Privacy Policy

1. Definitions

Personal Information means information that identifies, relates to, describes, or can reasonably be linked to an individual. In some jurisdictions this is called "personal data."

Customer means an organization that subscribes to the Services.

End User means an individual authorized by a Customer to use the Services, or who receives communications sent through the Services (for example, employees, contractors, or other workforce members).

Customer Data means Personal Information and other data submitted to the Services by or on behalf of a Customer, including End User data.

Customer Content means content created, uploaded, submitted, or processed within the Services, such as prompts, messages, safety moment content, quiz configurations, documents, templates, checklists, and files.

Engagement Data means data generated through End User interaction with the Services, including message delivery events, opens, clicks, acknowledgements, quiz answers, quiz scores, response timestamps, and engagement metrics derived from that activity.

2. Scope and Roles

This Policy applies to Personal Information we process when you visit our websites, create or manage an account, use the Services, receive communications delivered through the Services, or communicate with us.

Customer and End User data: When a Customer uses the Services, the Customer is typically the "controller" (or equivalent) of Customer Data and SafetyVerse acts as a "processor" or "service provider" on the Customer's instructions. If you are an End User, your employer or organization controls how your information is used in the Services. See Section 13 for how rights requests are handled.

Data Processing Addendum: Customers may request a Data Processing Addendum ("DPA") that governs SafetyVerse's processing of Customer Data. The DPA supplements this Policy and the Customer's subscription agreement. To request a DPA, contact [email protected].

3. Information We Collect

3.1 Information You Provide Directly

• Account and Profile Data: name, business email, username, password, company name, job title, role and permissions.
• Billing and Transaction Data: billing contact details, billing address, subscription details, invoices, and payment status. Payment card details are processed by our third-party payment processor and we do not store full card numbers.
• Customer Content: prompts and messages submitted to AI features, safety moment content, quiz configurations, documents, templates, files uploaded, and other content you submit to the Services.
• Communications: emails and messages you send us, support tickets, feedback, and survey responses.

3.2 Information Customers Provide About End Users

Customers may upload or enter information about End Users, including name, work email, phone number (if SMS or voice delivery is used), employee identifier, department, job role, worksite or region, preferred language, and scheduling details related to communications.

3.3 Engagement Data

The Services record Engagement Data when End Users interact with safety moments, quizzes, and other platform communications. This includes message delivery status, opens, clicks, acknowledgements, quiz answers and scores, response timestamps, and engagement metrics derived from that activity. SafetyVerse uses Engagement Data to provide analytics and reporting to Customers and to operate and improve the Services.

3.4 Information We Collect Automatically

• Usage Data: pages and screens viewed, features used, actions taken, and similar activity data.
• Device and Technical Data: IP address, browser type, operating system, device identifiers, language settings, and approximate location derived from IP address.
• Log and Diagnostic Data: error reports, performance data, audit logs, and security-related logs.
• Cookies and Similar Technologies: described in Section 7.

3.5 Information from Third Parties

• Service Providers: we receive information from vendors that support our operations (for example, payment processing, hosting, analytics, email delivery, SMS delivery, and customer support tooling).
• Integrations: if you connect the Services to third-party tools, we may receive information based on your integration settings and permissions.
• Referrals: if you are referred by a partner or reseller, we may receive basic contact and account-related information.

4. Sensitive Information

The Services are designed for workplace safety engagement and may involve information that could be considered sensitive depending on how a Customer configures the platform (for example, quiz responses that reveal individual knowledge gaps or worksite-specific safety conditions). Customers control what questions are asked and what data is collected from End Users.

Please do not submit highly sensitive personal information into the Services unless your Customer has determined it is appropriate and lawful to do so (for example, government identifiers, precise geolocation, medical diagnoses, or financial account numbers). Customers are responsible for providing notices and obtaining consents required by law for the data they collect and process using the Services.

5. How We Use Information

We use Personal Information for the following purposes:

• Provide and operate the Services: create accounts, authenticate users, manage permissions, deliver daily safety moments and quizzes via email, SMS, push notification, or other supported channels, provide AI-enabled features (including Safety Coach), generate engagement analytics and reports, and perform core platform functions.
• Customer administration: manage subscriptions, billing, payments, usage reporting, and account communications.
• Support: respond to inquiries, troubleshoot issues, and provide customer service.
• Security and integrity: protect the Services, monitor for suspicious activity, prevent fraud, and enforce our terms and policies.
• Improve the Services: analyze usage and performance, develop new features, and improve reliability.
• Marketing (where permitted): send product updates and promotional communications to business contacts where allowed by law. You can opt out at any time (see Section 12).
• Legal and compliance: comply with applicable law, respond to lawful requests, and protect the rights, safety, and property of SafetyVerse, our Customers, and others.

