PRIVACY POLICY

How we handle your information.

Effective October 26, 2026 · Version 2026-10-26.2

Bluebird Compliance is operated by TerraGuard Environmental, LLC.

We use account and inspection information to provide Bluebird Compliance. Authorized people in your organization can access information according to their permissions. Offline copies can remain on your device after sign-out.

1. Scope and contact

This policy describes information handled by TerraGuard Environmental, LLC ("we" or "us"), the current operator of the Bluebird Compliance product through the Bluebird Compliance website and inspection application. For questions or privacy requests, email TerraGuardEnvironmental@gmail.com.

When an organization supplies inspection or personnel information, that organization also determines how its users should collect and use it. Your employer, client, or company administrator may have additional policies or legal responsibilities. This notice does not govern independent third-party websites linked from the service.

2. Information we handle

  • Account information: email address, user identifier, authentication information handled through our authentication provider, organization membership, and assigned role.
  • Facility and inspection information: facility name and location, state and generator category, applicability facts, inspection answers and dates, inspector/report details, notes, findings, corrective actions, and photographs or evidence you provide. Records may identify employees, contractors, or other people if users include that information.
  • Communications and agreement records: support messages, requests, and records identifying which Terms version a signed-in user accepted and when.
  • Technical information: hosting and service-provider logs may contain IP addresses, request times, device/browser information, errors, and account or security events.
  • Billing information, when payments are enabled: the information needed to administer a purchase or subscription, such as contact details, payment status, and transaction or subscription identifiers. Payment details entered on a payment provider’s hosted checkout are handled by that provider under its own terms and privacy notice.

Provide only information needed for the business purpose. Do not include payment-card numbers, government identifiers, medical information, credentials, or unrelated sensitive personal information in inspection fields or photographs.

3. Why we use it

We use information to authenticate users; assign company access; provide, save, synchronize, and report on inspections; manage findings and evidence; support customers; administer agreed billing; protect against misuse and unauthorized access; investigate errors; maintain agreement records; and comply with applicable legal obligations.

We do not use customer inspection content to build advertising audiences. This version of the application does not include third-party advertising trackers. If we introduce materially different uses, we will update this notice and obtain consent where required.

4. Who may receive it

  • Authorized organization users: information is available according to company membership, role, and the applicable record’s access rules. Reports you export or share may be accessible outside the application’s controls.
  • Service providers: Supabase provides backend authentication, database, and photo storage; Netlify hosts the current website/app. If Stripe is used for your purchase, it processes payments and related transaction information. These providers process information needed to supply their services.
  • Support and business operations: people or advisers authorized to support the service may access information when reasonably necessary, subject to applicable confidentiality and legal obligations.
  • Legal and safety purposes: we may disclose information when legally required or reasonably necessary to protect rights, investigate misuse, or respond to a security incident.
  • Business changes or your direction: information may be transferred in a merger, acquisition, or asset transfer subject to applicable law and appropriate notice, or shared when you or an authorized organization representative directs us to do so.

The production backend is currently hosted in a United States region. Providers may process support, hosting, or operational information in other locations. We do not promise a particular international residency arrangement unless separately agreed.

5. Browser storage and offline work

The application uses browser storage to keep working drafts, photographs, settings, and limited session information, and caches application files to support offline use. This storage is associated with the browser/device and can persist after sign-out. A device copy is not the same as a verified cloud backup.

Use a protected device and individual account. Before clearing browser data or changing devices, confirm that needed work has synchronized or been exported. Clearing storage may permanently remove unsynchronized work. We do not promise application-level encryption of offline copies or remote erasure of a lost device.

6. Security and retention

We use technical and organizational measures appropriate to operating the service, including authenticated access, backend organization-access rules, and private photo storage. No service or transmission can be guaranteed completely secure. We do not claim that Bluebird Compliance has an independent security certification, universal regulatory certification, or guaranteed backup/recovery time.

We retain information as reasonably needed to provide the service, maintain inspection and agreement records, meet contractual or legal requirements, resolve disputes, and protect security. The appropriate period depends on the record and circumstances. Original submitted records, audit history, organizational retention requirements, or a legal hold may affect whether a deletion request can be fulfilled. We will explain applicable limits when responding to a request. Provider logs and copies on devices may follow different retention processes.

7. Access, corrections, exports, and deletion requests

Contact your company administrator about organization-controlled inspection information. You may also email us to request access, correction, an available export, account closure, or deletion. We may need to verify identity and authority and coordinate with the organization responsible for a record. We respond according to applicable law; requests do not automatically alter official inspection records or erase copies held by your organization, report recipients, or your devices.

If local privacy law gives you additional rights, describe the request and your location so we can assess it. This policy does not limit rights available under applicable law.

8. Children, updates, and questions

The service is intended for business users aged 18 or older and is not directed to children. Contact us if you believe a child has provided personal information through the service.

We may update this policy as practices change. The effective date and version identify the applicable notice; material changes will be communicated through the service or another reasonable method. Acknowledging this notice is not blanket consent to unrelated processing or marketing.

Contact: TerraGuardEnvironmental@gmail.com
Bluebird Compliance

You can print or save this page. View this version’s fixed reference page.