us about privacy at privacy@siteslogix.com.
Your data and your workers’ data are different things
When your company signs up, we decide what we collect about you as a customer— your account, your billing, how you use the service. For the records your company creates inside SitesLogix — daily logs, photos, job site information, crew members, timesheets, pay rates, certifications — your company decides what is collected and why. We hold and process that on your instruction.
If you are a crew member and want your information corrected or removed, ask your employer. We will help them do it, but we will not change their records on our own.
What we collect
Account information — name, email address, the organization you belong to, your role, and an optional profile picture.
Records you create — daily logs, job safety analyses, photos, documents, job sites and customers, crews and schedules, time entries, certifications, equipment, estimates and invoices.
Photos, including where they were taken. Photos often carry embedded location and timestamp data from the camera. We read it, because knowing when and where site evidence was captured is much of its value. If you do not want location recorded, turn it off in your camera before taking the photo.
Technical information — IP address, browser and device type, and logs of requests, kept to operate and secure the service.
Billing information — plan, subscription status, and billing contact. Card numbers are handled by our payment provider and never reach our servers.
Why we use it
To provide the service and keep your records available to you; to authenticate you and protect accounts; to bill you; to send transactional messages about your account and your work; to diagnose faults and improve reliability; and to meet legal obligations.
We do not sell your data, and we do not use your records to train AI models. Where an organization turns on an AI feature, the text or documents submitted to it are sent to our AI provider to produce that answer, and not retained by us for any other purpose.
Who else processes it
We use the following providers to run the service. Each processes data only to provide their part of it.
| Provider | Purpose | What reaches them |
|---|---|---|
| Neon | Database hosting and authentication | All account and project data, sign-in credentials |
| Vercel | Application hosting and delivery | Requests, IP addresses, operational logs |
| Cloudflare | File storage (R2) and bot protection (Turnstile) | Uploaded photos and documents; sign-up challenge data |
| Polar | Subscription billing | Billing contact, plan and payment status. Card details go to Polar's processor and never reach us. |
| Resend | Transactional email | Recipient address and message contents |
| Twilio | SMS, where an organization enables it | Recipient phone number and message contents |
| Anthropic | AI features, where an organization enables them | The text and documents submitted to an AI feature, the photos and receipts a person chooses to send, and the job details needed to answer |
| Address lookup (Places); speech-to-text for dictation on Android phones; push delivery to Android phones | The partial address typed into a lookup field; the audio of dictation, when Android's own speech service is used; a device push token and the notification text | |
| Expo | Push notification relay and over-the-air updates for the phone app | A device push token, the notification title and text, and the app version and device type when an update is checked |
| Apple | Speech-to-text for dictation on iPhone; push delivery to iPhones | The audio of dictation, when Apple's speech service handles it; a device push token and the notification text |
We may also disclose information where the law requires it, or to protect the rights and safety of people using the service.
When our staff can see your records
Support access is consent-based and logged. Except in emergencies involving fraud, legal obligations, abuse, or security, a member of our team needs the organization owner’s approval before opening your data, and every session stays visible in your organization’s support-access history. See the support access policy.
How long we keep it
Records you delete enter a 30-day recovery window before permanent deletion, so a mistake is reversible. Organization owners can review and adjust retention in the application’s retention settings.
Some records are kept longer where the law requires it — payroll and safety documentation in particular. If you close your account, we delete or anonymize your data within a reasonable period, except where we are required to retain it.
Your choices
You can review and correct your own profile in your account settings, export the records your organization holds, and ask us to delete your account. Depending on where you live, you may also have the right to a copy of your data, to correct it, to delete it, and to object to certain processing. Write to privacy@siteslogix.com and we will respond.
Where the request concerns records your employer created about you, we will pass it to them, because it is their decision to make.
Security
Data is encrypted in transit and at rest. Access to production systems is limited to staff who need it. Within the application, what each person can see is enforced by the database itself and not only by the interface — so a person’s role limits what can be retrieved, not merely what is displayed. No system is perfectly secure, and we do not claim otherwise.
