FieldCerta Privacy Policy

Information we process

FieldCerta processes organization and user names, manager and administrator email addresses when provided, assigned roles, job information, optional photo notes, captured images, capture date and time, street address, GPS coordinates, and location accuracy. We also keep session, device type, security, and audit records needed to protect and operate each workspace. Network addresses are converted to a protected one-way value before they are stored for security monitoring.

How we use information

We use this information to authenticate users, stamp jobsite photos, associate each image with the correct job and user, organize uploads, and provide the photo library, download, and administrative tools.

Organizations and access

Each organization has a separate workspace and Google Drive connection. Employees can capture, view, and download photos. Managers can also manage jobs. Administrators have those capabilities and can also manage users, Drive access, and photo deletion. Users can access only the organization associated with their assigned code.

Google Drive data

An organization administrator authorizes FieldCerta to create its main folder, create job and date folders, upload stamped photos, retrieve them for the library and downloads, and delete selected photos. FieldCerta requests access only to Drive files it creates or files explicitly shared with it—not all files in the connected account.

Google user data is used only to provide these visible app features. It is not sold, used for advertising, or transferred for unrelated purposes. FieldCerta's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Storage and service providers

Photos are stored in the Google Drive account connected by the organization. Workspace records are stored by the hosted FieldCerta service. GPS coordinates are sent to an address lookup service to obtain the street address printed on a photo. Service providers receive information only as needed to perform these functions.

When a connection is unavailable or an upload has not been confirmed, the stamped photo and its upload details are temporarily stored in app-scoped browser storage on the user's device. The local copy is removed after FieldCerta confirms the upload or when the user chooses to discard it.

Device permissions

The app requests camera and location access when a user takes a photo. These permissions are controlled in the phone or browser settings. Photo capture cannot include an accurate address and coordinates when location access is unavailable.

Security and audit history

FieldCerta records sign-ins, failed sign-in attempts, device sessions, user and job changes, successful and failed photo uploads, full-size photo views, downloads, and deletions. Organization administrators can review recent activity and revoke signed-in devices. When enabled, an email delivery provider receives a manager or administrator's email address and a short-lived, single-use sign-in link only to deliver the requested authentication email. These records are used to prevent abuse, investigate access, and support accountability.

Retention and deletion

The organization controls how long its photos are retained. Administrators can delete selected photos through the library, and the connected Drive owner can manage files directly in Google Drive. Account or workspace deletion requests can be sent to the contact below.

Contact

Privacy questions and deletion requests can be sent to brandonc.cmc@gmail.com.