Privacy Policy

1. Scope and Roles

This Privacy Policy applies to information processed by FieldSight in connection with the Service. When an inspection firm, asset owner, or other organization provides information about its personnel or facilities through the Service, that organization may be responsible for determining the purposes of that processing, and FieldSight may act as its service provider or processor where applicable.

This Policy does not apply to third-party websites or services that are not controlled by FieldSight, even if they are linked from the Service.

2. Information We Collect

We may collect the following categories of information:

• Account and authentication information: name, email address, account identifiers, organization information, login/session records, and authentication credentials handled by our authentication provider. FieldSight does not need access to nor log plaintext passwords.
• Billing and subscription information: plan selection, trial status, subscription status, billing contact information, transaction and payment-method summary information made available by Stripe, such as card brand or last four digits. Payment card details are processed by Stripe, not stored by FieldSight as full card numbers or security codes.
• Customer Data: inspection measurements, tank and facility identifiers, calculations, notes, drawings, diagrams, photographs, report content, uploaded files, and other data submitted to or generated through the Service. Customer Data may contain confidential industrial, operational, or asset-integrity information.
• Communications: support requests, product feedback, billing communications, and other messages you send us.
• Usage, device, and security information: IP address, browser and device information, timestamps, pages or features used, request logs, authentication events, diagnostic information, error reports, and security-related records.
• Cookies and local device storage: authentication/session cookies and browser storage used for login state, product preferences, and, where enabled, work-in-progress drafts. Draft information stored in a browser may remain on that device until cleared.

3. How We Use Information

We may use information to:

• Provide, administer, maintain, and support the Service and customer accounts.
• Perform requested calculations, produce reports, store Customer Data, and enable exports and other workflow features.
• Process subscriptions, trials, renewals, cancellations, billing, tax, and payment-related matters.
• Send transactional communications, such as account, security, password-reset, billing, trial, and service notices.
• Diagnose defects, monitor performance, prevent fraud or abuse, secure the Service, and investigate unauthorized access or misuse.
• Comply with law, enforce our Terms of Service, resolve disputes, protect rights and safety, and maintain business records.
• Improve the Service using operational feedback and usage information, subject to this Policy and contractual restrictions.

4. Customer Data, Advertising, and Artificial Intelligence

Customer Data remains subject to the Customer Data ownership provisions in our Terms of Service. We do not sell Customer Data or personal information, and we do not share personal information for cross-context behavioral advertising. We do not display third-party advertising within the FieldSight application.

Certain subscription plans include optional AI-assisted features, such as suggested photograph captions and suggested finding write-ups. AI-assisted features operate only when a user affirmatively initiates them; the Service does not transmit Customer Data to an artificial-intelligence provider automatically or in the background. When a user initiates an AI-assisted feature, the content reasonably necessary to generate the suggestion - for example, the selected photograph and the inspection context entered for it (such as category, item label, field notes, and any draft text) - is transmitted to a third-party artificial-intelligence service provider, currently Anthropic PBC or OpenAI, to generate the suggestion. FieldSight accesses these providers through their business API offerings, which, per those providers' published terms, do not use submitted content to train their generally available models.

FieldSight retains AI-assisted feature inputs, generated suggestions, and user review decisions (acceptance, edits, or dismissal) as service records and may use them to operate, evaluate, secure, and improve the AI-assisted features, including the development and training of FieldSight-operated models. FieldSight does not use Customer Data submitted outside the AI-assisted features to train machine-learning models. Any AI-assisted output is suggested draft content only, is subject to the Terms of Service, and must be reviewed and approved by the customer before reliance, use, or distribution. The decision to submit any particular content to an AI-assisted feature, and the review, correction, approval, and use of any resulting output, are the customer's responsibility.

5. When We Disclose Information

We may disclose information in the following circumstances:

• Service providers and subprocessors: to companies that support hosting, authentication, storage, payment processing, email delivery, monitoring, security, and other operations necessary to provide the Service.
• At your direction: where you export, share, transmit, or instruct us to provide Customer Data or reports to another party.
• Legal and safety purposes: where reasonably necessary to comply with law or legal process; respond to governmental requests; enforce agreements; investigate fraud, security incidents, or misuse; or protect FieldSight, customers, or others.
• Business transactions: in connection with a merger, financing, acquisition, reorganization, sale of assets, bankruptcy, or similar transaction, subject to appropriate confidentiality protections where applicable.

