Privacy Policy

This Privacy Policy explains how Eye On The Site LLC, a Florida limited liability company ("Eye On The Site", "we", "us" or "our"), handles personal information when you use our website (eyeonthesite.com), our web application, and the Eye On The Site Android app (together, the "Services"). Eye On The Site is a job site monitoring service for businesses. A company (our "Customer") creates an account, adds its projects and users, and uses phones or tablets running our app to take photos of its job sites at regular intervals. 1. WHO IS RESPONSIBLE FOR YOUR INFORMATION For account, billing and website information, Eye On The Site is responsible for your information. For the photos, videos and project information a Customer captures and stores with the Services ("Customer Content"), the Customer decides what is captured and why; we process it on the Customer's behalf and according to its instructions. If you appear in, or have questions about, photos taken at a job site, please contact the company running that site. We will help Customers respond to such requests. 2. INFORMATION WE COLLECT Account and profile information: your name, email address and password (stored only as a secure hash by our authentication provider), your role in the company, and, if you choose to add them, your phone number, job title and profile photo. Company information: company name, address, phone number, website, logo, time zone and branding text used on videos. Project information: project names, addresses and map location entered by users, camera view names, capture schedules and settings. Photos and videos: the photos taken by devices running our app at the job sites the Customer chooses, the date and time each photo was taken, and the timelapse videos created from them. We remove embedded metadata (EXIF), including any GPS coordinates, from every photo we store. Device information from the Android app: device brand and model, Android version, app version, a random installation identifier created by the app, the device name, battery level and charging state, and the status of each capture session (when it started, stopped and last checked in). Billing information: plan, subscription status and billing history. Payments are processed by Stripe; we never receive or store full card numbers. Communications: emails you send us, messages sent through our contact form, and requests made inside the app (for example, a member asking an administrator to upgrade the plan). Usage and technical information: IP address, browser type, pages visited, actions taken in the web app and error reports, collected through server logs, cookies and similar technologies (see our Cookie Policy). How you found us: if you arrive from an ad, a campaign link or another website, we record the campaign tags in the link (such as utm_source or an ad click identifier), the site that linked to us and the first page you visited, and save them with your company account if you sign up. We use this only to measure our marketing. 3. WHAT THE ANDROID APP DOES ON YOUR DEVICE Camera: the app uses the camera only to take job site photos after a signed-in user selects a project and camera view and taps Start. Capture continues in the background, with the screen off, while a permanent notification is shown, and it stops when the user taps Stop, leaves the camera screen, when an administrator stops it remotely, when the project's working hours end (if configured), or automatically after the set time limit. The app shows an explanation of this background capture before asking for the camera permission. Notifications: used for the capture notification and for alerts such as an interrupted capture. Storage: photos are kept temporarily in the app's private storage until they are uploaded, then deleted from the device. If there is no connection, photos wait on the device and upload when it reconnects. The app does not request access to your location, microphone, contacts, files or other apps, and it does not record audio or video. 4. PERSON DETECTION On plans that include it, each stored photo is analyzed automatically to estimate whether people are present and how many, so users can filter photos. The analysis runs on our servers or, for some accounts, through our cloud provider (Amazon Web Services) acting on our behalf. It does not identify anyone, does not use facial recognition, and does not create biometric identifiers or templates. 5. HOW WE USE INFORMATION We use information to: provide, operate and secure the Services; create and manage accounts and devices; capture, store, display and process photos and create timelapse videos; send service emails (verification codes, invitations, approval and billing notices, requests from team members); process payments and manage subscriptions; enforce plan limits and prevent abuse and fraud (including rate limits and bot checks at sign-up); provide support and respond to requests; monitor reliability and fix errors; improve the Services; comply with law; and send product news, which you can opt out of at any time. We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use Customer Content to train artificial intelligence models for third parties. 6. HOW WE SHARE INFORMATION Within your company: administrators of your company can see users, devices, projects, photos and videos of that company. Members see the projects they are assigned to. Share links: when a user creates a public link to a timelapse video, anyone with the link can watch it until it expires or is revoked. We count how many times it is viewed. Service providers that process data on our behalf, under contracts that limit their use of it: Amazon Web Services (hosting, storage, databases, authentication and email delivery, in the United States), Stripe (payments), Cloudflare (bot protection at sign-up), Google (reCAPTCHA on our website contact form, Google Analytics on our website and on the web app's sign-up and checkout pages, Google Play for app distribution and YouTube for embedded videos), and an error-reporting provider (Sentry) when enabled. Legal and safety: when required by law or legal process, or to protect the rights, property or safety of Eye On The Site, our users or others. Business transfers: in connection with a merger, acquisition or sale of assets, subject to this Policy. 7. HOW LONG WE KEEP INFORMATION Photos are kept for the retention period of the Customer's plan when they were taken and are then deleted automatically (on our current plans: 30 days on Free, 90 days on Basic, 180 days on Pro and 1 year on Max; plans without a retention period keep photos while the account is active). Customers can delete photos sooner. Timelapse videos are kept until the Customer deletes them or the account is deleted. Preview videos are deleted after 7 days. Account, company, project and device information is kept while the account is active, and deleted within 30 days after an account deletion request, except where we must keep some of it longer (for example, billing records for tax and accounting purposes). Server logs are kept for up to 30 days. Deleted files can remain in our storage backups for up to 30 additional days before they are removed permanently. 8. DELETING YOUR ACCOUNT AND DATA Users can delete photos, videos, projects and users from the web app at any time. To delete your account, your company's account or all associated data, email privacy@eyeonthesite.com from the email address of the account, or follow the steps at eyeonthesite.com/en/delete-account. We confirm the request and complete the deletion within 30 days. Deleting a company account deletes its users, projects, devices, photos and videos. 9. SECURITY We use encryption in transit (HTTPS/TLS) and at rest, private storage that can only be read through short-lived signed links, role-based access within each company, and access controls and monitoring on our systems. No method of transmission or storage is completely secure, but we work to protect your information and will notify you of a breach as required by law. 10. YOUR CHOICES AND RIGHTS You can access and update your profile and company information in the web app. Depending on where you live, you may have the right to request access to, correction of, deletion of, or a copy of your personal information, to object to or restrict certain processing, and to opt out of the sale or sharing of personal information (we do neither). To make a request, email privacy@eyeonthesite.com. We will verify your request and respond within the time required by law (generally 30 to 45 days). We will not discriminate against you for exercising your rights. If your information is part of a Customer's account, we may refer your request to that Customer. You can withdraw the Android app's camera or notification permission at any time in your device settings; capture will not work without the camera permission. 11. INTERNATIONAL USERS We are based in the United States and store information in the United States. If you use the Services from another country, your information is transferred to and processed in the United States. 12. CHILDREN The Services are intended for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 16 years of age. If you believe a child has provided us information, contact us and we will delete it. 13. CHANGES TO THIS POLICY We may update this Policy from time to time. We will post the new version on this page and update the date above, and if the changes are material we will notify account administrators by email or in the app before they take effect. 14. CONTACT US Eye On The Site LLC Email: privacy@eyeonthesite.com Website: eyeonthesite.com