DAS Report Privacy Policy

Knecht Strategies LLC operates DAS Report. This policy explains our personal-information practices for the DAS Report website, contact form and organizational submission service, including the existing free SoCal and NorCal tools.

1. Information we process

Contact inquiries include your name, email address, optional company or program name, and message. The contact form also uses a request identifier and abuse-prevention checks. Please leave out personal or sensitive information that is unnecessary for your inquiry.

Submission information includes company and contractor contact details, company address, project and trade information, membership selection, form types, uploaded files and receipt history. Depending on the workflow, records can also include project location and dates, estimated apprentice hours, original received date and channel, confirmation recipients, staff notes, review status and audit history. Files may contain information about people other than the submitter.

Staff account information includes email address, user identifier, organization access and role, and optional profile name and photo. Technical information, authentication cookies and browser session storage support sign-in, submission workflows, troubleshooting and security.

If you place a paid order, billing information can include payer contact details, subscription and invoice identifiers, and payment status. Payment information submitted directly to a payment provider is handled through that provider's service.

2. How we use information

We use information to respond to inquiries; operate and support the service; authorize staff; receive, organize and display submissions; provide receipts and notifications; maintain customer records; administer any ordered paid service; troubleshoot problems; prevent misuse; and meet applicable legal obligations.

Customer organizations may determine the purposes for which their submission information is processed and who may access it. We process information on their behalf under the relevant agreement and authorized instructions. Their privacy notices and agreements may also apply. Where appropriate, we refer a request concerning an organization's records to that organization or assist it in responding.

3. Recipients and providers

Submissions and related records are made available to the intended customer organization and its authorized users. Configured notification messages may include receipts or uploaded files and may go to the submitter, additional confirmation recipients and the organization's designated staff.

Vercel hosts the application. Supabase supports authentication, database records and private file storage. Resend delivers contact inquiries and transactional messages. Inquiries sent to support@das.report are handled through our support mailbox and email providers, including Google email services. If a paid order is placed through Stripe, Stripe processes the payment information provided directly to it; we use the billing, contact and payment-status information we receive to administer that order.

The staff intake workflow supports assisted extraction through OpenAI. When this feature is used, the uploaded PDF or image is sent for field extraction and staff review. This is separate from ordinary public form submission. The request uses a non-storage option, which does not by itself establish that all provider logs or other records are immediately deleted.

Where an organization has enabled the MeritLayer integration, non-member submission information can be provided to that system for the organization's follow-up workflow. This can include company, contact, address, project, trade and form information and submission identifiers and timestamps. Uploaded document files remain in DAS Report rather than being transferred through that feed.

We may also disclose information as authorized by you or the relevant customer, as required by applicable law or legal process, or where reasonably necessary to address unlawful use or security concerns or establish or defend legal rights, subject to applicable law.

4. Technical information and browser choices

The service and its providers process technical information needed to operate and secure requests, such as network and browser information. The contact handler hashes an IP-address header for a temporary, in-memory abuse counter. This does not mean hosting or email-provider logs contain no technical information.

Authentication cookies support staff sessions. Submission session storage can remember company and contact details, address, trade, membership selection and a retry identifier with form and file metadata for the browser session. You can use the submission interface's Start fresh control or browser controls to clear remembered details. Blocking storage may affect sign-in or convenience features.

Our application does not currently change its behavior in response to the browser's Do Not Track setting. You can contact us about privacy choices and applicable rights through the website form or support@das.report. We handle requests under applicable law and the relevant customer relationship. This policy does not require anyone to waive rights provided by law.

5. Retention and deletion

We retain information as needed to provide and support the requested service, respond to communications, maintain customer submission records, comply with applicable requirements, resolve disputes and protect the service. Retention depends on the type of record, the customer relationship, authorized instructions and applicable obligations.

Ending access or canceling a service does not automatically erase submission records or other stored information. Requests for export or deletion are reviewed manually, subject to customer agreements and legal recordkeeping requirements. Some records may need to be retained for lawful reasons. Provider logs, mailbox records and backups may follow separate operational retention cycles.

Authorized organization administrators can export supported submission fields as CSV. Authorized staff can access supported documents and receipts. CSV does not include every file or a complete account archive; contact us for help with other records.

6. Requests and security

Use the website contact form or support@das.report to request access, correction, export or deletion, or to ask about other applicable privacy rights. We may need to verify your identity, authority and the relevant organization before acting. When we process information on a customer's behalf, we may refer the request to that customer or assist it in responding.

The service uses access controls and private document storage. No internet transmission or storage system can be guaranteed completely secure. Report suspected unauthorized access or misuse through those same contact methods.

7. Intended use

The service is intended for organizations and their authorized representatives acting in a business capacity. Uploaded records can concern people who do not hold accounts. Account eligibility does not establish that submissions contain no information about minors or no sensitive information. Submit only information appropriate and reasonably necessary for the intended workflow.

8. Changes and contact

We may update this policy as the service, our practices or applicable requirements change. We will identify the effective date of the current version and provide notice or obtain consent for material changes where required by law.

For privacy questions, use the website contact form or write to support@das.report.

Knecht Strategies LLC