Privacy Policy

Last updated: April 5, 2026

1. Information We Collect

Account information: When you create an account, we collect your email address and any profile information you provide.

Compliance data: Information you enter into the Service, including workplace violence prevention plans, incident logs, training records, and employee data you choose to upload.

Usage data: We collect anonymized analytics about how you use the Service (pages visited, features used) to improve the product. We use Plausible Analytics, which does not use cookies or collect personal data.

Waitlist: If you join our waitlist, we collect your email address.

2. How We Use Your Information

We use your information to:

  • Provide and improve the Service
  • Generate your compliance documents
  • Send you compliance reminders and product updates
  • Process payments
  • Respond to support requests

3. What We Do Not Do

  • We do not sell your personal information to third parties
  • We do not share your compliance data with other users or employers
  • We do not use your data for advertising
  • We do not use tracking cookies

4. Data Storage and Security

Your data is stored on secure servers in the United States. We use industry-standard encryption (TLS) for data in transit and encrypt sensitive data at rest. Access to your data is restricted to authorized personnel only.

5. Data Retention

We retain your data for as long as your account is active. Compliance records (incident logs, training records) are retained for the legally required period (5 years for SB 553 incident logs) even if you downgrade or cancel, unless you explicitly request deletion. Upon account deletion, all data is permanently removed within 30 days, except where retention is required by law.

6. Your Rights

You have the right to:

  • Access your data at any time through the Service
  • Export all your data in standard formats
  • Correct inaccurate information
  • Delete your account and data
  • Opt out of non-essential communications

California residents have additional rights under the CCPA. To exercise any of these rights, contact us at [email protected].

7. Third-Party Services

We use the following third-party services:

  • Stripe for payment processing (subject to Stripe's Privacy Policy)
  • Plausible Analytics for privacy-friendly, cookie-free website analytics
  • Amazon Web Services for data storage and hosting

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email. Continued use of the Service after changes constitutes acceptance.

9. Contact

Questions about this policy? Contact us at [email protected].