Privacy Policy

HV Inspector LLC ("HV Inspector," "we," "us") is a cloud-based software platform for managing field operations data for critical infrastructure, including substation inspections, commissioning, maintenance, and safety documentation. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website (hvinspector.com) or use our platform and services (the "Service").

This policy applies to two categories of users:

• Website Visitors — individuals who browse hvinspector.com without creating an account.
• Platform Users — individuals who have an account on the HV Inspector platform through their employer or contracting organization.

2.1 Information From Website Visitors

When you visit hvinspector.com, we collect:

• Contact Form Submissions — name, email address, company name, and any message you provide through our contact or demo request forms.
• Platform Analytics — basic usage data provided by our hosting platform (Base44), including pages visited, time on page, and approximate geographic region (country/state level). This is first-party infrastructure analytics — we do not use Google Analytics, third-party tracking pixels, or advertising cookies.
• Technical Data — IP address, browser type, device type, and referring URL, collected automatically by our server and hosting infrastructure.

2.2 Information From Platform Users

When your organization subscribes to the HV Inspector platform, we process the following categories of data on behalf of your organization (the "Customer"):

Important: HV Inspector is a software provider. We do NOT perform inspections, commissioning, engineering analysis, or any professional services. All operational data in the platform is created by and belongs to the Customer.

3.1 Website Visitor Information

• To respond to your inquiry or demo request.
• To send you information about our services if you request it.
• To analyze website usage and improve our site and content.
• To protect against fraud and unauthorized access.

3.2 Platform User Information

• To provide, maintain, and improve the Service.
• To enable field data capture, reporting, and document generation.
• To provide customer support and respond to technical issues.
• To generate aggregated, de-identified analytics about platform usage and performance.
• To comply with legal obligations.

• We do not sell your data to any third party, under any circumstances.
• We do not use your data for advertising.
• We do not use Google Analytics or third-party advertising/tracking pixels on our website.
• We do not process special categories of personal data (health, biometric, racial/ethnic origin, religious beliefs, sexual orientation). Our platform is not designed to store this type of data.
• We do not knowingly collect data from children under 16. The Service is designed for professional use by utility and contractor organizations.
• We do not access raw payment card data. Payment processing is handled entirely by Stripe, Inc. We receive only a tokenized reference.

5.1 Service Providers (Sub-Processors)

Our current sub-processor list is maintained at hvinspector.com/sub-processors or available upon request at JK@hvinspector.com. We provide at least 30 days' notice before engaging a new sub-processor.

5.2 Legal Disclosures

We may disclose information if required by law, court order, or government regulation, or to protect the rights, property, or safety of HV Inspector, our customers, or others.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of substantially all assets, customer data may be transferred as part of that transaction. We will notify customers at least 30 days before any such transfer.

We implement industry-standard technical and organizational measures to protect your data:

• Encryption in transit: All data is transmitted over TLS 1.2+ (HTTPS).
• Encryption at rest: All stored data is encrypted with AES-256. Standard Tier uses provider-managed keys; NERC CIP Tier uses customer-managed keys (Azure Key Vault).
• Access control: Role-based, per-seat authentication. Access to production systems is restricted to authorized personnel under confidentiality obligations.
• Network security: AWS VPC and security groups (Standard Tier); Azure Government network isolation (NERC CIP Tier).
• Data segregation: Each customer's data is logically isolated (Standard Tier) or physically isolated (NERC CIP Tier).
• Backups: Daily automated backups with geo-redundant storage for NERC CIP Tier.
• Audit logging: Application-level logs (Standard Tier); immutable audit logs meeting CIP-007 requirements (NERC CIP Tier).

Our website uses minimal cookies necessary for basic functionality:

• Essential cookies: Required for the website to function (session management, security).
• Platform analytics: We use our hosting platform's built-in analytics to understand page views and usage patterns. This is first-party, infrastructure-level analytics — not Google Analytics or any third-party tracking service.

We do NOT use:

• Google Analytics or any third-party web analytics
• Advertising or retargeting pixels (Facebook Pixel, LinkedIn Insight Tag, etc.)
• Cross-site tracking cookies
• Third-party advertising networks

8.1 California Consumer Privacy Act (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect about you and how it is used.
• Access the specific pieces of personal information we have collected.
• Delete your personal information (subject to legal retention obligations).
• Opt out of the sale of your personal information. We do not sell personal information.
• Non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at JK@hvinspector.com.

8.2 Platform User Rights

Platform users (or their organization's administrator) can:

• Access all data associated with their account through the platform interface.
• Export all data in JSON and PDF formats at any time.
• Correct or update any data through the platform interface.
• Delete specific records through the platform interface.
• Request deletion of all data upon subscription termination (30-day export window, then permanent deletion).

8.3 GDPR (EU/UK Users)

For users in the European Union or United Kingdom, HV Inspector acts as a Processor on behalf of the Customer (Controller). Data subject rights are exercised through the Customer. We assist the Customer in responding to access, rectification, erasure, portability, and objection requests.

• Active subscription: Data is retained for the duration of the subscription. No automatic deletion during active use.
• Upon termination: Customer has 30 days to export all data. After 30 days, all data is permanently deleted from production systems. Backup copies are deleted within 90 days following the backup rotation cycle.
• Website contact forms: Submission data is retained for 24 months, then deleted unless a business relationship is established.
• NERC CIP Tier: Deletion includes destruction of customer-managed encryption keys (cryptographic shredding), rendering data permanently unreadable.
• Billing records: Retained as required by tax law (typically 7 years). Only billing metadata is retained — no payment card data.

The Service is designed for professional use by utility companies, contractors, and engineering organizations. We do not knowingly collect information from children under 16. If you believe a child has provided us with personal information, contact us at JK@hvinspector.com and we will promptly delete it.

HV Inspector is a United States-based company. All data is stored in the United States (AWS US regions or Azure Government US Gov Virginia). For users outside the United States, by using our Service you acknowledge that your data will be processed in the United States, which may have different data protection laws than your country of residence.

We may update this Privacy Policy from time to time. We will notify platform customers at least 30 days before material changes take effect. For website visitors, the updated policy will be posted on this page with a revised "Last Updated" date. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact:

Governing law: This Privacy Policy is governed by the laws of the State of West Virginia, without regard to conflict of laws principles.