Privacy Policy

This policy applies to individuals who create an account, are invited into an organisation, or interact with our public site (marketing pages, contact form, demo requests). If your employer or contractor has invited you into a Site Safety UAE workspace, that organisation is the controller of the site-operations data you enter there (permits, inspections, incident records, worker records), and we act as a processor on their behalf.

• Account information — name, email address, job title, company, and (if enabled) a second-factor authenticator. Your password is never stored in plain text.
• Content you create — HSE records you enter or upload (permits, inspections, incidents, training, workers, documents, photos, comments). This is your organisation's data.
• Usage and diagnostic data — pages visited, actions taken, device and browser type, IP address, and error logs. We use this to keep the Service secure and reliable.
• Communications — messages you send us through the contact form, demo request form, or email.
• Billing information — for paid plans, we receive limited billing details from our payments provider; we do not store full card numbers.

We use the information above to:

• Provide, secure and improve the Service.
• Authenticate you and protect your account (including MFA where enabled).
• Send transactional messages — sign-in confirmations, invitations, security alerts, and important service notices.
• Respond to sales, support and demo enquiries.
• Meet legal, regulatory and safety obligations.
• Detect, investigate and prevent fraud, abuse, and security incidents.

We do not sell personal information, and we do not use your organisation's content to train third-party foundation models.

Some Service features use AI models (for example: document drafting and rewriting, incident analysis, warning-letter assistance, MSRA/permit drafting, safety observations). When you use these features, the specific inputs needed for the request are sent to our AI provider for that request only. We do not permit those providers to retain your inputs for their own model training. See the Trust & AI Safety page for more on how AI is used and verified inside the app.

We use a small number of cookies and browser storage entries that are necessary to run the Service — for example, to keep you signed in, remember your language preference, and keep the interface stable across page reloads. We don't use third-party advertising cookies. If we introduce optional analytics that use cookies, we'll ask for your consent first.

We share personal information only with trusted service providers that help us run the Service. These include:

• Cloud hosting, database, authentication and storage infrastructure.
• Email delivery for transactional messages.
• Paddle.com Market Ltd — our Merchant of Record for the sale of paid plans. Paddle handles checkout, subscription management, payments, tax compliance, invoicing and refund processing. See Paddle's Privacy Notice.
• AI model providers for the AI features described above.
• Error monitoring and application logging.
• Professional advisers (legal, accounting) and authorities where required by law.

Each provider is under a contract that requires them to protect your information and to use it only to provide their service to us. We do not sell personal information or share it for advertising.

We use industry-standard controls to protect the Service, including encryption in transit, row-level access controls in the database, least-privilege access for the founder, optional multi-factor authentication for user accounts, and checks against known-compromised passwords. No system is perfectly secure — if you discover a vulnerability, please report it to info@sitesafetyuae.com.

Account and organisation data is retained for as long as the account is active. When an organisation cancels, we keep the data for a short recovery window and then delete or anonymise it, unless we're required to retain it for legal, tax or regulatory reasons. You can also delete individual records inside the app at any time.

Site Safety UAE is based in the United Arab Emirates, and our infrastructure providers may process data in the UAE, the European Economic Area, the United Kingdom, or other regions. Where personal information is transferred outside your country, we rely on our providers' safeguards, which are designed to meet applicable data protection standards.

Depending on where you live, you may have rights to access, correct, export, restrict or delete personal information we hold about you, and to object to certain processing. For content inside a Site Safety UAE workspace, please raise these requests with the organisation that invited you — we'll support them in responding. For information Site Safety UAE holds directly (for example, marketing or support enquiries), contact us and we'll respond within a reasonable time.

The Service is intended for construction and industrial HSE professionals and is not directed to children. Please do not create an account if you are under 18.

We may update this policy from time to time. When we do, we'll update the "Last updated" date at the top of this page and, for material changes, notify account holders by email or in-app notice.

For privacy questions or to exercise your rights, write to info@sitesafetyuae.com or use the contact form.