Legal
Last updated August 24, 2026
Build Safe Pro holds information about construction workers who never signed up for anything. We think that obliges us to be specific rather than vague, so this page says exactly what is collected, where it goes, and how to get it removed.
Two different groups of people show up in this policy.
Customers are the companies that hold accounts, and the office staff and supervisors who sign in to them.
Workers and site visitors are the people who scan a QR code on a job site and submit a log or make a badge. They have no account and never sign in.
For the second group, the customer decides what gets collected, from whom, and why. We store and process it on the customer's instruction. In the language of privacy law the customer is the controller and we are the processor. That means the notice and consent obligations toward workers sit with the customer, which we say plainly in our terms of service too. It does not mean we walk away: if you are a worker and you want your information removed, write to us directly and see the section on requests below.
There are no passwords anywhere in the service. Signing in means entering your email address and typing back a one-time code we send to it, so there is no password database to store or to lose.
A worker making a badge enters, on a form provided by the customer:
From that we generate the badge image itself, which combines the photograph, the name, the employer and the job site's branding. Both the original photograph and the finished badge are stored.
Workers are not sent email. They have no account, and the finished badge goes to the job site's staff to print.
Anyone with the job site's link can submit one. It contains:
To run the service and nothing else: showing logs and worker rosters to the staff on that job site, generating and emailing badges to be printed, sending notifications about issues, translating Spanish-language descriptions and comments into English so the office can read them, taking payment, answering support requests, and keeping the service secure and working.
We do not sell personal information. We do not share it with advertisers. We do not send marketing email; every message the application sends is about something you or your workers did in it.
We use outside companies for the parts of this a small team should not run itself. Each one gets only what it needs for its job, and none of them may use it for anything else.
For the current list of the specific companies behind these categories, email [email protected] and we will send it.
We text a phone number only where the person entering it ticked the box agreeing to it. There are two cases: telling someone who reported a safety issue that it has been closed, and messages about the badge program.
Message and data rates may apply. Reply STOP to any message to stop receiving them, or HELP for help. A worker's phone number is visible to the administrators of that job site and is not shared beyond the service.
Signed-in users get a session cookie. A worker who has just made a badge gets a short-lived one so they can return to it without signing in to anything.
That is the whole list. There are no advertising cookies and no third-party tracking pixels on this site or in the application.
Each job site has a page and two forms that open without signing in, reached by a long random token in the web address. That token is the only thing protecting them, which is what lets a worker use the service by scanning a poster.
None of those pages shows anyone else's submissions: a worker sees the form and their own badge, not the roster or the log. Customers control where posters are hung and who gets links.
Records are kept for as long as the job site and the account exist. We do not delete them automatically when a subscription is cancelled, because a safety record is frequently the thing a company needs years after a job finishes.
Deleting a job site in the application deletes its logs, workers, badges and photographs along with it.
Our database backups are encrypted and are deleted after one month, so something removed from the live service can persist in a backup for up to that long.
Email [email protected] to ask for a copy of the information we hold about you, to have it corrected, or to have it deleted. We respond within 30 days.
This applies to workers as much as to customers. If you made a badge on a job site and you want your photograph and your record removed, write to that address. You do not need an account and you do not need to go through your employer. Tell us your name and roughly which job site it was so we can find the record. Where a request affects a customer's records we will tell that customer, and where the law requires us to keep something we will say so rather than quietly not doing it.
Everything travels over HTTPS. Uploaded photographs and badges are stored privately and served through signed links rather than public web addresses. Database backups are encrypted. There is no password database, because there are no passwords. Access to production systems is limited to the people who run the service.
No service is perfectly secure. If we confirm a breach affecting personal information, we will notify the affected customers without undue delay and in any case within 72 hours, telling them what happened and what we are doing about it.
The service is meant for people working on construction sites and is not directed at children. We do not knowingly collect information from anyone under 13. If you believe we have, email us and we will delete it.
When this changes we update the date at the top of the page, and for a change that matters we email account admins. If we ever start doing something materially different with personal information, we will say so here first.
Anything about privacy goes to [email protected]. Our terms of service cover the rest of the relationship.