Introduction
NGYN Solutions Inc. ("we," "us," or "our") operates SiteConnect, a mobile and web-based workforce management application designed for contracting and field service businesses (the "App" or "Services"). We are committed to protecting the privacy of both the businesses that use our platform ("Customers") and the field workers and employees who use it on their behalf ("Users").
This Privacy Policy describes the types of personal information we collect, how we use and share it, and the choices you have. By accessing or using the Services, you agree to the practices described here. If you do not agree, please stop using the Services.
This policy applies to personal information only — information that can reasonably be used to identify you. Anonymous or aggregated data is not personal information and is not covered by this policy.
Who this policy applies to
We use the following terms throughout this policy:
Customers are businesses (e.g. contracting companies) that subscribe to SiteConnect to manage their workforce. Customers control the configuration of the platform within their organization.
Users are individuals — including field workers, site managers, and administrators — who access the App in connection with a Customer account. Users may be employees, contractors, or subcontractors of the Customer.
Information we collect
3.1 Account and contact information
Name, email address, phone number, job title, profile photo, and login credentials. Collected when an account is created or when a Customer adds a User to its organization.
3.2 Location information
We collect precise GPS location (latitude and longitude) when a User has an active shift or when the App's location features are enabled by their employer. Location data may be collected while the App is in the foreground, and — where the employer has enabled it — while the App is running in the background during an active shift. Coarse location (derived from IP address) may also be collected for security purposes.
You can disable location collection at any time in your device settings. Note that some features (such as clocking in at a job site) may not function without location access.
3.3 Photos and media
Photos captured or uploaded through the App for job site documentation, form submissions, or profile images. We access your device camera and photo library only when you initiate a capture or upload action.
3.4 Voice recordings and transcriptions
If you use the voice note feature, we record audio through your device microphone, transcribe it on-device using a local speech-to-text model, and store the resulting text and audio file. We access your microphone only while you are actively recording a voice note.
3.5 Timesheet and attendance data
Clock-in and clock-out timestamps, shift duration, break records, and attendance history. This data is generated through your interactions with the App and may be linked to your location at the time of clock-in/out.
3.6 Job and form data
Information you enter into job forms, checklists, inspection reports, or task submissions within the App. This may include notes, readings, signatures, and any other fields configured by your employer.
3.7 Biometric identifiers (optional)
If you choose to enable biometric authentication (Face ID or fingerprint), this is processed entirely by your device's operating system. SiteConnect does not store or transmit raw biometric data. We only receive a pass/fail signal from your device.
3.8 Device and technical information
Device model, operating system version, app version, IP address, device identifiers, crash logs, and diagnostic data. Collected automatically to operate and improve the Services.
3.9 Communications
Any messages, support requests, or other communications you send to us.
How we collect information
Directly from you — when you register, use App features, submit forms, record voice notes, or contact support.
Automatically — when you use the App, we collect device and usage data, location signals (if permitted), and crash/diagnostic information.
From your employer (Customer) — your employer may provide your name, phone number, job title, and work schedule when adding you to their organization account.
From third-party integrations — if your employer connects SiteConnect to other software (such as their ERP or payroll system), we may receive or exchange data with those systems as directed by the Customer.
How we use information
| Purpose | Types of data used | Legal basis (GDPR) |
|---|---|---|
| Providing and operating the App, including shift tracking, job forms, photo capture, and voice notes | Account info, location, photos, audio, timesheet data, form data | Performance of contract |
| Verifying job site attendance and GPS-based clock-in/out | Location, timestamps | Legitimate interest; performance of contract |
| Syncing data with the Customer's connected systems (e.g. ERP or payroll) | Account info, timesheet data, form data | Performance of contract |
| Customer support and responding to inquiries | Account info, communications | Performance of contract; legitimate interest |
| App security, fraud prevention, and abuse detection | Device info, IP address, usage data | Legitimate interest; legal obligation |
| Improving and developing the Services (aggregate analytics only) | Anonymized usage data, crash logs | Legitimate interest |
| Complying with legal obligations | As required by law | Legal obligation |
We do not use your personal information for advertising or sell it to third parties.
How we share information
6.1 With your employer (Customer)
Data generated by your use of the App — including timesheets, location history, photos, job forms, and voice transcriptions — is accessible to your employer's administrators and supervisors within the platform. This is the core purpose of the Services.
6.2 With service providers
We share data with trusted third-party providers who help us operate the Services, including cloud infrastructure (data hosting and storage), authentication services, and crash reporting tools. These providers are contractually bound to process data only on our instructions and to maintain appropriate security standards.
6.3 With integrated third-party systems
If your employer connects SiteConnect to other software (for example, an ERP or payroll system), relevant data will be shared with those systems as configured by the Customer.
6.4 For legal or safety reasons
We may disclose personal information to government authorities or other parties when required by law, court order, or to protect the rights, property, or safety of NGYN Solutions Inc., our Customers, Users, or the public.
6.5 In a business transaction
If NGYN Solutions Inc. is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. We will notify affected users before any such transfer takes effect.
We do not sell, rent, or trade personal information to third parties for their own marketing purposes.
Employee monitoring disclosure
Data retention
We retain personal information for as long as your account is active or as long as required to provide the Services. When a Customer terminates their subscription or requests deletion, we will delete associated User data within 30 days, except where we are required to retain it to comply with legal obligations or resolve disputes.
Timesheet and attendance records may be retained longer where required by applicable labor or tax laws.
Voice recordings uploaded via Wi-Fi are stored for a maximum of 7 days after upload unless otherwise required by the Customer's configuration or applicable law.
Data security
We implement commercially reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, loss, misuse, or disclosure. These measures include encrypted data transmission (TLS), encrypted data storage, access controls, and regular security reviews.
No system is completely secure. We cannot guarantee that unauthorized parties will never be able to defeat our security measures. If you believe your account has been compromised, please contact us immediately using the details in Section 15.
Your privacy rights
Depending on your jurisdiction, you may have the following rights regarding your personal information. Where SiteConnect processes your data on behalf of your employer (as data processor), you should direct these requests to your employer. Where we process your data as a data controller (e.g. account registration data), you may contact us directly.
Request a copy of the personal data we hold about you.
Request that we correct inaccurate or incomplete information.
Request that we delete your personal information, subject to legal retention requirements.
Request that we limit how we process your data in certain circumstances.
Object to processing based on legitimate interest, including direct marketing.
Where processing is based on consent, withdraw it at any time without affecting prior processing.
To submit a request, contact us using the details in Section 15. We will respond within 30 days. We may need to verify your identity before acting on a request.
If you believe we have handled your data unlawfully, you have the right to lodge a complaint with your local data protection authority. Canadian residents may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.
Children
The Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information without appropriate consent, please contact us immediately and we will take steps to remove that information.
Third-party links and integrations
The App may include links to or integrations with third-party services (for example, your employer's ERP system or mapping services). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing personal information to them.
International data transfers
Your personal information may be stored and processed in countries outside your country of residence, including Canada, the United States, and other locations where our service providers operate. We ensure that any such transfers are subject to appropriate safeguards, such as contractual protections consistent with applicable data protection laws.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. The "Last updated" date at the top of this page will always reflect the most recent version. For material changes, we will provide notice — for example, by sending an email to registered account holders or displaying a notice within the App — before the changes take effect. Your continued use of the Services after the effective date constitutes acceptance of the updated policy.
Contact us
If you have questions about this Privacy Policy, want to exercise your privacy rights, or need to report a data concern, please contact us by email. We do not currently offer phone or in-person support.