Privacy Policy

This policy applies to all users of SafeAlign, including:

• Employers and organizations ("Organizations") who subscribe to SafeAlign
• Safety professionals, supervisors, and administrators who manage the platform on behalf of their Organization
• Workers and contractors whose safety records are entered into the platform by their employer
• Visitors to safealign.ca

Account and organization information: When an Organization creates a SafeAlign account, we collect the organization name, contact name, email address, and billing information.

Safety records and operational data: SafeAlign is designed to store occupational health and safety records. This includes but is not limited to:

• Worker names, trade certifications, and training records
• Incident reports, including descriptions of injuries and their circumstances
• Hazard assessments and field-level risk assessments
• Contractor and visitor orientation records
• Health and safety committee member information
• Worker signatures collected during safety assessments
• Photographs uploaded in connection with workplace incidents
• WCB claim information and return-to-work plans

Technical data: We automatically collect certain technical information when you use the Service, including IP address, browser type, device information, and usage data (pages visited, features used, time spent). We also collect information about interactions with our AI-powered help assistant, including questions asked and responses received, to improve the Service and ensure safety.

We use personal information to:

• Provide, operate, and improve the SafeAlign Service
• Enable Organizations to manage their occupational health and safety programs
• Generate reports, audit readiness scores, and compliance documentation
• Process billing and payments
• Send service-related communications (account notices, security alerts)
• Comply with applicable legal obligations
• Respond to support requests
• Power AI-assisted features including the SafeAlign help assistant, which uses Anthropic's Claude API to respond to user queries
• Monitor API usage and enforce rate limits to protect the Service from abuse

We do not sell personal information to third parties. We do not use personal information for advertising purposes.

We process personal information on the following bases:

• Contractual necessity: Processing required to deliver the Service under our agreement with the subscribing Organization
• Legitimate interests: Operating and improving the Service, preventing fraud, and ensuring security
• Legal obligation: Compliance with applicable Canadian law
• Consent: Where explicitly obtained for specific processing activities

SafeAlign is built on Supabase and hosted on infrastructure located in Canada and the United States. Payment processing is handled by Stripe. Email delivery is handled by Resend. AI features are powered by Anthropic's Claude API, which processes query content on Anthropic's servers. By using SafeAlign, you acknowledge that your data may be stored and processed in these jurisdictions. We implement industry-standard security measures including row-level security, encryption in transit (TLS), access controls, and rate limiting to protect your data.

We share personal information only in the following circumstances:

• Service providers: We use third-party providers to operate the Service, including Supabase (database and authentication), Vercel (hosting), Stripe (payment processing), Resend (email delivery), and Anthropic (AI features). These providers are contractually bound to protect your information and use it only to provide services to us. AI assistant queries are processed by Anthropic subject to their privacy policy at anthropic.com/privacy.
• Within your Organization: Information entered by your Organization is accessible to authorized users within that Organization as configured by your administrator.
• Legal requirements: We may disclose information if required by law, court order, or government authority.
• Business transfers: In the event of a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction.

We do not share safety records or worker information with any third party outside your Organization without your consent, except as described above.

We retain personal information for as long as your Organization's account is active and as necessary to provide the Service. Safety records such as incident reports, hazard assessments, and corrective actions are retained for the duration of the subscription and for a period of up to 7 years following account termination, consistent with typical occupational health and safety record-keeping obligations under Canadian law.

You may request deletion of your account and associated data at any time by contacting us at privacy@futuresafegroup.ca.

Upon cancellation or termination of a subscription, organizational data is retained for 90 days during which administrators may request an export. After 90 days, data may be permanently deleted. AI assistant interaction logs are not retained beyond the active session.

Under PIPEDA and applicable provincial legislation, you have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Withdrawal of consent: Withdraw consent for processing where consent is the legal basis, subject to legal or contractual restrictions
• Complaint: File a complaint with the Office of the Privacy Commissioner of Canada (OPC) if you believe your privacy rights have been violated

To exercise any of these rights, contact our Privacy Officer at privacy@futuresafegroup.ca. We will respond within 30 days.

SafeAlign uses session cookies required for authentication and to maintain your login state. We do not use third-party advertising cookies or tracking pixels. We may use anonymous analytics to understand how the Service is used in aggregate.

SafeAlign is intended for use by employers and working-age individuals in a professional context. We do not knowingly collect personal information from individuals under the age of 16.

We may update this Privacy Policy from time to time. We will notify subscribed Organizations of material changes by email or through a notice within the Service at least 30 days before the changes take effect. Your continued use of SafeAlign after the effective date constitutes acceptance of the updated policy.

For questions, concerns, or to exercise your privacy rights, contact our Privacy Officer:

FutureSafe Limited
Privacy Officer
Email: privacy@futuresafegroup.ca
Website: safealign.ca

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada online at priv.gc.ca.