OnSiteComms — Privacy Policy

OnSiteComms ("we", "us") is a private business communication platform for construction field teams, operated by Johnny Garbim. It is used by employees and contractors of participating companies to coordinate installation jobs. Website: https://on-site-comms.com.

• Account information: name, e-mail address, role/title and preferred language.
• Content you create: messages, photos, videos, voice recordings, documents (e.g. job PDFs), annotations and task/issue records.
• Job information: work orders, addresses and schedules synchronized from your company's project-management system.
• Device information: push-notification tokens (Apple/Google) so we can deliver message alerts.
• Sign-in credentials: a hashed password, and optionally passkeys (Face ID / Touch ID) or your Apple ID identifier if you use Sign in with Apple. We never see or store your Apple password or biometric data.

• To provide the core service: real-time messaging, media sharing and job coordination.
• To transcribe and translate voice messages and captions (processed by OpenAI's API solely to provide this feature).
• To send push notifications about new messages (via Apple Push Notification service and Google Firebase Cloud Messaging).
• To secure accounts and prevent unauthorized access.

We do not sell your data, show ads, or use your data for advertising or tracking across other companies' apps and websites.

Some features are powered by artificial intelligence provided by OpenAI (USA): automatic message translation, voice-note transcription, the live interpreter and the Buddy assistant.

• What is sent: the text of messages you translate, voice recordings you transcribe or speak during the live interpreter, your questions and voice commands to Buddy, and photos you explicitly ask the AI to analyze.
• Who receives it: OpenAI, L.L.C. (United States), acting as our data processor via API. Per OpenAI's API policy, this data is not used to train their models.
• Why: solely to provide the requested feature (translation, transcription, assistant answers). Never for advertising.
• Your permission first: nothing is sent to OpenAI until you explicitly authorize it on the consent screen shown at your first sign-in.
• Your choice, anytime: you can withdraw or grant this permission in More → Settings → AI features. If you decline, automatic translation, Buddy and audio transcription are disabled — all other features keep working.

Your content is visible to the co-workers who participate in your conversations and to your company's administrators. We share data only with the service providers needed to run the app: cloud hosting, Apple (push), Google (push) and OpenAI (voice transcription/translation). These providers process data on our behalf and may not use it for their own purposes.

We keep your data while your account is active. Messages and job records are retained as business records of the participating company. Push tokens are deleted when you sign out or delete the app.

You can delete your account at any time inside the app: Profile → Delete my account. This permanently removes your account, sign-in credentials (password, passkeys, Apple ID link) and push tokens, and removes you from all conversations. Messages you previously sent may remain as part of your company's business records. You can also request deletion by e-mail (below).

All traffic is encrypted in transit (HTTPS/TLS). Passwords are stored hashed. Access to conversations is limited to their participants and company administrators.

OnSiteComms is a workplace tool and is not directed at children under 16.

We may update this policy and will change the effective date above when we do.

Questions or data requests: jlgarbim5@hotmail.com