Privacy Policy

ComplyFleet is operated by PitchVio, an independent software studio based in India. In this policy, “we” and “us” mean PitchVio. ComplyFleet is used by companies (“customers”) to run their safety programs. Each customer decides which of its people use the service and what records are entered into it.

Depending on how your company uses ComplyFleet, we store:

• Account information: your name, email address, password (handled by our authentication provider and never stored by us in plain text), your company, and your role.
• Company records: worker and driver profiles, licences, medical certificates, driver abstracts, certifications and training, equipment and vehicle records, locations, policies and policy acknowledgements, and documents your company uploads.
• Form submissions: inspections, hazard reports, incident and near-miss reports, toolbox talks, and other forms, including any injury or illness details your company records for OSHA logs.
• Photos: images you take with your device camera or choose from your device when a form asks for photo evidence. Photos are stored with the form submission.
• GPS location: your device’s latitude, longitude, and accuracy, captured only when you use a GPS field on a form and your device grants location permission. We do not track your location in the background.
• Signatures and sign-offs: when a form asks you to sign or sign off, that sign-off is recorded with the submission along with who signed and when.
• Audit logs: a record of significant actions (for example creating, updating, deleting, exporting, signing off, signing in and out), including which user performed the action, when, and the IP address and browser user agent of the request.
• Billing information: paid plans are not yet available. When paid plans are enabled, payments are processed by Stripe. Card numbers never reach our servers. We would store only the billing contact’s email, Stripe customer and subscription identifiers, the plan, the subscription status, and the current billing period end date.
• Usage analytics: anonymous page-view analytics collected through Vercel Analytics.

So that forms work without a signal, ComplyFleet saves form submissions on your device (in the browser’s IndexedDB and local storage) until they can be sent. Once a submission syncs, the local copy is removed. Submissions that have not synced yet stay on the device, so anyone with access to the device and browser profile could see them.

We also use cookies to keep you signed in and to remember your light or dark theme preference.

• To provide the service: storing records, generating reports and OSHA logs, and organizing COR audit evidence.
• To sign you in, send account invitations, and send password-reset emails.
• To keep the service secure, including through audit logs and access controls.
• When paid plans are enabled, to manage subscriptions and payments.
• To understand how the public site and app are used, through aggregate page-view analytics.

Each company’s records are separated from every other company’s at the database level. Within a company, what a person can see and change depends on the role their company assigns them. A company can also give an external auditor time-limited, read-only access to its records.

We do not sell personal information. We use these service providers to run ComplyFleet:

• Supabase: authentication, the PostgreSQL database, and file storage for uploaded documents.
• Vercel: hosting of the website and application, and page-view analytics.
• Stripe: payment processing, once paid plans are enabled.

We may also disclose information if required by law.

We keep company records for as long as the company’s account is active or as needed to provide the service. Many deleted records first go to a recycle bin, where an administrator can restore them before they are permanently removed. Safety and OSHA records may be subject to legal retention periods; your company is responsible for deciding how long to keep them. To ask about deleting your data, contact your company administrator or email us.

You can ask to access, correct, or delete your personal information. Because your company controls most records about you, we may refer your request to your company administrator. You can turn off location access for the app in your device settings at any time; GPS fields will then be left blank.

We may update this policy. When we do, we will change the “Last updated” date at the top of this page.