6. Service Providers and Subprocessors

Depending on the features used, FieldSight currently relies on service providers that may include:

• Supabase - authentication, database, and file-storage infrastructure.
• Stripe - subscription management and payment processing.
• Vercel - application hosting and related web infrastructure, including Vercel Web Analytics and Speed Insights, which collect privacy-friendly, cookieless, aggregated usage and performance measurements (such as page views, referrers, general device or browser type, and page-load timings) to help us understand and improve Service reliability and performance. This measurement is not used for advertising and does not track you across other websites.
• Resend - transactional email delivery.
• Sentry - application monitoring and error diagnostics, if enabled in the applicable environment.
• Anthropic PBC - artificial-intelligence processing for optional, user-initiated AI-assisted features (such as suggested captions and write-ups). Content is transmitted to this provider only when a user initiates an AI-assisted feature.
• OpenAI - artificial-intelligence processing for optional, user-initiated AI-assisted features (such as suggested captions and write-ups). Content is transmitted to this provider only when a user initiates an AI-assisted feature.

These providers process information under their applicable terms, agreements, and service configurations. Provider locations, storage locations, and support-access locations may vary by provider and configuration. We may update our providers as the Service changes. Where required by contract or applicable law, we will provide notices regarding material changes.

7. Data Retention and Deletion

We retain information only for as long as reasonably necessary for the purposes described in this Policy, to provide the Service, to meet contractual requirements, and to satisfy legal, tax, accounting, security, backup, fraud-prevention, and dispute-resolution needs.

• Account, subscription, and billing records may be retained after account closure where reasonably necessary for legal, accounting, tax, chargeback, fraud-prevention, or dispute purposes.
• Customer Data is retained while needed to provide the Service or as instructed by the customer. After verified account closure or deletion request, we will delete or de-identify Customer Data from active systems within a commercially reasonable period, subject to legal holds, contractual archival requirements, backup rotation, security records, and other lawful retention needs.
• Logs and diagnostic information may be retained for operational, security, debugging, audit, and abuse-prevention purposes for periods determined by our operational needs and applicable obligations.

Before terminating an account, customers should export records they are required to retain for inspection, regulatory, contract, owner, or business purposes.

8. Security

We maintain administrative, technical, and organizational safeguards designed to protect information processed through the Service. These safeguards may include access controls, authentication controls, encryption in transit, database access restrictions, logging, monitoring, and secure development practices, as appropriate to the Service and our operations.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Customers are responsible for maintaining appropriate account controls, safeguarding credentials, controlling exported reports and files, and avoiding the use of shared or insecure devices for confidential Customer Data.

If we determine that notice of a security incident is required under applicable law or a written customer agreement, we will provide notice as required by that law or agreement.

9. Security Assessments and Future Compliance Programs

FieldSight may evaluate or pursue additional security controls, independent assessments, attestations, or compliance programs as the Service and customer requirements evolve, potentially including a SOC 2 examination. FieldSight does not currently represent that it has completed a SOC 2 examination, holds a SOC 2 report, or satisfies any particular certification or attestation requirement unless we expressly state otherwise in writing after such work has been completed.

10. Your Privacy Choices and Rights

Depending on your location and applicable law, you may have rights to request access to, correction of, deletion of, or portability of certain personal information, or to object to or restrict certain processing. We may need to verify your identity and authority before fulfilling a request. Requests are subject to applicable exceptions and will be handled within the timeframe required by applicable law.

To make a privacy request, email admin@fieldsightsolutions.com. Authorized representatives may be required to provide proof of authority where required by applicable law.

For clarity, FieldSight does not sell personal information or share personal information for cross-context behavioral advertising. If our practices change in a way that requires additional opt-out mechanisms under applicable law, we will update this Policy and provide the required method of exercising those rights.

11. Cookies and Local Device Storage

The Service may use cookies or similar technologies necessary for authentication, security, session management, preferences, and functionality. Where product features store work-in-progress drafts locally in your browser, those drafts may remain on the device until removed through browser controls or product functionality. Do not use shared or public computers for confidential Customer Data unless you clear stored data after use.

12. International Use

FieldSight is operated from the United States. If you use the Service from outside the United States, information may be transferred to and processed in the United States and other locations where our service providers operate, subject to applicable law and contractual requirements.

13. Children

FieldSight is intended for business and professional use and is not directed to children. You must be at least 18 years old to create an account. We do not knowingly collect personal information from children through the Service.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Material changes will take effect when posted or on a later date identified in the updated notice. Where required by applicable law or a written agreement, we will provide additional notice of material changes.

15. Contact Us

Questions or privacy requests may be sent to:

FieldSight LLC Privacy Contact: admin@fieldsightsolutions.com Support Contact: admin@fieldsightsolutions.com United States