Privacy and data handling

Updated November 8, 2026.

What is stored

Requested account email, company and pilot-request details, verified identities, roles, invitations, sessions, company profile, inspection records, qualifications entered by your company, photos and audit history. Do not put customer records or access codes into a public pilot request.

Service providers

Cloudflare hosts the site and company data. Resend delivers requested sign-in codes and receives recipient addresses and email content. Stripe receives account, billing and payment information only when paid checkout is enabled and used. Card details are entered on Stripe's hosted pages, not stored by InspectTrail.

Access and device storage

Access is by company invitation. Roles restrict modules and workflow actions. Company records are isolated from other companies. Inspectors currently have company-wide operational visibility; assigned-job-only access is not yet enforced. Production private records are not persisted in browser offline storage. The public app shell may be cached. Sign-in on this device lasts up to 365 days unless you sign out, clear browser data or access is revoked.

Requests, export and retention

Pilot requests are used to handle access and questions, not marketing subscriptions. Company owners can export operational records and photos. Subscription expiry or cancellation makes work read-only; it does not erase existing reports or exports. Automated retention/deletion and independent restore validation remain release work. Contact the operator through the pilot request form for data requests. Cloud-provider recovery copies can have a separate lifecycle.

Limits

No Canadian-only residency, independent security audit or regulatory approval is claimed. Do not upload records requiring contractual guarantees that have not been agreed.