Privacy
Our formal privacy policy is being prepared with legal counsel before public launch. The summary below describes exactly how the system works today, in plain language.
What we collect
Account details for the people who sign in (name, email). Records you enter about your equipment: what it is, where it is, when it expires, and the inspections performed on it. If you use certification tracking, records about employees who are not users of the software — their name, role, site, and the certifications they hold.
Employees who are not users
Before you can add a person to certification tracking, the software requires you to confirm you have that person's permission to store their information. That confirmation is recorded with your name, the date, and the exact wording you agreed to, and it appears in your activity log and your exports.
Where it is stored
In Canada, encrypted in transit and at rest. Your records are private to your organization: access is enforced at the database level, not only in the interface, so another customer cannot read your data even if the application had a bug.
What we never do
We do not sell your data. We do not share it with advertisers. We do not use it to train machine-learning models. We do not publish your equipment locations — there is no public directory and no unauthenticated way to look up where anything is.
Support access
Our support staff can access account data when needed to resolve an issue. Every such access is logged. Any correction we make is recorded under our own name in your activity log — never disguised as one of your users.
Reminder emails
We email the people you nominate about equipment and certifications that need attention. Every message has a working unsubscribe. Reminders may include a link to a supplier; if you follow it we record that a click happened so the supplier can attribute it, and we do not send them your records.
How long we keep it
Compliance records are kept for seven years, so an audit years later still has its evidence. When you close your organization, reminders stop immediately and the data is held for 30 days in case the closure was a mistake, then permanently deleted.
Getting your data
You can export everything your organization has entered, at any time, without asking us: it is under Settings → Your data. If someone whose certifications you track wants to know what is held about them, that export contains it.
Questions about privacy, or a request about your own information: hello@readyregistry.ca