SafeSheet is a product of Elite Tech Global, LLC ("we," "us," or "our"), a Utah limited liability company. We operate the safesheet.app website and SDS management platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
1. Information We Collect
Account Information
When you create an account, we collect your name, email address, and organization details (company name, industry type, and estimated employee count). If you are invited to join an organization by a team member, we collect your email address and name when you accept the invitation.
Chemical & Safety Data
You may upload Safety Data Sheets (SDS), chemical inventory records, hazard classifications, and compliance checklists to the Service. This data is stored on your behalf and remains under your organization's control.
Payment Information
Subscription payments are processed by Lemon Squeezy, our third-party payment processor. We do not store your credit card number, bank account details, or other full payment credentials on our servers. We receive and store your Lemon Squeezy customer ID, subscription status, and billing plan details to manage your account.
Usage & Access Logs
We automatically collect QR code scan events, SDS document views, and other access logs as part of our compliance audit trail feature. These logs include timestamps, the browser user-agent string, and the location and chemical accessed. They do not include personal identifying information about the person scanning the QR code.
Technical Data
We collect standard web analytics data including IP addresses, browser type, device information, pages visited, and referring URLs. This data is collected through Vercel Analytics and is used to improve the performance and reliability of our Service.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Process your subscription and manage your account
- Generate compliance reports and audit trails as requested by you
- Send transactional emails such as SDS expiration alerts, team invitations, and account notifications
- Improve our Service through aggregated, anonymized usage analytics
- Respond to your requests, comments, or questions
- Detect, prevent, and address technical issues or security threats
3. Data Storage & Security
Your data is stored in Supabase, a cloud database platform hosted on Amazon Web Services (AWS) infrastructure. SDS documents are stored in Supabase Storage with row-level security policies that restrict access to members of your organization.
We implement industry-standard security measures including encryption in transit (TLS), row-level security at the database layer, role-based access controls, and secure authentication via Supabase Auth. While no method of electronic storage is 100% secure, we strive to use commercially reasonable means to protect your data.
4. Data Sharing & Third Parties
We do not sell, rent, or trade your personal information. We share data only with the following categories of third-party service providers, solely as necessary to operate the Service:
- Supabase — database hosting, authentication, and file storage
- Vercel — application hosting, deployment, and analytics
- Lemon Squeezy — payment processing and subscription management
- Resend — transactional email delivery (alerts, invitations)
Each provider processes data in accordance with their own privacy policies and our data processing agreements with them.
We may also disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
5. QR Code Scans & Public Access Pages
When an employee scans a QR code to access safety data, they are not required to create an account or log in. The public QR scan pages display only the chemical names, manufacturers, hazard classifications, and SDS documents that your organization has chosen to make available at that location.
We log QR scan events (timestamp, browser user-agent, and location accessed) to provide your organization with proof of SDS accessibility for OSHA compliance purposes. These logs do not contain personal information about the scanner.
6. Cookies & Tracking
We use essential cookies required for authentication and session management. These cookies are necessary for the Service to function and cannot be disabled.
We use Vercel Analytics for aggregated, privacy-friendly web analytics. Vercel Analytics does not use cookies and does not track users across websites.
We do not use third-party advertising cookies or tracking pixels.
7. Data Retention
We retain your account data for as long as your account is active or as needed to provide the Service. Chemical inventory data, SDS documents, and audit logs are retained for the duration of your subscription and for 90 days after account closure to allow for data export.
You may request deletion of your account and all associated data at any time by contacting us at privacy@safesheet.app.
8. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data. You may also have the right to object to or restrict certain processing activities. To exercise any of these rights, please contact us at privacy@safesheet.app.
We will respond to verified requests within 30 days, or within the timeframe required by applicable law.
9. Children's Privacy
Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on our website or sending an email to the address associated with your account. Your continued use of the Service after such changes constitutes acceptance of the updated policy.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Elite Tech Global, LLC
Email: privacy@safesheet.app