Privacy Policy

TruStar Safety Inc. (“TruStar”, “we”, “us”, or “our”) provides TruStar Connect, a safety and operations software platform (the “Service”). This Privacy Policy explains how we collect, use, disclose, and protect personal information in connection with our websites and the Service.

We are based in Alberta, Canada, and we handle personal information in accordance with applicable Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta’s Personal Information Protection Act (PIPA).

This policy applies to personal information we handle as a business: information about visitors to our websites, people who create accounts or start a trial, and billing and support contacts at our customer organizations.

Our customers use the Service to run their own safety programs and may upload information about their workers, sites, and operations (“Customer Data”). When we process Customer Data on behalf of a customer organization, that organization decides what to collect and how to use it, and is responsible for its own privacy obligations to its workers. If you are a worker whose information was entered by your employer, please direct privacy requests to your employer, which controls that data.

Information you provide: your name, email address, organization name, role, and similar details when you create an account, start a trial, contact us, or configure your workspace.

Customer Data: the records and content you submit to the Service, which may include information about your workers, sites, inspections, incidents, hazards, training, and operations. You decide what information to put into the Service.

Billing information: when you subscribe, payments are processed by our payment provider, Stripe. We receive limited billing details such as your billing contact, plan, and transaction status. We do not collect or store full payment card numbers; those are handled directly by Stripe.

Information collected automatically: when you use our websites and the Service, we and our providers may collect usage data, log data, and device and browser information, including through cookies and similar technologies.

We use personal information to provide, operate, secure, maintain, and improve the Service; to create and manage accounts; to process subscriptions and payments; to provide support; to communicate with you about your account, service updates, and security matters; to detect and prevent fraud, abuse, and security incidents; and to comply with our legal obligations.

Some features use AI service providers to draft, summarize, or analyze content. Information processed by those features is used to generate the requested output. We do not use it to build advertising profiles, and we do not sell personal information.

We collect, use, and disclose personal information with your consent or as otherwise permitted or required by law. By using the Service, you consent to the handling of personal information as described in this policy. You may withdraw your consent subject to legal and contractual limits, although doing so may limit or prevent your use of the Service.

We use cookies and similar technologies that are necessary to operate the Service, such as keeping you signed in, and to understand how the Service is used so we can improve it. You can control cookies through your browser settings, but disabling some cookies may affect how the Service works.

We share personal information only as needed to run our business: with the service providers described below; when required by law or to respond to lawful requests; to protect the rights, safety, and security of TruStar, our users, and the public; and in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honour this policy. We do not sell personal information.

We rely on trusted third parties to deliver the Service. These currently include Stripe (payment processing and billing), Supabase (database and file hosting, located in Canada), Vercel (application hosting and content delivery), Resend (transactional email), and Anthropic (AI features). These providers process information only to provide their services to us and are bound by their own privacy and security commitments. Some of them may process or store information outside Canada, including in the United States.

We host the core application database and uploaded files in Canada. Some of our service providers may process limited information outside Canada, including in the United States, where it may be subject to the laws of those jurisdictions, including lawful access by courts and government authorities. We take reasonable steps to ensure your information is treated securely and consistently with this policy wherever it is processed.

We retain personal information for as long as needed to provide the Service, maintain your account, comply with our legal obligations, resolve disputes, and enforce our agreements. Customer Data is retained according to your subscription and our agreement with your organization. When information is no longer needed, we take reasonable steps to delete or anonymize it.

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and hosting with reputable infrastructure providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential and for activity under your account.

Subject to applicable law, you may request access to the personal information we hold about you, ask us to correct inaccurate or incomplete information, and withdraw consent to certain uses. To make a request, contact us using the details below. We may need to verify your identity before responding. If your information was entered into the Service by an employer or organization, please direct your request to that organization, which controls that data.

For Customer Data, our customer organizations decide what information to collect and how to use it, and they are responsible for providing any required notices and obtaining any required consents from their workers. We process Customer Data on their behalf under our agreement with them. Requests from individuals about Customer Data should be directed to the relevant organization.

The Service is intended for use by businesses and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us so we can take appropriate steps.

Our websites and the Service may link to third-party sites or services that we do not control. This policy does not apply to those third parties, and we encourage you to review their privacy policies before providing them with personal information.

We may update this policy from time to time. When we make material changes, we will update the date below and, where appropriate, provide additional notice. Your continued use of the Service after an update takes effect means you accept the revised policy.

If you have questions, requests, or concerns about this policy or your personal information, contact our Privacy Officer at TruStar Safety Inc., info@trustarsafety.com.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca).