Site-Reporter

Site-Reporter Privacy Policy

Last updated: 29 October 2026.

This Privacy Policy explains how EC Master Inc. ("we", "us") collects, uses, shares, and protects information when you use Site-Reporter: the web application and the Site-Reporter app (together, the "Service"). It also explains how the Service uses Google user data when you connect Google Drive, how long data is kept, and how you can delete or revoke access.

1. Information we collect

Account information. When you register we collect your email address and a password. The password is stored on our server only as a one-way hash. We use the email to identify your account and to sign you in.

Session information. When you sign in on the web, we place an HTTP-only session cookie in your browser. When you sign in on the mobile app, it keeps a session token in your device's secure storage. Both only keep you signed in and are not used for advertising.

Inspection content. Projects, inspections, locations, groups, notes, photos, and their timestamps that you create. The mobile app saves this content in a database on your device and syncs it to our server. The Service writes it to the file storage you connect (Google Drive, or a server folder if you choose that option). We do not keep a separate photo library of those files.

Camera and photos. The mobile app uses the camera, or the photos you select from your library, only when you take or pick a field photo. We do not access other photos.

Voice. When you dictate, speech is turned into text either by your device's speech recognition service (provided by Apple or Google), or by online speech. Online speech either sends a temporary recording through our server to OpenAI for transcription, or streams audio directly from the app to OpenAI for real-time transcription. The app removes temporary recordings after successful transcription or cancellation; interrupted recordings may remain on the device until cleaned up.

Logs. The mobile app keeps sync logs and an app log on your device to help diagnose problems. They stay on the device unless you choose to share them with us.

Google user data. If you connect Google Drive and grant access on Google's consent screen, the Service receives:

  • an OpenID subject that identifies the Google account you chose;
  • a refresh token and access tokens that let the Service call the Google Drive API for that account;
  • the Google Drive folder you pick as this account's root, and the inspection files the Service creates or opens inside that folder.

We request the Google Drive file scope so the Service can create, list, read, update, and delete inspection files only in the folder you pick (and files you later open with Site-Reporter). We also request OpenID so we can tell which Google account completed consent. We do not ask for access to your whole Drive.

We do not use advertising or analytics tracking, and we do not collect your precise location or contacts.

2. How we use information

  • To create and secure your account and sign you in.
  • To store, sync, and show your inspection content in the web app and the mobile app.
  • To transcribe your dictation into notes.
  • To generate inspection reports when you ask for one. To do this, the notes and photos of that inspection are processed by an AI model.
  • To provide support, fix problems, and keep the Service secure.

We use Google user data only to provide the Google Drive file-storage feature you requested: to create and organize inspection folders in your Google Drive, upload and display site photos, read and write inspection notes, and list your projects and inspections so you can open them again.

We do not sell personal information. We do not use personal information or Google user data for advertising, to train unrelated models, or to build a product that is not Site-Reporter.

3. How we share information

We share information only with service providers that help us run the Service, and only as needed for that purpose:

  • OpenAI, to transcribe online speech and to generate reports you request.
  • Google, when you connect Google Drive as your file storage, and Apple or Google for on-device speech recognition, under their own privacy policies.
  • Stripe, to process payments for paid plans. We do not see or store your full card number.
  • Hosting providers that run our servers.

We do not share Google user data with advertising or data-broker services. Inspection files in your Google Drive follow the sharing settings you set there. Another Site-Reporter user can see a project only when that Drive share includes the Google account they connected.

We may also disclose information if the law requires it, or to protect the security of the Service.

4. Google API Services Limited Use

Site-Reporter's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

  • Google user data is used only to provide or improve user-facing Site-Reporter features.
  • Google user data is not transferred except as necessary to operate those features, to comply with the law, or if you direct us to.
  • Google user data is not used or transferred for advertising.
  • Humans at EC Master Inc. do not read your Drive files unless you give permission, it is required for security or legal reasons, or the data is already public.

5. Storage and retention

Account records, session records, and the Google Drive connection (including the refresh token) are stored on EC Master Inc. servers that run Site-Reporter. Tokens are not shown in the browser or the app.

Your account and your Google Drive connection stay until you disconnect Google Drive or your account is closed. Session cookies expire. Inspection content, including final PDF or Word reports, is saved in the file storage you choose, such as your connected Google Drive or the server-folder storage option. It stays there until you delete it or it is replaced by an updated version. Data on your device stays until you delete it in the mobile app or uninstall the app. Temporary recordings on your device are handled as described in the Voice section above. Storage of the final report is separate from AI processing records and copies held by service providers; saving a report to your chosen storage does not automatically delete those records or copies.

6. Security

We use encrypted connections, store passwords as hashes, and keep session tokens in your device's secure storage. No system is perfectly secure, so please keep your password private and tell us right away if you think your account has been misused.

7. Cookies

The web application uses a session cookie after you sign in. It is required to operate the signed-in application. We do not use third-party advertising cookies.

8. Your choices and rights

You can turn camera, photo, microphone, and speech permissions on or off in your device settings at any time. You can disconnect Google Drive in Site-Reporter, or revoke Site-Reporter in your Google Account permissions. After you revoke it, Site-Reporter can no longer call Drive for that account.

You can delete your account in the mobile app under Settings, Delete account. This deletes your account, your plan, your sessions, and your Google Drive connection, and signs you out on every device. Inspection files in your Google Drive stay there until you delete them in Drive.

You can also ask us to access, correct, export, or delete your personal information, or to close your account, by emailing info@ecmasterinc.com. We will respond within 30 days.

9. Children

Site-Reporter is for business site inspection work. It is not directed at children under 13, and we do not knowingly collect their information.

10. Changes to this policy

If we change how we collect or use data, we will update this Privacy Policy, change the date above, and publish the new version on the Site-Reporter website and in the mobile app.

11. Contact us

Questions about this Privacy Policy or your data: EC Master Inc., email info@ecmasterinc.com.