Privacy Policy

Who we are

Mantis Safety ("Mantis," "we," "us") runs a daily safety-huddle tool for construction crews. This policy covers the data we collect through mantissafety.app and the app itself, including the public, no-login huddle link we email to your crew lead, who opens it with the crew.

What we collect

We collect different data depending on how you use Mantis:

• Account holders — when you sign in with Google, we receive your name, email address, and profile photo from Google, plus the company name, trade, and crew-lead details you enter during setup.
• Crew lead— a name and email, used to send that day's huddle link, and an optional phone number used only for the dashboard "Call" button. We also keep the names of the crew members you add to your roster.
• Crew members who sign a huddle — when someone signs a huddle at a /huddle/[token] link, we store the name they enter, their signature image, and the time they signed. No account or login is created for crew members — the link itself is the access credential.
• Photos and feedback— if a checklist question is answered "No," the crew can attach a photo, which is stored privately with that huddle. If you send us feedback, we store your message, the page you sent it from, your IP address (for rate limiting), and the email address if you choose to give one.
• Device location— when the huddle link is opened, we request the device's location in the background (no prompt beyond your browser or phone's own permission request) and, if granted, store the coordinates and accuracy on that huddle's record. This isn't shown to the crew or included in the PDF — it strengthens the audit trail and will help us route more relevant, weather-aware safety content in the future. Nothing breaks if location access is denied or unavailable.
• On the device— while a huddle is open, the answers and signatures entered so far are kept in your browser's local storage on that device, so a reload or a weak signal doesn't lose them. They're cleared once the huddle is submitted.
• Email delivery— our email provider tells us whether a message was delivered or bounced, so we can warn you when your crew lead's address isn't working.

How we use it

We use this data to:

• Email the daily huddle link to your crew lead, and email alerts to the account owner
• Show your company's huddles, briefings, and sign-off history on the dashboard
• Generate and store the signed PDF record for each completed huddle

We don't sell your data, and we don't use it for advertising or tracking.

How it's stored

Data is stored in a Postgres database with row-level security, scoped so only your own company can read your company's records. Signed PDF records are stored in a private file bucket — they are never publicly listable, and every download goes through a short-lived, individually-generated link.

By design, a huddle record locks the moment it's signed: the content, the risk-checklist answers, and every signature become permanent and can't be edited by anyone, including us, through normal use of the product. This is what makes the record usable as an OSHA-style safety record rather than a form that could be altered after the fact.

Who else sees it

We use a small number of service providers to run Mantis, each acting only on our instructions:

• Google — sign-in (OAuth)
• Resend — sending huddle links and alerts by email
• Supabase — database, authentication, and file storage
• Vercel — application hosting
• Sentry — error monitoring (technical error reports; we configure it not to collect signatures, cookies, or request contents)

None of them are permitted to use your data for their own purposes.

How long we keep your data / deleting your account

Completed huddle records — the briefing content, checklist answers, photos, and signatures — are safety records, and their value is being something you can produce later.

When you delete your company in Mantis, we soft-delete it: the company is hidden, nobody can sign in to it, and it stops receiving huddles. Its huddles, signatures, and PDFs are kept, so you can still get your records even if you stop using Mantis.

We permanently delete a company's data only on request. Email support@mantissafety.app to ask for a copy of your records or for permanent deletion, and we'll handle it manually. We may ask you to confirm that you control the account before we do either.

Your choices

You can ask us to see, correct, or delete the personal data we hold about you by emailing support@mantissafety.app. We'll respond and explain what's possible for your situation.

Children

Mantis is a business tool for construction crews and isn't directed at children. We don't knowingly collect data from anyone under 18.

Changes to this policy

If we make a material change to this policy, we'll update the date above and, for account holders, let you know by email.

Contact

Questions about this policy? Email support@mantissafety.app.