RapidPlan Live

RapidPlan Live is published and operated by Invarion, LLC ("Invarion", "we", "us", "our"), a company registered in the United States, with its principal place of business at 2057A Green Bay Rd, Unit A109, Highland Park, IL 60035, USA.

Invarion publishes the app, operates the hosting for the service, sets the platform security and record-retention rules, and employs and directs the privacy and support team. Contact details are in Section 12.

Our role, and your employer's role

Access to RapidPlan Live is provided to you through your employer or the organisation you work for, which administers your account and decides what worksites, plans and inspection forms you see.

For most of the information recorded in the app — inspections, evidence, worksite activity — your organisation is the data controller and Invarion acts as a processor, handling that data on their documented instructions under our customer agreement. Where we decide how and why data is processed — operating and securing the app, managing accounts, diagnostics and product improvement — Invarion is the controller.

Separately, Invarion acts as an independent controller for the limited purpose of preserving records. Inspection records are relied on as evidence of what was found on site and when, so we retain them in a tamper-evident form rather than allowing them to be quietly altered or removed. Section 8 explains what this means in practice.

There is no background location tracking. Videos recorded inside the app are captured without audio, and the app does not request microphone access. A video you attach from your own device may contain audio that was already in it.

The app asks for the following permissions. You can change them at any time in your device settings; the related features will not work without them.

• Location (while in use) — to show the distance to each worksite, order sites nearest-first, show your position against the plan, and add location metadata to photos and videos you capture. Location is not collected when the app is closed or in the background.
• Camera — to capture photos and video as inspection evidence.
• Photos and media — only if you choose to attach an existing photo or video from your device.

• Your employer or organisation. Administrators at your organisation can see the inspections you complete, the evidence you capture and the activity logged against your account. This is the purpose of the service.
• Microsoft Azure. All data held for the app, including inspection records and captured media, is stored on Microsoft Azure servers located in the United States (Washington State). Account authentication is handled by the Microsoft identity platform (Azure AD B2C).
• Mapping providers. The app displays maps and aerial imagery from third parties. When your location is shown on a map, your location, IP address and map requests are sent to that provider to render your position. Base maps are provided by Apple Maps (Apple Inc.) on iOS and Google Maps Platform (Google LLC) on Android; aerial and satellite imagery is provided by Google Maps Platform. Each provider handles this data under its own privacy terms.
• Apple and Google. Where crash and diagnostic reporting is delivered through the app platforms, that data may be processed by Apple and Google under their own privacy terms.
• Advisers and authorities. We may disclose data to our insurers and professional advisers, or where necessary to comply with the law, protect someone's vital interests, or establish, exercise or defend legal claims.

We do not sell your personal information. The app serves no advertising, uses no advertising identifiers, and does not track you across other companies’ apps or websites. RapidPlan Live does not use cookies.

We require the third parties who process data on our behalf to protect it to a standard at least equal to that set out in this policy.

The app keeps some information on your own device so it works on site without a connection:

• A draft inspection is stored on your device until you save it.
• Captured photos and video pass through an upload queue on the device until they reach our servers.
• Your sign-in session, cached worksite, plan and form data, and your app settings.

This information is cleared when you sign out or uninstall the app. Removing media "from device" clears the local copy only — it does not delete a copy already saved to the service.

Our hosting is in the United States, so data you enter into the app is transferred to and stored in the United States regardless of where you are located. Where personal data is transferred out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards, including adequacy decisions by the competent authorities and/or the standard contractual clauses they have adopted.

We keep personal data only for as long as we need it for the purposes described in this policy. It is useful to think about the data in two groups.

Your account and personal data

Your account details, communications with our support team, and inspection forms that have never been used can be deleted in the ordinary way. Unless a longer period is required by law or by your organisation’s agreement with us, we delete or anonymise this data within 12 months of your account being closed.

Because your account is created and administered by your employer, requests to close or delete an account are normally made through your organisation’s administrator. You can also contact us directly using the details in Section 12 and we will action or route your request.

Your organisation's operational records

Once created, worksites and inspections form part of a reliable operational history that our customers and their clients rely on — this applies whether or not a worksite has yet been inspected, and whether or not an inspection has been completed. These records, together with the evidence captured in them and any form used in at least one inspection, belong to your organisation and are retained under its agreement with us rather than deleted on individual request.

Where such a record should no longer be relied upon, it is marked as invalid, with a stated reason, so the history stays intact and auditable. If you want these records — or personal data within them — removed, your organisation is the right party to ask; we act on their instructions as their processor, and can redact personal data from a retained record where the record itself must be kept.

We may in any case retain data where we are required to do so by law.

Depending on where you live, you may have the right to ask us to give you a copy of your personal data, correct it, delete it, restrict or object to how we use it, transfer it to another organisation, or withdraw consent where our processing relies on consent. You also have the right to complain to your data protection regulator.

Because much of the data in the app is held on behalf of your organisation, we may need to refer your request to them as the controller, and we will assist them in responding. To make a request, use the contact details in Section 12.

If you are in the EEA or the UK

The rights above arise under the EU and UK General Data Protection Regulation. You can complain to your national supervisory authority, or to the UK Information Commissioner’s Office.

If you are in Australia

We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth). If you are not satisfied with how we have handled a privacy matter, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

If you are in California or another US state with a privacy law

You may have the right to know what personal information we collect, to request its deletion or correction, and not to be discriminated against for exercising those rights. We do not sell or share personal information for cross-context behavioural advertising.

We maintain technical and organisational measures appropriate to the sensitivity of the data, including encryption of data in transit and at rest, role-based access controls, and restricted administrative access on a need-to-know basis. No system can be guaranteed completely secure, but if a breach affects your personal data we will notify the relevant parties and regulators as the law requires.

RapidPlan Live is intended for use by adults in a workplace context. It is not directed to children and we do not knowingly collect personal data from children.

For any privacy question, request or complaint about RapidPlan Live:

• Email — support@invarion.com
• Post — Invarion, LLC, 2057A Green Bay Rd, Unit A109, Highland Park, IL 60035, USA

We may update this policy from time to time by publishing a new version at this page. Where a change is significant, we will tell you in the app or by email before it takes effect. The effective date at the top of this policy shows when it was last updated.