Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

• Account Information: Name, email address, phone number, job title, employer name, MSHA mine ID, and role within your organization.
• Profile Information: MSHA training certifications, Part 46 or Part 48 training records, qualifications, and competency designations.
• Safety Records: Inspection reports, hazard observations, incident reports, near-miss reports, workplace examination records, pre-operational inspection data, and vehicle inspection records.
• Photos and Media: Images uploaded in connection with hazard reports, incident documentation, inspections, and workplace examinations.
• Communications: Information you provide when contacting our support team, submitting feedback, or participating in surveys.

1.2 Information Collected Automatically

• GPS Location Data: We collect geolocation data only during check-in and check-out events at mine sites. The Platform does not continuously track your location. GPS coordinates are captured at the moment of check-in or check-out to verify your presence at the designated mine site for safety and compliance purposes.
• Device Information: Device type, operating system, browser type, screen resolution, device identifiers, and mobile network information.
• Usage Data: Pages visited, features used, time stamps, click patterns, and interaction data to improve Platform performance.
• Log Data: IP address, access times, referring URLs, and error logs for system administration and security monitoring.

1.3 Information From Third Parties

• Employer-Provided Data: Your employer (the mining company) may provide your name, contact information, job role, and training status when setting up your account.
• Weather Data: We obtain weather information from third-party providers to support on-site safety decisions. This data is associated with mine site locations, not individual users.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve the Platform, including check-in/check-out services, inspection management, training tracking, incident reporting, and emergency management features.
• Safety Compliance: To assist your employer in meeting MSHA regulatory requirements, including maintenance of training records per 30 CFR Part 46 and Part 48, inspection documentation, and safety reporting.
• Emergency Response: To facilitate muster operations, lone worker monitoring, and emergency action plan coordination when initiated by authorized personnel.
• Analytics and Improvement: To analyze usage patterns, diagnose technical issues, and improve Platform functionality, performance, and user experience.
• Communications: To send service-related notifications, safety alerts, training reminders, and compliance deadline notices.
• Security: To detect, prevent, and address fraud, unauthorized access, and other illegal or harmful activities.
• Legal Obligations: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

3. SMS & Emergency Alerts

VeriField Pro uses SMS (text messaging) exclusively for safety-critical communications at the mine sites where you work or visit. We do not send marketing or promotional messages.

How we collect your consent

You provide your phone number and consent to receive safety SMS at one of these points:

• When an administrator at your employer creates your VeriField Pro user account and enters your mobile number.
• When you update your phone number on your own profile under My Profile.
• When you check in as a visitor or contractor at a mine site using the VeriField Pro QR check-in form, which collects your phone number for the duration of your visit.

Consent language is shown alongside every phone-number field so it is visible at the time of collection.

Message content

• Emergency events: muster orders, site evacuation, shelter-in-place, and panic alerts triggered by an authorized administrator at your site.
• Assistance requests: direct alerts to site supervisors when a worker requests help during an active or potential emergency.
• Account confirmations: occasional service messages (e.g. initial welcome message with sign-in instructions).

Frequency

Message frequency varies. In normal operation, recipients typically receive zero to a few messages per month. During an active emergency, frequency will be higher as updates are sent.

Opt-out and help

• Reply STOP to any message to unsubscribe from all future SMS from VeriField Pro.
• Reply HELP to any message for support contact information.
• You can also remove your phone number from your profile at any time under My Profile → Phone.

Message and data rates may apply depending on your mobile carrier plan. Carriers are not liable for delayed or undelivered messages.

Your phone number is shared only with our SMS delivery vendor (Telnyx) for the sole purpose of delivering your messages. We do not sell, rent, or share your phone number with third parties for marketing purposes.

4. How We Share Your Information

We do not sell your personal information to third parties. We never have and never will.

