1. What this covers

Bedrock Safety is a software product sold to construction companies ("Customers"). This privacy policy applies to (a) visitors to this marketing website at bedrocksafety.app, and (b) Customers evaluating or using the product.

Data created by Customer end users inside the app (toolbox talks, inspections, photos, signatures, etc.) is governed by the agreement between Bedrock Safety and that Customer, and by the Customer’s own internal privacy policy. We process that data on their behalf as a service provider.

2. Information we collect from visitors

• What you submit in the demo-request form — your name, company, email, phone, role, and free-text about your current setup.
• Basic web analytics if enabled — pages viewed, referrer, country-level location. No personal advertising profiles.

3. SMS messaging

Bedrock Safety uses SMS only to deliver one-time login codes to Customer end users (foremen, safety managers, office staff). No marketing or promotional SMS is sent from this product.

• Message frequency varies. Typical end users receive fewer than one message per day.
• Message and data rates may apply.
• Reply STOP to opt out. Reply HELP for help.
• Mobile phone numbers are not shared, sold, or rented. Our SMS provider (Twilio) transmits codes on our behalf and does not use the numbers for any other purpose.

4. How we use information

• Reply to demo requests.
• Operate the Bedrock Safety product for Customers.
• Provide customer support.
• Improve the product (aggregate, non-identifying usage patterns).
• Comply with applicable law.

We do not sell personal information. We do not share it with third parties for their own marketing.

5. Subprocessors

The Bedrock Safety product runs on the following third-party services. Each is contractually limited to processing data on our behalf:

• Supabase (Postgres database + phone auth)
• Cloudflare R2 (encrypted file storage for photos and PDFs)
• Twilio (SMS delivery)
• Render (application hosting)
• OpenAI (audio transcription for voice inspections)
• Anthropic (LLM-based structuring of inspection transcripts)
• Sentry (error monitoring)
• Expo (mobile push notifications)

6. Data retention

Customer end-user records are retained per the Customer’s plan and their own retention policy, subject to applicable OSHA and employment recordkeeping requirements. Demo-request form submissions are retained for our sales records and deleted on request to robby@bmmisrq.com.

7. Security

Data in transit is encrypted with TLS. Data at rest is encrypted via the underlying provider (Supabase Postgres, Cloudflare R2). Access is limited to authorized personnel via role-based controls and audit logging.

8. Contact

Privacy questions: robby@bmmisrq.com

Bedrock Safety
c/o Bob Miller Masonry, Inc.
Sarasota, Florida, USA