1. Introduction

CementOps AI LLC (“we,” “us,” or “our”) operates MSHA Intelligence at mshaintel.com. This Privacy Policy describes how we collect, use, and protect your information when you use our Service.

2. Information We Collect

Account Information

When you create an account, we collect your email address and, if applicable, your organization name. We use Supabase for authentication and do not store passwords directly.

In deployed environments, authentication sessions are stored in Secure, HttpOnly, SameSite cookies. Session credentials are not exposed to browser JavaScript, and refresh rotation is handled by MSHAIntel’s server. Legacy MSHAIntel browser authentication values are removed when the current application loads.

Usage Data

We track query counts and feature usage to enforce rate limits and improve the Service. We use Vercel Analytics for aggregate visitor metrics. We do not sell usage data to third parties.

For Photo Review, we may retain content-free operational records such as the account identifier, request time, selected mode, model identifier, token usage, latency, source-type counts, error code, and allowance consumption. These records do not include the uploaded photo, entered context, or generated findings.

Payment Information

Payment processing is handled by Stripe. We do not store credit card numbers or bank account details on our servers. Stripe’s privacy policy governs payment data handling.

Query Content

Questions you submit to the MSHA Intelligence agent are processed by our AI provider (Anthropic) to generate responses, as described in the Data Sharing section below. We may retain anonymized query patterns to improve response quality. We do not sell your queries, and we do not share them with third parties for marketing purposes.

Photo Review Content

When you use MSHAIntel Photo Review, your browser creates a resized, re-encoded JPEG analysis copy intended to remove embedded EXIF and location metadata. That copy, your optional Mine ID, and any context you enter are transmitted through MSHAIntel’s servers to Anthropic for AI processing. MSHAIntel processes that content transiently and does not save the photo, context, or generated Photo Review result to its application database after the request completes. Your original remains on your device. Inspector / Citation Review does not create an evidence vault, immutable original, official workplace-examination record, or chain-of-custody record.

MSHAIntel’s non-persistence statement does not describe Anthropic’s independent processing or retention. Anthropic handles API content under CementOps AI’s commercial account settings, contract, and Anthropic’s applicable retention terms. We do not use Photo Review content to train or improve CementOps AI models unless you give separate, affirmative, case-specific permission.

Error Reports

When you use the “Report incorrect answer” control, we store the reported question, an excerpt of the answer you flagged, and your IP address so we can investigate and improve accuracy. These reports are used only for quality and safety review of the Service and are not sold or shared for marketing.

3. How We Use Your Information

To provide, maintain, and improve the Service
To process payments and manage subscriptions
To enforce rate limits and prevent abuse
To send transactional emails (account verification, password reset, subscription updates)
To respond to support inquiries

4. Data Sharing

We share information only with:

Supabase — authentication and database hosting
Stripe — payment processing
Vercel — application hosting and analytics
Anthropic — AI model inference (query and Photo Review content is sent for processing)

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Data Retention

Account data is retained while your account is active. Usage tracking data is retained for up to 12 months for analytics and rate limiting purposes. You may request deletion of your account and associated data by contacting us. MSHAIntel does not retain Photo Review analysis copies, entered context, or generated findings in its application database after the request completes. This does not describe Anthropic’s separate processing and retention under the applicable commercial API terms.

6. Security

We implement industry-standard security measures including HTTPS encryption, secure authentication, API key hashing, and access controls. However, no method of electronic transmission or storage is 100% secure.

7. Browser Storage and Cookies

The Service uses essential Secure, HttpOnly, SameSite cookies to maintain deployed authentication sessions. These cookies are not available to browser JavaScript. We use Vercel Analytics, which does not use cookies for advertising tracking. We do not use third-party advertising cookies.

8. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and data
Export your data in a portable format

To exercise these rights, contact us at the email below.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or email. The “Last updated” date at the top indicates the most recent revision.

10. Contact

Questions about this Privacy Policy? Contact us at jlarkin@cementops.ai