We may share your information only in the following limited circumstances:

• With Your Employer: Your employer's authorized administrators can access your check-in records, training status, inspection data, and other safety-related information created or stored on the Platform. This access is essential to the employer's MSHA compliance obligations.
• Service Providers: We engage trusted third-party service providers that perform services on our behalf, including cloud hosting (Supabase/AWS), edge delivery (Vercel), email delivery (Resend), and communications (Telnyx). These providers are contractually obligated to protect your data and use it only for the services they provide to us.
• Legal Requirements: We may disclose information if required by law, regulation, legal process, subpoena, court order, or governmental request, including requests from MSHA inspectors or other regulatory authorities with lawful authority.
• Safety Emergencies: We may share location and identity information with emergency responders during active emergency situations initiated through the Platform's emergency management features.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify affected users of any change in ownership or control of personal information.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Certain categories of data are subject to mandatory federal retention requirements:

• Training Records: Per 30 CFR 46.9(d), training certificates and records must be retained for the duration of employment and for at least 2 years after a miner's departure from the mine. We retain these records accordingly.
• Inspection Records: Pre-operational inspection and workplace examination records are retained consistent with the recordkeeping requirements under 30 CFR Part 56/57.
• Incident and Accident Records: Records related to reportable incidents under 30 CFR Part 50 are retained for a minimum of 5 years.
• Check-in/Check-out Records: Retained for a minimum of 1 year or longer if required by your employer's policies.
• Account Data: Upon termination of a client subscription, we will retain data for 90 days to allow for export, after which it is permanently deleted unless a longer retention period is required by law.

6. Data Security

We implement industry-standard technical and organizational measures to protect your information, including:

• Encryption of data in transit using TLS 1.3 and at rest using AES-256.
• Row-level security (RLS) ensuring strict tenant data isolation.
• Multi-factor authentication for administrative accounts.
• Regular security assessments and vulnerability testing.
• Access controls limiting employee access to personal data.
• All data stored on servers located within the United States.

While we take data security seriously and employ robust safeguards, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your information.

7. Cookies and Similar Technologies

We use only essential cookies necessary for the operation of the Platform. We do not use marketing, advertising, or third-party tracking cookies. Our cookie usage is limited to:

• Authentication cookies: To maintain your session and keep you logged in.
• Preference cookies: To remember your display preferences such as theme (light or dark mode).

For more detailed information, please see our Cookie Policy.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information, subject to any legal or regulatory retention requirements. Note that MSHA-mandated records cannot be deleted before the end of applicable retention periods.
• Data Portability: Request a copy of your data in a structured, machine-readable format.
• Opt-Out of Communications: You may opt out of non-essential communications at any time. Safety-critical alerts and regulatory notifications cannot be opted out of while your account is active.

To exercise any of these rights, contact us at legal@verifieldpro.com. We will respond to your request within 30 days. Note that because we act as a data processor on behalf of your employer, we may need to direct your request to your employer (the data controller) for certain actions.

9. California and State-Specific Rights

8.1 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act:

• The right to know what personal information we collect, use, disclose, and sell (we do not sell personal information).
• The right to delete personal information, subject to regulatory retention requirements.
• The right to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising.
• The right to non-discrimination for exercising your privacy rights.
• The right to correct inaccurate personal information.
• The right to limit the use and disclosure of sensitive personal information.

8.2 Other State Privacy Laws

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states with comprehensive privacy legislation may have similar rights. We honor these rights as applicable under your state's law. Contact us at legal@verifieldpro.com to exercise your rights.

10. Our Role as a Data Processor

VeriField Pro operates as a data processor on behalf of our clients (mining companies and safety consultancies), who are the data controllers. This means:

• Your employer determines the purposes and means of processing your personal data through the Platform.
• We process personal data only in accordance with our clients' instructions and our contractual obligations.
• Requests to access, correct, or delete data that your employer has submitted to the Platform should be directed to your employer. We will assist your employer in fulfilling such requests.
• Our Data Processing Agreement governs the relationship between VeriField Pro and our clients with respect to personal data processing. See our Data Processing Agreement for details.

11. Children's Privacy

The Platform is designed for use by adult mine workers, safety professionals, and authorized personnel. The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from anyone under 18 years of age. If we learn that we have collected personal information from a person under 18, we will promptly delete that information. If you believe that a person under 18 has provided personal information to us, please contact us at legal@verifieldpro.com.

12. International Data Transfers

The Platform is operated in the United States and is intended for use within the United States. All data is stored on servers located within the United States. We do not transfer personal data outside of the United States. If you access the Platform from outside the United States, you understand that your information will be transferred to and processed in the United States.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated policy on this page and updating the “Last updated” date. For material changes, we will also provide notice through the Platform or via email. Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: