Privacy Policy

1. Information We Collect

We collect only the information necessary to provide our surveying software service:

• Account Information: Name, email address, company name, and phone number
• Survey Data: Building information, item records, sample data, and photos you upload
• Payment Information: Processed securely by Stripe - we never see or store your card details
• Usage Data: Basic analytics to improve app performance (no personal tracking)

2. How We Use Your Information

Your information is used exclusively to:

• Provide the Smart Risk Software service and generate your survey reports
• Process subscription payments via Stripe
• Send important service updates (never marketing spam)
• Provide customer support when you need help

We do not sell your data. We do not share your data with third parties for marketing. We do not use your data for AI training or any purpose beyond providing our service.

3. Data Security

We take security seriously. Your data is protected by:

• Encryption in Transit: All data is transmitted over HTTPS/TLS
• Encryption at Rest: Data is encrypted in our cloud databases
• Secure Cloud Infrastructure: Hosted on enterprise-grade cloud providers (Railway, Cloudflare)
• Access Controls: Strict role-based access - your data is isolated to your company
• Regular Backups: Automated daily backups with 30-day retention
• No Third-Party Access: We do not give any third parties access to your survey data

4. Data Retention & Deletion

We retain your data for as long as your account is active. If you cancel your subscription, your data is retained for 30 days to allow for reactivation or data export. After 30 days, you may request complete deletion. You can export all your survey data at any time in PDF or structured format.

5. Your Rights (GDPR)

Under UK GDPR and data protection laws, you have the right to:

• Access: Request a copy of all data we hold about you
• Rectification: Correct any inaccurate personal data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Export your data in a usable format
• Object: Object to certain processing of your data

To exercise any of these rights, contact us at the email below.

6. Cookies

We use only essential cookies required for the application to function (authentication, session management). We do not use advertising cookies, tracking pixels, or any third-party analytics that track you across the web.

7. Third-Party Services

We use a limited number of trusted service providers:

• Stripe: Payment processing (PCI-DSS compliant)
• Cloudflare: CDN and file storage (enterprise security)
• Railway: Cloud hosting infrastructure

These providers are bound by strict data processing agreements and do not have access to use your data for their own purposes.

8. Mobile App (iOS & Android)

Our mobile app (available on iOS and Android) requires the following device permissions to function:

• Camera: Used exclusively to capture photos of asbestos materials, survey items, and sample evidence. Photos are stored securely on your account and never used for any other purpose.
• Photo Library / Storage: Used to attach existing photos from your device to survey records. We access only photos you explicitly select.

The app stores survey data locally on your device using SQLite for offline use. This data is synced to your secure account when a connection is available. No data is shared with third parties from the mobile app. Photos and survey records stored locally are deleted when you log out or uninstall the app.

The app does not use background location, contacts, microphone, or any permissions beyond camera and photo library. It does not track you across other apps or websites.

9. Contact Us

For privacy-related questions, data requests, or concerns, please contact us at privacy@smartrisksoftware.com

Evermind Tech Ltd
Company No. 16800188
128 City Road, London, EC1V 2NX, United Kingdom