Privacy Policy

SiteProof collects information you provide when creating an account and using the service:

• ✓Account Information: Email address and authentication credentials (via Firebase Authentication)
• ✓Profile Information: Company name, brand colors, and logo you choose to upload
• ✓Project Data: Project names, addresses, contact details, notes, and related metadata
• ✓Evidence Media: Photos and videos captured at job sites, including GPS location data if enabled
• ✓Documents: Invoices, estimates, reports, line items, and signature data you create
• ✓Financial Data: Expense records, payment records, and inventory information
• ✓Team Data: Team member email addresses and role assignments

We use your information solely to provide and improve the SiteProof service:

• ✓Authenticate your access to the application
• ✓Store and sync your project data across devices
• ✓Generate invoices, estimates, and reports
• ✓Enable team collaboration and project sharing
• ✓Send invoice payment reminders (if configured)
• ✓Improve application performance and fix issues

Your data is stored securely using industry-standard practices:

• ✓Authentication data is handled by Firebase Authentication (Google)
• ✓All application data is stored in Cloud Firestore (Google Cloud Platform)
• ✓Media files (photos, videos) may be stored in Firebase Cloud Storage
• ✓Data in transit is encrypted using TLS/SSL
• ✓Data at rest is encrypted by Google Cloud Platform
• ✓We do not sell, rent, or share your personal data with third parties for their marketing purposes

SiteProof relies on the following third-party services:

• ✓Firebase (Google) — Authentication, database, storage, and hosting
• ✓Paddle — Subscription and payment processing (Merchant of Record)
• ✓Expo — Mobile application framework and build services
• ✓PostHog — product analytics, loaded only after you consent
• ✓Resend — transactional email delivery (invitations, sign-in codes, contracts)
• ✓OpenStreetMap — map tiles shown on the client map

Each service has its own privacy policy governing how they handle your data. We encourage you to review them.

You retain ownership of all data you create in SiteProof. You can:

• ✓Export your data at any time via the Settings page
• ✓Delete individual projects, documents, evidence, or other records at any time
• ✓Permanently delete your account and all associated data immediately from the Account Deletion page, or by contacting us

Active data is deleted immediately; deleted data may persist in backups for up to 90 days before being permanently removed.

Depending on your jurisdiction, you may have the right to:

• ✓Access the personal data we hold about you
• ✓Request correction of inaccurate data
• ✓Request deletion of your data
• ✓Object to or restrict processing of your data
• ✓Request a copy of your data in a portable format
• ✓Withdraw consent at any time
• ✓Withdraw or change your analytics consent at any time from Settings → Privacy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Last updated” date. Continued use of the service after changes constitutes acceptance of the updated policy.

We set no advertising or cross-site tracking cookies. SiteProof stores the following in your own browser:

• ✓Local storage — theme, language and your privacy choice (essential)
• ✓Firebase Authentication sign-in session (essential)
• ✓PostHog analytics cookies — loaded only after you accept analytics (optional)
• ✓Paddle checkout — only while you are on a payment page (essential for billing)

You can accept or decline analytics from the banner on your first visit and change your decision later at any time in Settings → Privacy. If you decline, no analytics scripts load and no events are collected from that browser.

For questions about this privacy policy or to request account deletion, please contact us at:

siteproofapp@gmail.com