Privacy Policy

TruStar Safety Inc. (“TruStar”, “we”, “us”, or “our”) provides TruStar Connect, a safety and operations software platform (the “Service”). This Privacy Policy explains how we collect, use, disclose, and protect personal information in connection with our websites and the Service.

We are based in Alberta, Canada, and we handle personal information in accordance with applicable Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta’s Personal Information Protection Act (PIPA).

This policy applies to personal information we handle as a business: information about visitors to our websites, people who create accounts or start a trial, and billing and support contacts at our customer organizations.

Our customers use the Service to run their own safety programs and may upload information about their workers, sites, and operations (“Customer Data”). When we process Customer Data on behalf of a customer organization, that organization decides what to collect and how to use it, and is responsible for its own privacy obligations to its workers. If you are a worker whose information was entered by your employer, please direct privacy requests to your employer, which controls that data.

Information you provide: your name, email address, organization name, role, and similar details when you create an account, start a trial, contact us, or configure your workspace.

Customer Data: the records and content you submit to the Service, which may include information about your workers, sites, inspections, incidents, hazards, training, and operations. You decide what information to put into the Service.

Billing information: when you subscribe, payments are processed by our payment provider, Stripe. We receive limited billing details such as your billing contact, plan, and transaction status. We do not collect or store full payment card numbers; those are handled directly by Stripe.

Information collected automatically: when you use our websites and the Service, we and our providers may collect usage data, log data, and device and browser information, including through cookies and similar technologies. What our public website records about a visit, and for how long, is set out in section 7.

We use personal information to provide, operate, secure, maintain, and improve the Service; to create and manage accounts; to process subscriptions and payments; to provide support; to communicate with you about your account, service updates, and security matters; to detect and prevent fraud, abuse, and security incidents; and to comply with our legal obligations.

Some features use AI service providers to draft, summarize, or analyze content. Information processed by those features is used to generate the requested output. We do not use it to build advertising profiles, and we do not sell personal information.

We collect, use, and disclose personal information with your consent or as otherwise permitted or required by law. By using the Service, you consent to the handling of personal information as described in this policy. You may withdraw your consent subject to legal and contractual limits, although doing so may limit or prevent your use of the Service.

We use cookies and similar technologies that are necessary to operate the Service, such as keeping you signed in, and to understand how the Service is used so we can improve it. You can control cookies through your browser settings, but disabling some cookies may affect how the Service works.

Our public website sets one additional cookie, described in the next section.

Our public website carries a chat assistant. So that we can hold a conversation with you and, if you ask for one, put you through to a person on our team, we set a single cookie in your browser when you arrive. It contains a random identifier and nothing else — no name, no email address, and nothing that identifies you personally. It cannot be read by scripts on the page, it is not shared with anyone, and it is not used for advertising.

While that cookie is present, our team can see that somebody is on the site, which page they are reading at that moment, how many pages they have looked at during the visit, and the website that referred them, if any — the site’s address only, never a full link or anything you typed into a search engine. We do this so we can offer to help while you are still reading, in the same way a person might in a showroom.

We do not keep a history of the pages you visit. We record only the page you are on right now, and that record is deleted automatically after thirty minutes without activity. We do not collect your IP address, device fingerprint, or browser details for this purpose, and we do not combine this with anything else to build a profile of you.

The assistant may also open a conversation on its own — for example if you have been reading our pricing for a while, or looking at several comparison pages. That happens at most once per visit, never if you are already in a conversation, and never on this page, our Terms, the release notes or the Knowledge Base. It appears as a single line above the chat button, which you can dismiss.

If your browser sends a Global Privacy Control or Do Not Track signal, we do not set the cookie and you will not appear to our team at all. You can also block or clear cookies in your browser settings; the website works normally either way, and you can still use the chat if you want to.

If you send a message in the chat, we keep that conversation so we can answer it and so you can return to it. The assistant asks for a first name so that a person joining the conversation knows who they are speaking to; you can type anything you like. We ask for an email address only if you want the conversation sent to you, and we use it for that purpose. We do not add it to a marketing list without asking you separately.

We share personal information only as needed to run our business: with the service providers described below; when required by law or to respond to lawful requests; to protect the rights, safety, and security of TruStar, our users, and the public; and in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honour this policy. We do not sell personal information.

We rely on trusted third parties to deliver the Service. These currently include Stripe (payment processing and billing), Supabase (database and file hosting, located in Canada), Vercel (application hosting and content delivery), Resend (transactional email), and Anthropic (AI features). These providers process information only to provide their services to us and are bound by their own privacy and security commitments. Some of them may process or store information outside Canada, including in the United States.

We host the core application database and uploaded files in Canada. Some of our service providers may process limited information outside Canada, including in the United States, where it may be subject to the laws of those jurisdictions, including lawful access by courts and government authorities. We take reasonable steps to ensure your information is treated securely and consistently with this policy wherever it is processed.

We retain personal information for as long as needed to provide the Service, maintain your account, comply with our legal obligations, resolve disputes, and enforce our agreements. Customer Data is retained according to your subscription and our agreement with your organization. When information is no longer needed, we take reasonable steps to delete or anonymize it.

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and hosting with reputable infrastructure providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential and for activity under your account.

Subject to applicable law, you may request access to the personal information we hold about you, ask us to correct inaccurate or incomplete information, and withdraw consent to certain uses. To make a request, contact us using the details below. We may need to verify your identity before responding. If your information was entered into the Service by an employer or organization, please direct your request to that organization, which controls that data.

For Customer Data, our customer organizations decide what information to collect and how to use it, and they are responsible for providing any required notices and obtaining any required consents from their workers. We process Customer Data on their behalf under our agreement with them. Requests from individuals about Customer Data should be directed to the relevant organization.

The Service is intended for use by businesses and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us so we can take appropriate steps.

Our websites and the Service may link to third-party sites or services that we do not control. This policy does not apply to those third parties, and we encourage you to review their privacy policies before providing them with personal information.

We may update this policy from time to time. When we make material changes, we will update the date below and, where appropriate, provide additional notice. Your continued use of the Service after an update takes effect means you accept the revised policy.

If you have questions, requests, or concerns about this policy or your personal information, contact our Privacy Officer at TruStar Safety Inc., info@trustarsafety.com.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca).