Privacy Policy

SiteWatch ("we", "us") provides jobsite progress monitoring: builders connect cameras to their projects, and we turn the photos into timelines, time-lapses, and reports they can share. This policy describes what we collect and how we handle it.

What we collect

• Account data: your email address, name (optional), and a hashed password. We never store passwords in plain text.
• Project data: project names, jobsite addresses, and optional client names and email addresses you provide for report delivery.
• Photos and derived media: images your cameras submit, including embedded metadata such as capture timestamps (EXIF), plus time-lapses and PDF reports we generate from them. We compute a cryptographic hash (SHA-256) of every photo at ingestion as part of our tamper-evidence feature.
• Operational logs: standard server logs (IP addresses, request metadata) retained for approximately 30 days for security and debugging.

How we use it

• To provide the service: storing photos, building timelines, time-lapses, and reports, and delivering them to you and to the client recipients you designate.
• To send operational email: weekly progress reports, camera-offline alerts, and password resets. We do not send marketing email without separate consent.
• To secure the service: authentication, abuse prevention, and debugging.

We do not sell personal data. We do not use your photos to train AI models.

Sharing and subprocessors

• Amazon Web Services (US) — hosting, storage, and email delivery. Photos and data are stored in the us-east-1 region.
• OpenStreetMap Nominatim — when you provide a jobsite address, we send that address (only the address) to the Nominatim geocoding service to place your project on your dashboard map.
• People you share with:anyone holding a project share link can view that project's photos, time-lapse, and reports. Share links are unguessable but not password-protected — treat them like a key.

Retention

• Photos are stored write-once: for evidentiary integrity, newly ingested photos cannot be altered or deleted from storage for at least one year, even by us, under our storage lock policy.
• Database backups are retained for 7 days.
• Account data is retained while your account is active. Contact us to close your account; we will delete or anonymize personal data not subject to the evidentiary lock or legal obligations.

Security

All traffic is encrypted in transit (TLS). Photos are stored encrypted at rest. Passwords are hashed with scrypt. Every photo is content-hashed at ingestion so alterations are detectable.

Your rights

You may request access to, correction of, or deletion of your personal data by emailing support@sitewatch.com. If you are in a jurisdiction with specific data-protection rights (e.g., GDPR, CCPA), we will honor requests as those laws require.

Cameras and third parties

Photos may incidentally capture people on or near a jobsite. The builder operating the cameras is responsible for complying with local laws on recording and signage; SiteWatch processes that imagery on the builder's behalf.

Changes

We'll post updates to this page and update the date above. For material changes we'll email account holders.