6. Communication Delivery Channels

The Services deliver safety moments, quizzes, and related communications to End Users through multiple channels. The specific channels used depend on Customer configuration and End User preferences.

6.1 SMS and Text Messaging

If a Customer configures SMS delivery, we process End User phone numbers and message activity to deliver safety moments, quizzes, reminders, and related communications.

• Consent: SMS messages are sent to End Users based on the Customer's configuration and instructions. Customers are responsible for ensuring they have obtained appropriate consent from End Users before enabling SMS delivery, in compliance with applicable law, including the Telephone Consumer Protection Act (TCPA) in the United States and Canada's Anti-Spam Legislation (CASL).
• Opt-out: End Users can opt out of SMS messages at any time by replying STOP. A final confirmation message may be sent. End Users may also contact their employer or [email protected] for assistance.
• Help: Reply HELP for assistance, or email [email protected].
• Rates and frequency: Message and data rates may apply. Message frequency varies based on Customer settings and End User interactions. Typical delivery is one message per active user per day.
• Service providers: We use SMS service providers to deliver messages. They process End User phone numbers and message data only to provide delivery services on our behalf.

We do not sell End User phone numbers. We do not share End User phone numbers for cross-context behavioral advertising.

SMS Opt-In Data and Consent. No mobile information, including End User phone numbers and SMS opt-in or consent data, will be shared with third parties or affiliates for marketing or promotional purposes. SMS opt-in data and consent are excluded from all information-sharing categories described in this Policy and will not be shared with any third parties, except service providers strictly necessary to deliver the messaging service (for example, our SMS delivery provider), who may use the data only to provide that service to us.

6.2 Email

If a Customer configures email delivery, we process End User email addresses and message activity to deliver safety moments, quizzes, and related communications. End Users can opt out of email communications by contacting their employer or [email protected].

6.3 Push Notifications

If the Services include a mobile application or web-based push notification capability, End Users may receive push notifications based on Customer configuration. End Users can manage push notification preferences through their device settings or within the application.

7. Cookies and Similar Technologies

We use cookies and similar technologies (for example, pixels and local storage) to keep you signed in, maintain sessions, remember preferences, understand website and product usage, and improve performance and security.

• Necessary cookies: required for the website and Services to function properly.
• Analytics cookies: help us understand usage and improve the Services.

We do not use advertising cookies or tracking pixels for paid ad retargeting.

You can control cookies through your browser settings. If you disable certain cookies, some features may not function properly.

8. AI Features and AI Data Handling

SafetyVerse includes AI-enabled features, including the Safety Coach add-on and AI-assisted content generation. When you use AI features, we process the prompts, messages, and relevant context you submit to generate an output and support the feature.

Third-party AI providers: We may use vetted third-party AI service providers to help deliver AI functionality. These providers are contractually required to protect the information and use it only to provide services to us.

Training and improvement: We do not use Customer Content to train general-purpose AI models. We may use aggregated or de-identified usage metrics (for example, feature usage counts and performance statistics) to improve the Services.

Important: AI-generated outputs are provided for workplace safety engagement purposes only. They do not constitute compliance advice, legal advice, regulatory guidance, or a substitute for a qualified safety professional. AI outputs may be inaccurate, incomplete, or not applicable to your specific jurisdiction or workplace conditions. All AI-generated content should be reviewed by qualified personnel before being relied upon in any safety program, operational decision, or regulatory context.

9. How We Disclose Information

We do not sell Personal Information.

We disclose Personal Information only as described below:

• Service providers and sub-processors: hosting, analytics, payment processing, email delivery, SMS delivery, AI service providers, and customer support tooling. These providers are contractually required to protect the information and use it only to provide services to us. A list of our current sub-processors is available upon request by contacting [email protected].
• Integrations: if a Customer enables integrations, we disclose information as directed by the Customer and based on integration settings and permissions.
• Legal and compliance: if we believe disclosure is required by law, regulation, legal process, or governmental request, or is necessary to protect rights, safety, and security.
• Corporate transactions: in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be disclosed or transferred as part of that transaction, subject to appropriate protections.
• Aggregated or de-identified data: we may disclose information that cannot reasonably be used to identify an individual.

We do not share Personal Information for cross-context behavioral advertising.

10. International Data Transfers

SafetyVerse is a Delaware corporation with operations in the United States and Canada. We may process and store information in the United States, Canada, and other countries where we or our service providers operate. Data protection laws in these countries may differ from those in your location.

