The data you and your team enter into the app — customer + site records, asset rosters, inspection responses, deficiency findings, photo evidence (which may include device-supplied geolocation metadata), signatures, and the audit trail of every action against those records.
Account data needed to log you in and contact you: name, email, password hash, organization membership, and IP / user-agent at sign-in for security review.
We do not use third-party trackers or sell your data. We use first-party cookies only for session authentication and language preference.
Application data is stored on managed Postgres (Neon, US-East), provisioned through the Vercel Marketplace. Files (inspection photos, generated PDF reports) live in Vercel Blob with private access and signed URLs that your server brokers per request.
All traffic is HTTPS-only. Inspection records become immutable once signed by the field inspector and the retention floor of your organization elapses.
Within your organization: users with the appropriate role. Office-side roles (Admin / Office / Inspector / Technician) see organization-scoped data; portal-side roles (Customer Admin / Customer Viewer) see only the sites and inspections their organization permits.
Outside your organization: nobody, except (a) operational vendors providing infrastructure under contract (Vercel for hosting, Neon for the managed database, Resend for transactional email, Stripe for billing), and (b) responses to lawful legal process.
You can export your organization's full inspection archive at any time from the dashboard (Settings → Export). To request data deletion, correction, or access under applicable privacy law (GDPR, CCPA, PIPEDA), email support@redtagitm.com.
Note that fire-safety inspection records are typically subject to regulatory retention requirements (NFPA, OSHA, insurer, and AHJ rules) for several years after the inspection. Each organization sets a retention floor (the default is 7 years). Deletion requests for records still inside that retention window are honored once the window elapses — we'll tell you the date.
Privacy questions: support@redtagitm.com. We respond within one business day.