Privacy Policy
Last updated 2 September 2026.
Tailboard is operated as a sole proprietorship registered in Washington State, United States. This policy explains what the service collects, why, and what happens to it. It is written to be read, not to be impressive.
Two kinds of people
Tailboard has account holders and signers, and they are treated differently.
Account holders are the people who sign in: owners, office staff, foremen. They chose to use Tailboard.
Signers are crew members who open a link and sign a safety meeting. They have no account and usually didn't choose Tailboard — their employer did. Their data belongs to their employer, and we hold it on that employer's behalf.
What we collect
From account holders
- Name and email address
- A password, stored only as a salted PBKDF2 hash. We cannot read it.
- Company name
- Which meetings you created and when you last signed in
From signers
- The name they type
- The signature they draw, stored as an image
- The date and time they signed
- Approximate location, only if their employer has switched that on. It is off by default. When on, the signing page says so before anyone signs, and the phone asks permission. Declining still lets them sign.
Payment information
Card details are handled entirely by Stripe and never reach our servers. We store a Stripe customer reference, your subscription status, and your plan.
Website analytics
We use Cloudflare Web Analytics, which does not use cookies and does not fingerprint or track individuals across sites. It tells us how many people visited a page, not who they were.
Cookies
Tailboard sets two cookies, both strictly necessary for the service to work. Neither is used for advertising, profiling, or tracking you across other websites, and we set no third-party cookies.
| tb_session | Keeps you signed in. Set when you log in, expires after 30 days or when you sign out. |
| tb_device | A random identifier used only for meetings locked to a single device, so the app can tell which phone claimed the meeting. It identifies a browser, not a person, and contains no personal data. Expires after 90 days. |
Why we hold it
To run the service you asked for: showing safety talks, collecting signatures, and producing an attendance record. We also use your email address to send account emails such as invitations, password resets, and notice that your password changed.
We do not sell personal information, and we do not share it with advertisers. We have no advertising business.
Who we share it with
Only the suppliers needed to operate the service:
- Cloudflare — hosting, database, and analytics
- Stripe — payments and subscription management
- Resend — sending account emails
We will disclose information if legally required to do so, and will tell you unless we are prohibited from doing so.
How long we keep it
Safety records are kept for as long as the account exists, because that is their purpose — an attendance record you cannot produce two years later is worthless. Export your records as PDF at any time.
If you close your account, tell us and we will delete your company's data. We do not promise indefinite storage after cancellation, so keep your own copies.
Employers: your responsibility
If you turn on location recording, you are collecting location data about your employees. Tell them before you switch it on. Depending on where you operate, you may have legal obligations around notice or consent. That is your obligation as their employer, not ours.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Email support@tailboardsafety.com and we will respond within 30 days.
If you are a crew member whose signature is in Tailboard, contact your employer first — the record is theirs. If they cannot help, write to us.
Security
Passwords are hashed, never stored in readable form. Session tokens are stored only as hashes. All traffic is encrypted in transit. No system is perfectly secure, and we will tell affected users promptly if we discover a breach involving personal data.
Children
Tailboard is a workplace tool and is not directed at children under 13. We do not knowingly collect their information.
Changes
If we change this policy materially, we will update the date above and email account holders. Continuing to use the service after a change means you accept it.
Contact
Tailboard
Kennewick, Washington, United States
support@tailboardsafety.com