Effective August 17, 2026

Privacy Policy

This policy explains how HeatLedger (“HeatLedger,” “we,” or “us”) handles information when you visit or use HeatLedger.

1. Information we collect

We collect account details such as name and email; organization and jobsite information; written heat-plan content; user-submitted action attestations and training records; uploaded evidence; subscription status; and technical service data such as timestamps, browser information, and security logs.

HeatLedger is not designed to collect worker medical diagnoses, medical records, Social Security numbers, payment-card numbers, or precise continuous worker location. Do not upload sensitive information that is not necessary for heat-safety recordkeeping.

2. How we use information

We use information to provide and secure the service, authenticate users, organize records, retrieve remote weather data, produce evidence packets, process subscriptions, respond to support requests, investigate abuse, and comply with applicable law.

3. Service providers

Supabase provides authentication, database, and private file storage. Netlify hosts the public application. The U.S. National Weather Service supplies remote weather-screening data. Waffo Pancake acts as merchant of record and processes checkout, tax, invoices, refunds, and subscription billing. HeatLedger does not receive or store complete payment-card details.

4. Record boundaries

Remote weather records show what the system retrieved from the identified source. Action attestations show what an authorized user submitted. HeatLedger keeps those categories separate and does not infer that an onsite action occurred merely because weather data or an alert exists.

5. Sharing and international processing

We share data only with service providers needed to operate HeatLedger, when instructed by the organization controlling the workspace, or when required to protect rights, safety, and legal compliance. Providers may process data in countries other than yours and use appropriate contractual and technical safeguards.

6. Retention and deletion

We retain active workspace records while the account is in use and for a reasonable period afterward for export, security, dispute handling, and legal obligations. An organization owner may request account deletion. Some immutable audit, transaction, or legal records may be retained where required.

7. Security

We use access controls, row-level database policies, private storage, encryption in transit, and service logging. No internet service is completely secure, so customers must protect their credentials and promptly report suspected unauthorized access.

8. Your choices and rights

Depending on location, you may have rights to access, correct, delete, or export personal information and to object to or restrict certain processing. Organization administrators may also manage workspace records. Send requests from the relevant account email so we can verify them.

9. Children

HeatLedger is a business service for adults and is not directed to children under 18.

10. Contact

Questions or privacy requests: support@heatcomply.pro.