Privacy Policy

This service is provided by JobSite Compliance Group (trading as "Compliance Desk"). JobSite Compliance Group is the data controller for personal data processed through the platform: we determine the purposes and means of that processing. Where a General Contractor uploads information about their own subcontractors, we act as a processor on that contractor's behalf for those records and as a controller for account, security and billing data.

Paddle.com Market Ltd ("Paddle") is our Merchant of Record and acts as an independent controller for the payment data it collects at checkout.

Account data for General Contractors (company name, contact name, business email, and authentication identifiers). Roster data for subcontractors (company name, trade, contact name, business email and phone, and insurance agent or broker contact details). Document data uploaded by you or your subcontractors, which may include certificates of insurance, workers' compensation certificates and IRS Form W-9 — documents that can contain taxpayer identification numbers and other sensitive business information.

We also record operational metadata: upload timestamps, document status changes, reminder activity, and audit-log entries showing who performed each action.

To operate the compliance tracking service: display roster status, calculate expiration milestones, send renewal reminders to subcontractors, insurance agents and your team, extract document fields for your review, maintain audit trails, and process subscription billing.

We do not sell personal information, and we do not use uploaded documents for advertising.

Performance of a contract — creating and administering your account, providing the compliance tracking service, sending reminders you configure, and fulfilling your subscription.

Legitimate interests — keeping the platform secure, preventing fraud and abuse, maintaining audit trails, diagnosing faults, and improving the product, balanced against your rights and expectations.

Legal obligation — retaining transaction and tax records and responding to lawful requests from authorities.

Consent — optional communications and any non-essential analytics cookies. You may withdraw consent at any time without affecting prior processing.

Documents are stored in a private storage bucket that is not publicly listable or browsable. Access is enforced at the database level with row-level security so each General Contractor can only reach records and files belonging to their own tenant. Data is encrypted in transit, and access to production systems is restricted to authorized personnel.

We rely on infrastructure and processing partners to deliver the service, including our cloud hosting and database provider, our email delivery provider for reminders, an AI provider used solely to extract fields from documents you submit for scanning, and our professional advisers (legal and accounting). These providers process data on our instructions. We also disclose data to authorities where required by law.

Merchant of Record. Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders, and handles subscription management, payment processing, sales-tax compliance, invoicing, customer billing inquiries and returns. When you buy a subscription, the personal and payment details you enter at checkout are collected and processed by Paddle under Paddle's Privacy Notice. We receive only the information needed to activate and support your account (such as your email, plan, subscription status and transaction identifiers) — we never see or store full card numbers.

Compliance records are retained for as long as your account is active because they form an audit trail. After account termination, you may request an export for thirty (30) days, after which stored documents and roster records may be deleted. You can request deletion of a specific record at any time through your account administrator.

Subcontractors submit documents through a private upload link provided by the General Contractor who requested them. Submitting a document indicates consent for that General Contractor and for Compliance Desk to store and review the submitted insurance and tax information for compliance verification purposes.

Depending on where you live, you may have the right to access your personal data, correct inaccurate data, request erasure, restrict or object to processing, receive your data in a portable format, withdraw consent, and lodge a complaint with your local data protection or privacy authority. To exercise any of these rights, submit a data rights request or contact your account administrator. We respond to verified requests within one month.

Where data is transferred outside the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

We use essential cookies and local storage to keep you signed in and to secure your session — these cannot be turned off without breaking the service. We use analytics cookies to understand how the site is used; you can control or clear these through your browser settings. We do not use advertising or cross-site tracking cookies.

This page describes current practices and is app-owner maintained content. It is not an independent audit, certification, or guarantee of any regulatory framework.