Privacy Policy

This Privacy Policy explains how Site Sign-In(“we”, “us”, “Site Sign-In”) collects, uses, discloses and protects personal information when you use our website, dashboard and worker sign-in tools (together, the “Service”). We are committed to handling personal information in accordance with applicable privacy laws, including the Australian Privacy Act 1988 (Cth) and, where it applies, the EU/UK GDPR.

1. Who is responsible for your data

The Service is used by construction businesses (“Customers”) to record site inductions and attendance for their workers. For worker records entered through a Customer’s site, the Customer is the data controller and decides how that information is used; Site Sign-In acts as a data processoron the Customer’s behalf. For Customer account information (the people who sign up and administer an account), Site Sign-In is the controller.

2. Information we collect

Account information (administrators)

Company name, country, work email address, password (stored hashed), and subscription/billing details.

Worker information (collected at sign-in / induction)

• Full name and the company the worker is attending for
• A facial photograph taken at sign-in (to confirm identity)
• A handwritten signature acknowledging induction and safety documents
• GPS location at the time of sign-in, where the worker permits it, to confirm on-site presence
• Work description, permit details, and safety-quiz answers
• Sign-in / sign-out timestamps and, optionally, a push-notification subscription

Technical information

IP address, browser/device type (user agent), and basic usage data needed to operate and secure the Service.

3. How we use information

• To create and verify site induction and attendance records
• To produce live headcounts and emergency evacuation lists
• To confirm a worker’s identity and on-site presence
• To provide, secure, support and improve the Service
• To manage subscriptions and billing
• To comply with legal and work-health-and-safety obligations

We do not sell personal information, and we do not use worker photographs for facial-recognition profiling.

4. Legal basis (where GDPR applies)

We process information to perform our contract with Customers, to meet legal obligations (including workplace safety), for legitimate interests in operating a secure service, and on the basis of consent where required — for example, the worker consents to providing a photograph and location at sign-in and may decline.

5. Service providers (sub-processors)

We share information only with providers that help us run the Service, under appropriate safeguards:

• Supabase — database, authentication and file storage
• Vercel — application hosting and delivery
• Stripe — subscription payment processing (when billing is enabled)
• OpenStreetMap / Nominatim — address geocoding for the site map

Some providers may process data outside your country. We take reasonable steps to ensure comparable protection.

6. Data retention

We retain records for as long as the Customer’s account is active and as needed to provide the Service and meet legal retention obligations for safety records. A Customer can delete individual records at any time, and may request deletion of their account and associated data, subject to any law requiring longer retention.

7. Security

Data is encrypted in transit, access is restricted to each organisation’s own records, and administrative access is authenticated. No system is perfectly secure, but we take reasonable technical and organisational measures to protect personal information.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent. Workers should usually contact the Customer (the business running the site). For account data, or to escalate a worker request, contact us at wansookim83@gmail.com.

9. Children

The Service is intended for workplace use by adults and is not directed at children.

10. Changes

We may update this policy from time to time. Material changes will be notified through the Service or by email.

11. Contact

Questions or privacy requests: wansookim83@gmail.com.
Site Sign-In · ABN 35 229 283 755 · Victoria, Australia.