Privacy Policy

Effective date: 9 October 2026

This policy explains what the BOSH Construction Management System (the boshcms.com website and the BOSH Android app) collects, why, who it is shared with, and how you can have it deleted. BOSH is used by construction companies to manage Permits to Work, Toolbox Meetings, Safety Inspections, Defects and Quality Inspections. Accounts are created by each company's administrator.

1. Information we collect

• Account details: your name, email address, company, sub-contractor name, job roles and, if you add one, a profile photo.
• Signatures: the signature you draw to submit, approve or close a record. You may choose to save it as your default signature.
• Photos: pictures you take with the camera or choose from your phone as evidence on inspections and defects.
• Precise location: your GPS location when you submit or sign a record, stored on that record as site evidence, and used to show the site weather.
• Worker details: names, designations, companies and identification (FIN) numbers of site workers, entered by company administrators. The full FIN is visible only to administrators; reports show only the last four characters.
• Record content: the information you enter in permits, meetings, inspections and defects, including a supervisor contact number on permits, and the date and time of each action.
• Notification token: an identifier for your device so the app can send you work notifications.

BOSH does not show advertising, does not use analytics or tracking services, and does not sell your data.

2. App permissions

• Location — to record where a record was signed and to show site weather. A Permit to Work cannot be submitted without it.
• Camera — to take inspection and defect photos.
• Notifications — to tell you when a record needs your action or a permit has expired.

You can turn these off in your phone settings; the related features will then not work.

3. How we use your information

• To run the system: create, route, approve and close records, and produce PDF reports.
• To notify the people who need to act on a record.
• To keep workplace safety and compliance records for your company.
• To provide support and keep the service secure.

4. Who we share it with

• Your company: records are visible to users of your company according to the roles set by its administrators.
• Google Firebase (Singapore region) — sign-in, database, file storage, server functions and push notifications.
• Google Drive and Google Sheets — copies of finished PDF reports and record registers are filed in your company's Drive.
• Open-Meteo — receives the site coordinates to return the weather forecast.
• An email delivery provider — only if a password reset email is sent to you.
• Authorities, where the law requires it.

5. Security

All data is sent over encrypted (HTTPS) connections. Access is limited by sign-in, by company and by role, using server-side security rules.

6. How long we keep it

Your account details are kept while your account is active. Permits, meetings, inspections and defect records are workplace safety and audit records that your company retains for up to 7 years for regulatory compliance. Backups and logs are cleared within 90 days.

7. Deleting your account and data

You can ask for your account and personal data to be deleted at any time. See Account & Data Deletion for how to request it, what is deleted and what is retained.

8. Children

BOSH is a workplace tool for adults and is not intended for anyone under 18.

9. Changes to this policy

We will post any changes on this page and update the effective date above.

10. Contact

Questions about your data: anbu.sitepro@gmail.com

← Back to Login