Privacy Policy

SiteIQ is job and crew management software for building companies, operated by Kupriq. This policy explains what we collect, why, and the choices you have. The short version: we don't sell your data, we don't mine it, and we only look at it when you ask us to help.

SiteIQ records working time and, where a business switches it on, location. Those are sensitive, so this policy sets them out in detail rather than burying them.

What we collect

Account data — your name, email and company details, used to run your account and contact you. Authentication is handled by Clerk; we never see your password.

Job and customer content — the jobs, customers, staff records, schedules, notes, photos, attachments, variations and knowledge base articles you create. This is your data; we store and process it only to provide the service to you.

Time records — when staff clock on and off a job, and when they start and finish their working day, including hours entered or corrected by hand and the reason given.

Customer signatures — where a customer signs off a variation, we store the signature image, their name, the time, and a copy of the terms they accepted.

Notification tokens — a device token if you turn on push notifications, so we can send them. Nothing else about your device.

Location data

Please read this section carefully.

When clocking on and off a job.If the device allows it, we record a single GPS position at clock-on and clock-off, and compare it to the job's site location to flag whether the person was on site. If location is unavailable or refused, clocking still works — it's recorded without a position.

While clocked in to a job (mobile app). If the site has a location set, the app monitors a geofence around it in the background so it can remind someone who has left the site while still clocked on. Monitoring starts at clock-in and stops at clock-out — never outside a shift. What we store is the fact of leaving or returning to the site, with a position and time. We do not keep a continuous trail of where anyone goes.

The purpose is accurate time records. Hours clocked to a job are what the business uses to cost and invoice that job, so it matters that they reflect time actually spent on site — both so the customer is billed correctly and so nobody is left chasing a forgotten clock-out at the end of the week.

Starting and finishing the working day.Off by default. A business can switch on recording a single position when staff start and finish their day. It is one reading at each end, not tracking. Where it's on, staff see a notice saying so on the screen where they clock.

Who can see it.Location data is visible to the business the staff member works for — typically the owner, admin and office staff. It is not visible to other businesses using SiteIQ, and we don't use it for any purpose of our own.

Turning it off.You can refuse or revoke location permission in your device settings at any time; clocking on and off will keep working without it. Businesses can switch off day-clock location capture in Settings, and geofence monitoring simply doesn't run for jobs with no site location set.

If you're an employee using SiteIQ

Your employer decides which features are switched on and can see the records described above. Under the Privacy Act 2020 you're entitled to know what's collected about you and to ask for a copy. Ask your employer first, since it's their account and their data — if you can't resolve it that way, contact us and we'll help.

How we use it

To provide and maintain the service, respond to support requests, keep the product secure, and meet legal obligations. We do not sell your data, share it with advertisers, or use it for advertising or profiling.

Sub-processors

We rely on a small set of providers to run SiteIQ: Clerk (authentication), Railway (hosting and database, in the United States), UploadThing (file and photo storage), and Resend (email). The background location component runs on your device and sends data to SiteIQ, not to a third party.

Retention and deletion

We keep your content while your account is active. If you close your account and ask us to delete it, we'll remove your data within a reasonable period, except where the law requires us to keep records. Note that photos and files already uploaded may persist in storage for a period after the records referencing them are removed.

Security

Data is encrypted in transit. Each business's data is separated so one customer cannot see another's. Access within a business is controlled by the roles you assign.

Your rights

You can access, correct, export or delete your data — email us and we'll help. Depending on where you live you may have additional rights under local privacy law. If you're in New Zealand and unhappy with how we've handled a privacy issue, you can complain to the Office of the Privacy Commissioner.

Changes

If we change this policy in a way that materially affects you, we'll tell you rather than quietly updating the date at the top.

Contact

Privacy questions? Email hello@kupriq.com.