← Back to SIGCERT

Privacy Policy

Last updated: 3 May 2026

1. Introduction

SIGCERT ("we", "us", "our") is a the suite's worker competency register — RIW, operator competencies, first aid and inductions, sighted and verified. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application.

2. Information We Collect

We may collect the following types of information:

  • Account Information: Name, email address, company, and profile details you provide during registration.
  • Authentication Data: Login credentials and authentication tokens (including third-party OAuth via Google).
  • Project Data: Commissioning logs, test reports, shift summaries, issues, and other project-related content you create.
  • Usage Data: Browser type, access times, and pages viewed to improve our service.
  • Device Information: Device type and operating system for compatibility purposes.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the SIGCERT platform.
  • Manage user accounts and project memberships.
  • Facilitate collaboration between project team members.
  • Send administrative communications (invitations, password resets).
  • Improve and develop new features.
  • Ensure security and prevent unauthorized access.

4. Data Sharing

We do not sell your personal information. We may share data with:

  • Project Team Members: Information you contribute to a project is visible to other members of that project.
  • Sigmark: SIGCERT shares an identity layer with Sigmark, our companion signalling drawing markup application. Your profile, role, and certifications are visible across both apps.
  • Service Providers: Third-party services that help us operate the platform (hosting, authentication, email delivery).
  • Legal Requirements: When required by law, regulation, or legal process.

5. Data Storage & Security

Your data is stored securely using industry-standard encryption and security practices. We use Supabase for data storage with row-level security policies to ensure users can only access data they are authorized to view.

6. Data Retention

We retain your account data for as long as your account is active, and for a reasonable period afterwards as required by law.

Audit-trail entries are retained for the lifetime of the project's evidence requirements — typically the operational life of the signalling assets being commissioned. This means specific audit events you generated cannot be deleted on request even if your account is deleted, because they form part of the legally-required commissioning evidence chain. See Delete Your Account for details on what is removed versus what we have to keep.

7. Your Rights

You have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate information.
  • Request deletion of your personal data.
  • Withdraw consent for data processing where applicable.

8. Cookies

We use essential cookies and local storage for authentication and session management. We do not use third-party tracking or advertising cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of any material changes by posting the updated policy on this page with a revised date.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at integrations@lineside.app.