Vitre Privacy Policy
This Privacy Policy explains how H.B. Innovation Ltd., trading as Vitre ("Vitre", "we", "us"), collects, uses, and protects personal information when you use the Vitre platform — our web application, mobile application, and related services (together, the "Platform").
Vitre provides safety, quality, and compliance management software to businesses in construction, industrial, and related sectors. Our customers are organizations; the people who use the Platform ("Users") are their employees, contractors, and subcontractors.
1. Who is responsible for your data
| Data controller | H.B. Innovation Ltd. (Vitre) |
|---|---|
| Contact for privacy requests | support@vitre.io |
| Website | https://vitre.io |
Where Vitre processes data on behalf of a customer organization, that organization is the controller and Vitre acts as processor under its instructions and our customer agreement.
2. Information we collect
| Category | Examples | Source |
|---|---|---|
| Identity and contact information | Name, username, email address, mobile phone number, preferred language | Provided by you, or by your employer's administrator when your account is created |
| Employment and organizational information | Employer, company, site or project assignment, role, job title, group membership | Your employer's administrator |
| Safety, quality, and compliance records | Assigned tasks and requirements, training and certification records, inspection and audit results, incident and appointment records, acknowledgment signatures | Created through your use of the Platform |
| Authentication data | Password hashes, one-time passcodes, two-factor authentication settings, session records | Generated by the Platform |
| Content you submit | Photographs, documents, and files you upload; comments and form responses | Provided by you |
| Device permissions (mobile app only) | Camera, approximate location (continuous), precise location (non-continuous), device storage | Your device, only after you grant permission |
| Technical and usage data | IP address, device and browser type, system logs, timestamps, feature usage | Collected automatically |
2.1 Device permissions on the mobile application
Depending on your device, the Vitre mobile application may request the permissions below. Each permission must be granted by you before the related information can be accessed, and can be revoked at any time in your device settings. Revoking a permission may limit Platform functionality.
- Camera — to capture photographs and video for inspections, incident reports, and evidence attached to safety records.
- Approximate location (continuous) and precise location (non-continuous) — to associate records with the site or project where work is performed and to provide location-based features. Precise location is not collected continuously, so we cannot derive your position on an ongoing basis.
- Storage — to read and add files you attach to Platform records.
3. How we use your information
- To create and administer your account and authenticate you, including sending one-time passcodes and two-factor authentication codes.
- To deliver the Platform's core functionality: assigning, tracking, and evidencing safety, quality, and compliance work.
- To notify you about matters concerning your account and your assigned work — by email, in-app notification, push notification, and SMS.
- To provide customer support and respond to your requests.
- To maintain security, prevent misuse, diagnose faults, and keep audit records.
- To comply with legal obligations and to establish or defend legal claims.
4. SMS and text messaging
We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes.
No mobile information is shared with third parties or affiliates for marketing or promotional purposes. Sharing with subcontractors who provide support services on our behalf, such as message delivery providers, is permitted solely to deliver the messages you have consented to receive. All other use case categories exclude text messaging originator opt-in data and consent; this information is not shared with, or sold to, any third parties.
4.1 What messages we send
Vitre's text messaging program is strictly transactional. We send only:
- One-time passcodes and two-factor authentication codes needed to sign in to the Platform;
- Account service messages, such as account creation and password reset;
- Notifications and reminders about safety tasks, appointments, and compliance requirements assigned to you.
We do not send marketing or promotional text messages.
4.2 How you consent
You consent to receive these messages when your mobile phone number is provided during account onboarding — by you, or by your employer's administrator with your knowledge — and you accept our Terms of Service on first sign-in. Consent to receive text messages is not a condition of any purchase.
4.3 Frequency and cost
Message frequency varies according to your account activity and the notifications assigned to you. Message and data rates may apply.
4.4 How to opt out or get help
Reply STOP to any message to opt out. You will receive one confirmation message and no further messages. Reply START to resume. Reply HELP to any message, or email support@vitre.io, for assistance. You can also disable non-essential SMS notifications in your account settings.
Opting out may prevent SMS-based sign-in verification; where available, an alternative verification method such as email will be offered.
Wireless carriers are not liable for delayed or undelivered messages.
5. When we share information
We do not sell personal information. We share it only as follows:
| Recipient | Purpose |
|---|---|
| Your employer organization (our customer) | Administrators of your organization can access records relating to your assigned safety and compliance work, as the Platform is designed to provide. |
| Service providers acting on our instructions | Cloud hosting and storage, message and email delivery (including SMS and email delivery providers), error monitoring, and analytics. They may process personal information only to provide services to us and are bound by confidentiality and data protection obligations. |
| Professional advisers and authorities | Where required by law, court order, or regulatory request, or to establish or defend legal claims. |
| Acquirers | In connection with a merger, acquisition, or sale of assets, subject to this Policy. |
We do not disclose personal information to third parties or affiliates for their own marketing or promotional purposes.
6. Security
We apply appropriate technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, and destruction, including encryption in transit, access controls, and audit logging. Processing is carried out using computers and IT systems following procedures tied to the purposes described above.
7. Retention
We keep personal information for as long as needed to provide the Platform and for the purposes described in this Policy, and thereafter as required to meet legal, regulatory, and record-keeping obligations — safety and compliance records often carry statutory retention periods. You may ask us to suspend or delete your data as described below, subject to those obligations and to your employer's instructions.
8. Where data is processed
Personal information is processed at our operating offices and at the facilities of our hosting and service providers, which may be located outside your country of residence. Where data is transferred internationally, we rely on appropriate safeguards for that transfer.
9. Your rights
Subject to applicable law, you may at any time ask us to confirm whether we hold personal information about you, to provide access to it and its origin, and to correct, complete, update, anonymize, delete, or restrict it. You may also object to processing on legitimate grounds and, where applicable, request portability or withdraw consent.
Send requests to support@vitre.io. If your account was created by an employer organization, we may refer your request to that organization as the controller of those records.
Because personal information may be provided to us by your employer, Users are responsible for third-party personal information they submit through the Platform and confirm they have the necessary consent to provide it.
10. Cookies and tracking
Cookies and similar technologies are used to deliver the service you request, keep you signed in, and understand Platform usage. The Platform does not respond to "Do Not Track" browser signals. To learn whether third-party services we use honor such signals, please review their privacy policies.
11. Children
The Platform is intended for use by adults in a workplace context and is not directed to children.
12. Changes to this Policy
We may update this Policy from time to time and will post the revised version on this page with a new effective date. If you object to a change, you must stop using the Platform and may request that we delete your personal information. Unless stated otherwise, the then-current Policy applies to all personal information we hold.
13. Contact
H.B. Innovation Ltd. (Vitre) — support@vitre.io
Related document: Terms of Service