How we collect, use, and protect your information.
Last updated: August 26, 2026
Draft notice: This page is a starting template prepared for One Stop Safety and has not been reviewed by an attorney. Please have qualified legal counsel review this content — and fill in the bracketed details below — before treating it as final.
One Stop Safety ("One Stop Safety," "we," "us," or "our") is a safety and compliance management platform built by Alliance Safety, LLC. This Privacy Policy explains what information we collect through our website and application (together, the "Service"), how we use it, and the choices you have.
We collect information in a few ways:
We do not currently use advertising or analytics cookies. See "Cookies" below.
We do not sell your information, or your employees' information, to third parties.
One Stop Safety is built on Caspio, a cloud database platform that maintains SOC 2 Type II certification and supports compliance with GDPR, HIPAA, FERPA, PCI DSS, and FIPS 140-2 standards. Data is encrypted both in transit and at rest, and access to your organization's data is restricted through role-based permissions, so only authorized users at your organization can see it.
Our application front end is hosted on Vercel. Together with Caspio, this infrastructure is designed to keep your data available, encrypted, and access-controlled.
We share information only with the service providers that help us run the Service — for example, our database platform (Caspio), hosting provider, and email delivery provider — and only to the extent necessary for them to perform those functions. We do not share your data for advertising or marketing purposes, and we do not sell personal information.
The Service currently uses only strictly necessary cookies — for example, to keep you signed in. We do not use advertising, tracking, or analytics cookies at this time. If that changes in the future, we will update this policy and provide appropriate notice or consent options.
We retain your organization's data for as long as your account is active, or as needed to provide the Service. If your organization closes its account, we will delete or de-identify data within [RETENTION PERIOD — e.g., 90 days], except where we are required to retain it longer for legal, safety, or recordkeeping reasons.
Depending on your location, you may have rights to access, correct, or request deletion of your personal information. Because employee data in the Service is entered and controlled by your employer or the company managing your account, requests about that data should generally go through your employer first. You can also contact us directly at [PRIVACY CONTACT EMAIL] with any request.
The Service is intended for business use by adults and is not directed to children. We do not knowingly collect personal information from children.
We may update this Privacy Policy from time to time. We will post the updated version here with a new "Last updated" date.
Questions about this Privacy Policy can be directed to [COMPANY LEGAL NAME], [ADDRESS], [PRIVACY CONTACT EMAIL].