Privacy Policy

Last updated September 14, 2026. Worksite Photos is offered in the United States only at launch.

What we collect

• Account data: name, email address, phone number if you give it, and your sign-in provider (Apple, Google or email).
• Photos and their metadata: the photos and videos you capture or upload, plus the time, GPS location, accuracy, device model and project address recorded with them. This is the product; we store it so you can prove your work.
• Verification records: a cryptographic hash of each original, a signed record, and a trusted timestamp. Records contain no photo content.
• Device attestation: a key issued by Apple App Attest or Google Play Integrity that lets us confirm a photo came from a genuine, unmodified install. We never receive your device identifiers.
• Usage and diagnostics: crash reports and basic analytics without cookies. Access history on share links records the time, an anonymized IP address and the country.
• Billing: handled by Stripe. We never see your full card number.

How we use it

To store, organize, verify and deliver your photos and reports; to run your account and billing; to send the notifications you turn on (upload failures, share views, invites, quota warnings); and to fix bugs. We do not sell personal data, and we do not use your photos to train models.

Sharing

Photos are shared only with the people you invite or send a link to. Public verify pages show a verification record, not the photo. Our providers are Supabase (database and sign-in), Cloudflare (storage and delivery), Vercel (website), Stripe (billing), SendGrid (email), Sentry (crash reports) and the timestamp authorities that sign verification records. Each processes data only to provide its service.

Your data on exit

You can export every original photo, report and record at any time, including after you cancel. Cancelled accounts stay read-only with export available for at least 90 days, then are deleted on request or after our retention period. Verification records are append-only and may be retained so previously issued proof continues to verify.

Your rights

You can access, export, correct and delete your data from the app or by emailing privacy@worksitephotos.com. California residents have additional rights under the CCPA; we honor them for everyone.

Security

Data is encrypted in transit and at rest. Originals are stored in a private bucket and served through signed links that expire. Every tenant query is scoped to your organization.

Children

Worksite Photos is for businesses and is not directed at children under 16.

Changes

We will post changes here and, for material changes, email account owners before they take effect.