Children
SitesLogix is a workplace tool and is not intended for anyone under 16. We do not knowingly collect information from children. If you believe a child’s information has reached us, write to privacy@siteslogix.com and we will remove it.
Changes
If we change this policy in a way that materially affects you, we will tell you in the application or by email before it takes effect. The effective date at the top always reflects the current version.
The SitesLogix phone app
Draft section, awaiting owner review.
The phone app collects some things the website does not, because it is used on the job. Each one below is collected only for the reason given, and the permissions that need your phone’s approval are asked for when you first use the feature, not when you install the app.
Precise location when you clock in and out. When you punch in or out, the app records where the phone was, so the people who approve time can see that a punch happened at the job. It informs them; it never refuses a punch.
Location in the background, for arrival and leave reminders. If you turn on reminders, the app watches for you arriving at or leaving jobs you are assigned to, even when the app is closed, and reminds you to clock in or out. This is off until you agree to it, it is offered only after your company’s location policy has been signed, and it never clocks you in or out by itself or stops you from clocking in. You can turn it off in your phone’s settings at any time.
Camera and photos. Photos you take or choose are uploaded to your company’s records, with the time and place they were taken (see section 03). On iPhone, with your permission, the app reads the photos taken on a report’s day so it can offer them for that day’s report, and uploads only the ones you add. On Android you pick photos with the system photo picker, and the app sees only the ones you pick.
Microphone and speech recognition, for dictation. When you press the microphone to dictate, your speech is turned into text by your phone’s speech service — Apple’s on iPhone, Google’s on Android — which may process the audio on their servers. We receive the text, not the recording.
Push notifications. If you allow notifications, your phone’s push token is stored with your account and notifications are relayed through Expo’s push service to Apple or Google for delivery.
Face ID, Touch ID or fingerprint. If you use them to unlock the app, the check happens entirely on your phone. We never receive your face or fingerprint data, only whether the check passed.
Room scans. On phones with a LiDAR sensor, a room scan you choose to make is turned into measurements and a floor plan and saved to the job.
Signatures. When you sign a safety analysis, a policy or a document, the image of your signature and the time are stored with that record.
Incident and injury answers. If your company asks about injuries at clock-out, or you report an incident, your answers are stored with your time and safety records, where the law may require your employer to keep them.
Receipts. Receipt photos you submit are stored with your company’s records, and the amounts and vendor read from them.
Problem reports and diagnostics. When you send a problem report, it includes what you write, the app version and the type of phone, so we can fix the fault. If the app gives up sending something you saved, it records which kind of record it was and why, for the same reason.
AI features. Before you first use an AI feature in the app — the Superintendent, receipt reading, or turning a walk-through into an estimate — the app asks for your agreement. What you type or say, the photos or receipts you choose to send, and the job details needed to answer are sent to Anthropic, our AI provider, only to produce that answer. They are not used to train AI models.
Reported messages. If you report a message, the message’s text, your reason, and the names of the person who wrote it and the person who reported it are sent to your company’s message moderators and to SitesLogix support so they can review the report. Blocking someone is recorded so their direct messages stop reaching you.
The app does not track you across other companies’ apps or websites, and it does not show advertising.
How to delete your account
Draft section, awaiting owner review.
You can ask us to delete your account from inside SitesLogix: on the website, open Account and choose Delete my account; in the phone app, open Profile, then Account, then Delete my account. You can also write to support@siteslogix.com from the email address you sign in with. The steps are also on the account deletion page.
We complete the request within 30 days. Your sign-in and personal profile are removed. Work records the law requires your employer to keep — time and payroll records, safety and injury records, and documents you signed — stay with your employer, under the company’s name, as described in section 02.
If you are the only owner of a company on SitesLogix, the company has to name another owner or close its SitesLogix account before your account can be removed. We will contact you to help.
We keep a record of the deletion request itself — your email address, your user id, and the dates it was made and completed — after your account is deleted, as proof the request was handled.