Where required by applicable law, we use appropriate safeguards for cross-border transfers, such as Standard Contractual Clauses (SCCs), contractual protections, or other legally recognized transfer mechanisms. You may request information about the safeguards we use by contacting [email protected].

11. Multi-Language Communications

The Services support delivery of safety moments and quizzes in multiple languages based on Customer configuration. We process language preference data for End Users to deliver content in the appropriate language. This Privacy Policy is provided in English. In the event of any conflict between an English-language version and a translated version of this Policy, the English-language version controls.

12. Marketing Choices

You can opt out of marketing emails by using the unsubscribe link in the message or by contacting us at [email protected]. Even if you opt out of marketing, we may still send important transactional or administrative messages (for example, security alerts, billing notices, and product updates related to your account).

SafetyVerse complies with applicable anti-spam legislation, including CAN-SPAM (United States) and CASL (Canada), for all marketing communications.

13. Your Privacy Rights and Requests

Your rights depend on where you live and whether you are a Customer contact or an End User.

13.1 Customer Contacts

If you are an account administrator or billing contact, you may request access to, correction of, deletion of, or a portable copy of your Personal Information, subject to applicable law and identity verification.

13.2 End Users

If you are an End User and your information is processed in connection with a Customer's use of the Services, please direct your request to your employer or organization first. Customers control Customer Data and are responsible for responding to End User requests. We assist Customers in fulfilling requests as required by our agreements and applicable law.

13.3 United States State Privacy Rights

Depending on your state of residence (including California, Virginia, Colorado, Connecticut, and other states with comprehensive privacy laws), you may have rights to request access to and details about Personal Information we process, request deletion, request correction of inaccurate Personal Information, and opt out of certain processing activities where applicable.

We do not sell Personal Information. We do not share Personal Information for cross-context behavioral advertising. If our practices change, we will update this Policy and provide any required opt-out mechanisms.

13.4 EEA, UK, and Similar Jurisdictions

Where applicable, we process Personal Information based on legal grounds such as performing a contract for the Services, pursuing legitimate interests (for example, security and service improvement), compliance with legal obligations, and consent (for example, optional cookies or certain marketing communications).

Depending on applicable law, you may have rights to access, correct, delete, restrict or object to processing, and receive a portable copy of your Personal Information. If processing is based on consent, you can withdraw consent at any time without affecting the lawfulness of prior processing.

13.5 How to Submit a Request

To exercise privacy rights, contact us at [email protected]. We may ask you to verify your identity so we can process your request. We will respond within timeframes required by applicable law.

14. Data Retention

We retain Personal Information only as long as necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law.

• Account Data: retained while the account is active and for up to 12 months after account closure for security, auditing, and dispute resolution purposes, unless a longer period is required by law.
• Billing Records: retained for a minimum of 7 years as required for tax, accounting, and financial reporting obligations.
• Customer Data and Customer Content: retained according to the Customer's subscription term and instructions. Upon termination of a Customer's subscription, Customer Data is retained for up to 90 days to allow for data export, after which it is deleted, subject to reasonable backup and archival practices.
• Engagement Data: retained for the duration of the Customer's subscription and subject to the same post-termination retention period as Customer Data.
• Security Logs: retained for up to 12 months to support security monitoring, incident investigation, and fraud prevention.

15. Security

We use administrative, technical, and physical safeguards designed to protect Personal Information, including encryption in transit and at rest, access controls, audit logging, and security monitoring. We conduct periodic security assessments, including penetration testing, to evaluate and improve our security posture.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you become aware of a potential security issue, please contact us immediately at [email protected].

16. Children's Privacy

The Services are not directed to children, and we do not knowingly collect Personal Information from children under 16 (or such other age as may be specified by applicable law). If you believe a child has provided Personal Information to us, contact [email protected] and we will take appropriate steps to delete it.

17. Third-Party Links

Our websites and Services may contain links to third-party websites or services. Their privacy practices are governed by their own policies, and we are not responsible for them. We encourage you to review the privacy policies of any third-party services you access.

18. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on our website and revise the "Last Updated" date. If changes are material, we will provide additional notice where required by law (for example, by email or in-app notice). Your continued use of the Services after the effective date of any updated Policy constitutes your acknowledgment of the changes.

19. Governing Law

This Privacy Policy is governed by the laws of the State of Delaware, United States, without regard to conflict of law principles, except where superseded by applicable data protection laws in your jurisdiction.

20. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

By using the Services, you acknowledge that you have read and understood this Privacy Policy.