Privacy Policy

Who we are

Mantis Safety ("Mantis," "we," "us") runs a daily safety-huddle tool for construction crews. This policy covers the data we collect through mantissafety.com and the app itself, including the public, no-login huddle link your safety lead texts to your crew.

What we collect

We collect different data depending on how you use Mantis:

• Account holders — when you sign in with Google, we receive your name, email address, and profile photo from Google, plus the company name, industry, and safety-lead details you enter during setup.
• Safety lead— a name and phone number, used to text that day's huddle link via Twilio.
• Crew members who sign a huddle — when someone signs a huddle at a /huddle/[token] link, we store the name they enter, their signature image, and the time they signed. No account or login is created for crew members — the link itself is the access credential.
• Device location— when the huddle link is opened, we request the device's location in the background (no prompt beyond your browser or phone's own permission request) and, if granted, store the coordinates and accuracy on that huddle's record. This isn't shown to the crew or included in the PDF — it strengthens the audit trail and will help us route more relevant, weather-aware safety content in the future. Nothing breaks if location access is denied or unavailable.

How we use it

We use this data to:

• Send the daily huddle link to your safety lead by text
• Show your company's huddles, briefings, and sign-off history on the dashboard
• Generate and store the signed PDF record for each completed huddle

We don't sell your data, and we don't use it for advertising or tracking.

How it's stored

Data is stored in a Postgres database with row-level security, scoped so only your own company can read your company's records. Signed PDF records are stored in a private file bucket — they are never publicly listable, and every download goes through a short-lived, individually-generated link.

By design, a huddle record locks the moment it's signed: the content, the risk-checklist answers, and every signature become permanent and can't be edited by anyone, including us, through normal use of the product. This is what makes the record usable as an OSHA-style safety record rather than a form that could be altered after the fact.

Who else sees it

We use a small number of service providers to run Mantis, each acting only on our instructions:

• Google — sign-in (OAuth)
• Twilio — sending the daily huddle text
• Supabase — database, authentication, and file storage
• Vercel — application hosting

None of them are permitted to use your data for their own purposes.

How long we keep it

Completed huddle records — the briefing content, checklist answers, and signatures — are treated as permanent safety records by default, since their entire value is being a reliable record you can produce later. We don't currently offer automatic, self-serve deletion of an account or its history.

If you want to close your account or request removal of your data, contact us at taz.greenwood@gmail.com and we'll work it out with you directly — we'll always tell you plainly what can and can't be deleted given the record-keeping purpose of the product.

Your choices

You can ask us to see, correct, or delete the personal data we hold about you by emailing taz.greenwood@gmail.com. We'll respond and explain what's possible for your situation.

Children

Mantis is a business tool for construction crews and isn't directed at children. We don't knowingly collect data from anyone under 18.

Changes to this policy

If we make a material change to this policy, we'll update the date above and, for account holders, let you know by email.

Contact

Questions about this policy? Email taz.greenwood@gmail.com.