Privacy Policy
The short version
- Your company owns the work data it puts into SiteFuse. We use it only to run the service for you.
- We never sell personal information and we don't use advertising trackers.
- Our servers and file storage are in the United States (Virginia).
- When you use AI features, the content needed for that request is sent to an AI provider to produce a draft. A person always confirms before anything is saved.
- You can ask us to access, correct or delete your information at any time: [email protected].
1. Who we are
SiteFuse (“SiteFuse”, “we”, “us”) provides field service management software for trades and low-voltage integrators: the web console at dash.sitefuse.app, the SiteFuse mobile apps, the API at api.sitefuse.app and, where offered, the SiteFuse Box site-monitoring device (together, the “Service”). We are based in Ontario, Canada, and handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, Québec’s Act respecting the protection of personal information in the private sector.
Our privacy contact is reachable at [email protected].
2. Your data vs. our data
Customer Content. Everything your company records in SiteFuse — work orders, sites, your customers’ names and addresses, notes, photos, drawings, signatures, check-ins, quotes and site-monitoring data — belongs to your company. For Customer Content, your company decides what is collected and why, and we process it on your company’s behalf and under its instructions. If you are one of our customers’ clients or employees and have a question about your information, please contact that company first; we will help them respond.
Account and usage information. Information about the people who use SiteFuse (name, email, sign-in and usage data) is handled by us as described in this policy.
3. What we collect
| Category | Examples |
|---|---|
| Account | Name, work email, phone number (optional), company name, trade, team size, role, password (stored only as a one-way hash), language and time zone. |
| Customer Content | Work orders, schedules, sites and contacts, notes, photos, files, drawings and annotations, customer signatures, quotes and time records. |
| Location | When a user checks in or out of a job, the device location at that moment, to record arrival at the site. We do not track location in the background. |
| Voice | Voice input is converted to text by your phone’s built-in speech service (Apple or Google). We receive the resulting text, not the audio. |
| Site Box data | If your company installs a SiteFuse Box: an inventory of devices on the site network (IP and MAC addresses, device names, manufacturer, device type, network topology, online status and health), and camera cover images only when a user or your configuration requests them. Camera and device passwords your company provides are stored encrypted and are never shown back in the Service. |
| Device and usage | IP address, device and browser type, app version, pages and features used, error logs, and push-notification tokens. |
| Communications | Messages you send us, and records of the consent you give (for example, to our Privacy Policy or to marketing emails). |
| Billing | When paid plans are purchased, payments are handled by our payment processor. We receive the billing contact, plan and payment status; we do not receive or store full card numbers. |
4. How we use it
- To provide, secure and support the Service, including signing you in, sending verification codes and notifications, and syncing your data across devices.
- To produce AI-generated drafts you ask for (see section 5).
- To keep an audit trail of changes (who changed what, and when) as part of your company’s records.
- To maintain and improve the Service using aggregated or de-identified usage information.
- To bill for paid plans and meet legal, tax and accounting obligations.
- To send product and marketing emails only if you opted in; you can unsubscribe at any time.
We do not sell personal information, and we do not use Customer Content for advertising.
5. AI features
SiteFuse includes an assistant (“Ozzie”) and other AI features that draft work orders, summaries, quotes and annotations. When you use them, we send the content needed for that request — for example, your message and the relevant records or images — to an AI model provider, receive a draft, and show it to you. The AI never saves or changes anything on its own: a person reviews and confirms every result.
AI output can be wrong or incomplete. Please review drafts before relying on them.
6. Who we share it with
We share information only with service providers that help us run the Service, under agreements that limit their use of it to providing their service to us, and when required by law.
| Provider | Purpose | Location |
|---|---|---|
| Tencent Cloud | Application hosting, database and file storage | United States (Virginia) |
| Cloudflare | Network security, content delivery, DNS and transactional email | Global network |
| xAI | AI model provider (primary) | United States |
| MiniMax | AI model provider (backup, used if the primary is unavailable) | China |
| Expo | Mobile push notifications | United States |
| Google Workspace | Support email | United States |
| Payment processor | Subscription billing (for paid plans) | United States / Canada |
| Apple, Google | App distribution and on-device speech recognition | United States |
We may also disclose information if required by law or to protect the rights, safety or security of our users or the public, and in connection with a merger or acquisition (in which case this policy will continue to apply).
7. Where it is stored
SiteFuse’s servers and file storage are located in the United States (Virginia). Some providers listed above process data in other countries, including China for the backup AI provider. Information stored or processed outside Canada is subject to the laws of those countries and may be accessible to their authorities. We take contractual and technical measures to protect it wherever it is processed.
8. How long we keep it
- While your company’s account exists, we keep Customer Content so your team can use it. If a paid plan ends, the account moves to the Free plan and nothing is deleted.
- If your company asks us to delete its account, we delete Customer Content and account information within 30 days, except where we must keep certain records (for example, billing records) to meet legal obligations. Copies in backups are removed as backups expire.
- Individual users can ask us to delete their own account; your company may keep work records that reference you as part of its business records.
- Verification codes expire after 5 minutes. Server logs are kept for a limited period for security and troubleshooting.
9. Security
We protect information with encryption in transit (HTTPS/TLS), encryption of stored credentials and secrets, access controls, rate limiting on verification codes, and audit logging. No system is perfectly secure; if a breach creates a real risk of significant harm, we will notify affected people and regulators as required by law.
10. Your choices and rights
You may ask us to access, correct or delete your personal information, to withdraw consent (which may affect what we can provide), or — where Québec law applies — to receive your information in a portable format. Company administrators can update most Customer Content directly, and we can provide a complete export on request. To make a request, email [email protected]; we will respond within 30 days. If you are not satisfied, you may contact the Office of the Privacy Commissioner of Canada or, in Québec, the Commission d’accès à l’information.
11. Emails
We send service emails you need to use SiteFuse (verification codes, security notices, trial and billing notices). Marketing emails are sent only with your consent and always include an unsubscribe link, in accordance with Canada’s Anti-Spam Legislation (CASL).
12. Cookies and local storage
The SiteFuse console and apps store sign-in tokens and preferences (such as language) in your browser or device so you stay signed in. Our website does not use advertising or analytics trackers.
13. Children
SiteFuse is a business tool and is not directed to children. We do not knowingly collect information from anyone under 16.
14. Changes
We may update this policy as the Service changes. We will post the new version here with a new date and, for significant changes, notify account administrators by email or in the Service before they take effect.
15. Contact
Questions or requests: [email protected].
SiteFuse