Privacy Policy
Last updated: 27 August 2026
1. Data Controller
The data controller is ProjectOffice L.L.C. This policy covers the ProjectOffice web platform, the training platform, and our applications: ProjectOffice for iPhone and iPad, ProjectOffice TV for Apple TV, and SnapPoint.
For any privacy request, including access, correction or deletion, contact support@projectoffice.com. We respond within 2 business days. Training-specific queries can also go to courses@projectoffice.com.
2. Data We Collect
2.1 Account Information
When you create an account, we collect:
- Name: to personalize your experience and appear on certificates.
- Email address: for account access, notifications, and communications.
- Password: stored securely using one-way hashing (bcrypt). We never store or see your plain-text password.
2.2 Learning Data
We track your course progress, quiz results, exam attempts, and completion status to provide the learning platform functionality and issue certificates.
2.3 Payment Data
Payment processing for purchases made on our website is handled by Stripe (a PCI-DSS compliant payment provider). Purchases made inside our apps are handled by Apple. We store:
- Payment reference number from the processor
- Transaction amount and currency
- Payment status and date
We do not store credit card numbers, bank account details, or other sensitive payment information. Website payments are processed exclusively by Stripe under their privacy policy, and in-app purchases by Apple under theirs.
2.4 Technical Data
We collect standard technical data necessary for Platform operation:
- Session data (essential cookies)
- CSRF tokens (security)
- Server logs (IP address, browser type, access times)
2.5 Application Account Data
When you use ProjectOffice for iPhone and iPad, we hold the account details needed to identify you: your name and email address, and which workspace or plan you belong to.
Enterprise accounts are created and administered by your own organisation, which remains the controller of that workspace and its records. Personal accounts are created by you in the app.
2.6 Project Content and Photos
The apps store the project content you create, which may include projects and plans, RAID entries, snags, approvals, chat messages, HSE incident records, and photographs you capture, including annotated images, before and after pairs, and 360 degree panoramas.
Photographs may carry location metadata if you have allowed location access on your device. Where you generate a public sharing link for a photo, anyone holding that link can view that item until the link is revoked, so treat those links as confidential.
Content captured while offline is held on your device and queued until it can sync.
SnapPoint stores its snags and photos only on your device. They are not uploaded to us and we hold no copy of them.
2.7 Sign in with Apple
Personal accounts in the iPhone and iPad app are created using Sign in with Apple. Apple confirms your identity to us and provides your name and an email address. If you choose Apple's Hide My Email option, we receive a private relay address rather than your real one, and that is all we store. We never receive your Apple Account password.
2.8 Subscriptions
Personal subscriptions (Solo, Team and Business) and the SnapPoint Pro unlock are sold through the Apple App Store. Apple processes the payment, and we never see or store your card details. We receive confirmation of entitlement so we know which features to enable on your account.
Manage or cancel a subscription in your Apple Account settings. Refunds are handled by Apple.
2.9 No Advertising or Tracking
Our applications contain no advertising, no third-party analytics or tracking SDKs, and we do not track you across other companies' apps or websites. We do not sell or share personal data with data brokers, and we do not build advertising profiles.
3. How We Use Your Data
| Purpose | Legal Basis (GDPR) |
|---|---|
| Provide access to courses and exams | Performance of contract |
| Process payments | Performance of contract |
| Issue and verify certificates | Performance of contract |
| Send enrollment reminders and service emails | Legitimate interest |
| Maintain platform security | Legitimate interest |
| Comply with legal obligations | Legal obligation |
4. Cookies
We use only essential cookies required for the Platform to function:
| Cookie | Purpose | Duration |
|---|---|---|
| Session cookie | Authentication and CSRF protection | Session / 2 hours |
| Remember token | "Remember me" login functionality | 30 days |
| Cookie consent | Records your cookie preference | 1 year (localStorage) |
We do not use advertising cookies.
If you click "Accept" in our cookie banner, we load Google Analytics (GA4) to understand how visitors find and use our site. Google Analytics sets cookies (e.g. _ga, _ga_*) that expire after 2 years. If you choose "Essential Only", no analytics cookies are set and no data is sent to Google. You can change your preference at any time by clearing your browser's localStorage and refreshing the page.
5. Data Sharing
We do not sell your personal data. We share data only with:
- Stripe, Inc.: payment processing for purchases made on our website (PCI-DSS compliant). We do not store card details.
- Apple Inc.: processes App Store purchases and subscriptions, and operates Sign in with Apple.
- Google LLC: analytics data processing (only when you have accepted analytics cookies). Data may be transferred to the US under Google's Standard Contractual Clauses.
- Certificate verification: your name and certificate details are publicly verifiable via the certificate verification page when someone enters your certificate number.
6. Data Retention
- Account data: retained while your account is active, deleted within 30 days of account deletion.
- Certificates: retained indefinitely (certificates are permanent credentials).
- Payment records: retained for 7 years (tax/accounting obligations).
- Server logs: retained for 90 days.
7. Your Rights (GDPR)
Under the General Data Protection Regulation (GDPR), you have the right to:
- Access: request a copy of your personal data.
- Rectification: correct inaccurate data (via your Profile page or by contacting us).
- Erasure: request deletion of your account and data ("right to be forgotten").
- Restriction: request that we limit processing of your data.
- Portability: receive your data in a structured, machine-readable format.
- Object: object to processing based on legitimate interest.
To exercise any of these rights, email support@projectoffice.com. We acknowledge within 2 business days and respond fully within 30 days.
7.1 Deleting Your Account and Data
You can delete your account yourself. In ProjectOffice for iPhone and iPad, open Settings, choose Account, then Delete account, and confirm. Deletion is permanent.
If you cannot sign in, email support@projectoffice.com from the address on the account and we will delete it for you after verifying your identity.
Deleting your account removes your profile and the personal project content held for it. Deleting an account does not cancel an App Store subscription, which you cancel separately in your Apple Account settings.
For enterprise workspace accounts, your organisation controls the account and its business records. Ask its administrator to remove your access, and we will help you reach the right person.
SnapPoint holds no account. Its data is on your device only, so deleting a snag or removing the app deletes it. We have no copy to erase.
Full instructions are on our app support pages.
8. Data Security
We implement appropriate technical and organizational measures to protect your data:
- Passwords hashed with bcrypt
- CSRF protection on all forms
- HTTPS encryption in transit
- Database access restricted to application only
9. International Transfers
Your data is processed and stored in the European Union. We do not transfer personal data outside the EU/EEA.
10. Children
The Platform is not intended for users under 18 years of age. We do not knowingly collect data from minors.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email. The "last updated" date at the top indicates when the policy was last revised.
12. Contact & Complaints
For privacy inquiries: courses@projectoffice.com
If you believe your data protection rights have been violated, you have the right to lodge a complaint with your national data protection authority.