Conlan Connect Privacy Policy
Effective 3 November 2026
Conlan Connect is a Safety and Field Management App for employees and approved contractors of Conlan Company ("Conlan", "we"). It gives you safety documents, safety alerts, the company directory and the Connect Chatbot, which answers questions from Conlan's safety documents. This policy explains what the app collects, why, who processes it and how long it is kept.
We do not sell your information, show advertising, or track you across other companies' apps or websites.
What we collect
| Information | Where it comes from | Why |
|---|---|---|
| Your name, work email address and Microsoft 365 account identifier | Conlan's Microsoft 365 directory, when you sign in | To sign you in and recognise you on each visit |
| Your role and group memberships | Conlan's Microsoft 365 directory | To decide which documents, tools and alerts you can see |
| A device identifier the app creates, your phone's platform (iOS or Android), the app version and a push notification token | Your phone | To keep each phone signed in, let a lost phone be signed out remotely, and deliver alerts to it |
| When you open each alert | The app | To show which alerts you have read |
| Questions you ask the Connect Chatbot, its answers, and any rating or comment you give an answer | You | To answer you, limit how many questions one person can ask each day, and improve the Connect Chatbot's answers and find gaps in the documents |
| Alerts you write and send, if your role allows it | You | To deliver them to the people you choose |
| Crash reports: what went wrong, your phone model, operating system and app version, and your account identifier | The app, when it crashes or hits an error | To find and fix problems |
| Your IP address and the time of sign-ins and changes made in the app | Our servers | Security, and investigating misuse |
The app does not access your location, contacts, photos, camera or microphone.
The company directory in the app shows names, work email addresses, job details and work phone numbers drawn from Conlan's Microsoft 365 directory and Conlan's own records. Other people signed in to the app can see your directory entry, as they can in Outlook or Teams.
Who processes it
Your information is stored and processed by Conlan and by these service providers, only to run the app:
- Microsoft Azure hosts the app's servers, database, documents and logs in the United States. Questions you ask the Connect Chatbot, with passages from Conlan's documents, are sent to Microsoft's Azure OpenAI service to compose an answer. Microsoft does not use them to train its models. The app asks your permission before your first question, and you can withdraw it in Settings.
- Expo, with Apple and Google, delivers push notifications. They receive your phone's push token and the alert's text.
- Sentry receives crash reports, and a report when the app stops responding. A report includes the app version, your phone's model and the screens you visited just before. Your name, email address and phone's name are removed before it is sent.
How long we keep it
- Your account, role and directory entry: while you use the app, until your account is erased.
- Sign-in records: 30 days after they expire or are revoked.
- Push delivery records, which include your push token: 30 days.
- A phone that has been signed out remotely: 90 days.
- Connect Chatbot questions, answers and ratings: 90 days.
- IP addresses in the app's audit records: 90 days. The record of the action is kept.
- Server and security logs: 90 days.
- Alerts you send or receive, and the record of who has read them: 90 days after they are sent.
Your choices and rights
- You can turn off notifications for the app in your phone's settings at any time.
- You can ask to see the information the app holds about you, or ask for it to be corrected or erased, by contacting us below. When your account is erased, alerts you sent stay with their readers but are credited to "Former employee", and your questions remain only as anonymous counts.
- When you leave Conlan, your Microsoft 365 account is disabled and you can no longer sign in.
Security
Information is encrypted in transit and at rest. Access to the app's servers and data is limited to the people who run it, and access is logged. Signed-in phones can be revoked remotely if lost.
Children
The app is for Conlan employees and approved contractors only. It is not intended for children.
Changes
We will update the date at the top of this page when this policy changes.
Contact
Questions or requests about your information: ConlanConnect@conlancompany.com