Privacy Policy

CNV Holdings Company Limited (“CNV”, “we”, “us”) operates Site Connect (formerly CNV Connect): the web workspace at hub.siteconnect.ai, the Site Connect mobile apps for iOS and Android, and this website. This policy explains what personal information we collect, why we collect it, who we share it with and the choices you have.

1. Who is responsible for your information

Site Connect is used by organizations — usually your employer — to run their teams. The organization that set up your workspace decides what goes into it and is responsible for that information; CNV processes it on the organization’s behalf to provide the service. CNV is responsible for the account and technical information we need to run the service, and for this website. If you have a question about how your organization uses your information, ask them first — we will help them answer.

2. Information we collect

• Account information — name, email address, phone number, job title, employee ID, profile photo, sign-in details (passwords are stored hashed; identifiers from Google or Apple sign-in), session tokens and device tokens.
• Workspace content — what you and your colleagues enter: attendance records including clock-in and check-in location and photos, projects, schedules, forms and checklists, tasks, approvals, chat messages, voice notes and files, HR records such as contracts and leave, and assets.
• Device and technical information — device model, operating system, app version, IP address, the device identifier used for push notifications, access logs and crash reports.

We do not collect your contacts, SMS, health or biometric data, or advertising identifiers, and we do not track you across other companies’ apps or websites.

3. Device permissions in the mobile apps

The apps ask for a permission only when you use the feature that needs it. You can revoke any of them in your device settings.

• Location — at clock-in, clock-out and site check-in, to confirm you are at the work site. We store the position, the accuracy your phone reported and the site it matched. This is attendance evidence, not continuous tracking: nothing is recorded between punches.
• Camera and photos — attendance photos, attaching photos and documents, scanning QR codes.
• Microphone — voice notes and in-app calls.
• Notifications — delivered through Google Firebase Cloud Messaging and the Apple Push Notification service.

4. How we use information

To provide and operate the service: sign you in, keep your devices in sync, deliver the notifications you have turned on, answer support requests, keep the service secure and prevent fraud, understand usage through aggregated statistics that do not identify you, and meet legal obligations. We do not sell personal information, we do not use it for advertising, and we do not use workspace content to train public AI models.

Some optional features use artificial intelligence — for example, transcribing a voice note. When you use such a feature, the content involved is sent to the AI provider configured for your workspace only to produce that result.

5. Who we share information with

• Your organization — according to the roles and permissions it sets in the workspace.
• Service providers who run parts of the service for us under contract — hosting, push notifications (Google, Apple), email delivery, and AI providers when an AI feature is used.
• Integrations your organization connects — for example Google — only after an administrator authorizes them.
• Authorities — when the law requires it.

We do not sell, rent or trade personal information.

6. Where information is stored

Workspace data is hosted on servers operated by CNV, currently located in Vietnam, unless a different region has been agreed in writing for your workspace. If you use Site Connect from Canada or another country, your information is therefore processed outside your country and may be accessible to authorities there under local law. We protect it with the safeguards described in section 8 wherever it is processed.

7. Retention and deletion

Workspace data is kept while your organization’s subscription is active. When it ends, we keep the data for up to 90 days so the organization can export it, then delete it. When an organization disables your account, your access ends; the records you created belong to the organization.

You can ask us to delete your account and personal information by raising a ticket inside the app or by writing to contact@siteconnect.ai. We act on requests within 30 days, coordinating with your organization for records it is required to keep.

8. Security

Encryption in transit (TLS 1.2 or later), hashed passwords, workspace isolation on every request, role-based permissions, an audit trail on attendance and approvals, encrypted backups and continuous monitoring. If a breach affects your information, we will notify you and the relevant authorities as the law requires.

9. Your rights

Depending on where you live, you can ask to access the personal information we hold about you, correct it, delete it, withdraw your consent, restrict or object to its use, or receive a copy. Write to contact@siteconnect.ai; we reply within 30 days. If you are in Canada and are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.

10. Children

Site Connect is not intended for anyone under 16, and we do not knowingly collect their information. If we learn that we have, we delete it.

11. Changes to this policy

We may update this policy. The current version is always on this page with its effective date. For material changes we give at least 7 days’ notice in the app or by email.

12. Contact

CNV Holdings Company Limited — contact@siteconnect.ai · Terms of Service