Effective Date: May 23, 2026 · Last Updated: May 23, 2026
This Privacy Policy ("Policy") describes how OnSite ("OnSite," "we," "us," or "our") collects, uses, discloses, and safeguards information when you access or use our software platform, websites, mobile applications, APIs, and related services (collectively, the "Services"). This Policy applies to individual users, organizational customers, and visitors to our websites and is incorporated by reference into our Terms of Service. By using the Services, you acknowledge the practices described in this Policy.
Information you and your authorized users create in the Services — including site assessments, trip plans, motorcade routes, alerts, attachments, photographs, geolocation data, and messages ("Operational Data"). As between you and OnSite, Operational Data belongs to your organization. OnSite's handling of Operational Data is further constrained by Section 4 below.
We may receive information from single sign-on or identity providers you use to authenticate, from integrations you authorize, and from publicly available sources for fraud and abuse prevention.
We use information to provide, maintain, secure, and improve the Services; authenticate users and enforce access controls; detect, investigate, and prevent fraud, abuse, and security incidents; deliver customer support; communicate operational notices, security alerts, and service updates; bill for paid Services and manage subscriptions; comply with applicable legal obligations and enforceable governmental requests; and, with your consent, send marketing communications you may opt out of at any time.
We do not sell personal information. We do not use Operational Data to train artificial-intelligence or machine-learning models except to deliver a feature you have explicitly enabled for your own organization.
OnSite operates on a blind storage architecture with strict internal access controls. OnSite personnel — including employees, contractors, and officers — do not have access to the contents of your Operational Data in the ordinary course of business. Operational Data is encrypted at rest, segregated by customer tenant, and protected by access controls such that OnSite personnel cannot read its contents.
Limited access by a small number of authorized OnSite personnel may occur only:
Every such access is logged, time-limited, role-restricted, and subject to internal review. We do not maintain backdoors and we do not provide unfettered or bulk access to Operational Data.
We maintain administrative, technical, and physical safeguards designed to protect personal information, including:
No method of transmission or storage is one-hundred-percent secure. In the event of a confirmed personal-data breach, we will notify affected users and applicable regulators in accordance with applicable law.
OnSite is committed to protecting customer information from improper disclosure. We disclose customer information in response to government or law-enforcement requests only when each of the following conditions is met:
We do not provide governments with direct, unfettered, or bulk access to customer data, encryption keys, or our production systems, and we do not maintain backdoors. Emergency requests are evaluated under a documented internal procedure that requires a good-faith belief, supported by credible evidence, of an imminent risk of death or serious physical harm. We will publish a transparency report describing the volume and types of government requests we receive.
We share information only as described in this Policy:
We are based in the United States and store data in U.S. regions by default. Where we transfer personal data from outside the United States, we rely on lawful transfer mechanisms (such as the EU Standard Contractual Clauses, UK International Data Transfer Addendum, and applicable supplementary measures) and implement appropriate safeguards consistent with the destination jurisdiction's legal requirements.
We retain personal information for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Operational Data is retained according to the retention configuration of your organization's tenant. Following termination or a verified deletion request, we delete or anonymize data within a commercially reasonable period, subject to mandatory retention requirements and routine backup-rotation schedules.
Depending on your jurisdiction, you may have the right to:
Enterprise customers control their tenant directly via administrator tools. Individual users should first contact their organization's administrator; you may also contact us at the address in Section 14. We do not use personal information for automated decision-making that produces legal or similarly significant effects without a human in the loop.
California residents may exercise the rights set out in Section 10 and additionally have the right to opt out of any "sharing" of personal information for cross-context behavioral advertising. We do not "sell" personal information as defined under the CCPA/CPRA. To exercise California rights, email privacy@consultingonsite.com. We will not discriminate against you for exercising any right under California law.
The Services are intended for professional use and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact privacy@consultingonsite.com and we will take appropriate steps to delete it.
We may update this Policy from time to time. Material changes will be communicated by reasonable means — such as in-product notice, email to account administrators, or a prominent posting on our website — before they take effect. The "Last Updated" date at the top of this Policy indicates when it was most recently revised.
OnSite
Email: privacy@consultingonsite.com