Privacy Policy

Who we are

This policy is published by Pit & Rig Inc., an Alberta corporation ("Pit & Rig", "we", "us" or "our"), which operates the Pit & Rig platform and is responsible for the personal information described here.

What we collect

We collect the information needed to provide and protect Pit & Rig.

This includes account information such as your name, email address, company and role, along with the business records you create in the platform — including tickets, LEMs, rates, purchase orders, AFEs, invoices, projects, cost codes and supporting documents.

When a signature is captured, we may store the signature image together with information associated with that action.

If you choose to attach a location to a ticket, we collect the device location you provide.

We also record standard technical information, such as IP address, browser and device details, in connection with security-sensitive and financially significant actions.

Location

Pit & Rig does not continuously track your location.

Location is not collected in the background and is not automatically requested when you open the platform.

A location is captured only when a user intentionally chooses to add their current location to a record. When provided, that location is stored with the applicable ticket as part of the record of where the work was documented.

Where the product allows it, you may review or remove the location before the record is submitted or finalized.

IP addresses and audit records

Certain actions in Pit & Rig — including signatures, approvals and other financially significant events — may be recorded together with technical information such as an IP address, browser, device information and timestamp.

We keep this information to help protect the integrity of business records, investigate unauthorized activity and establish an audit trail if a record, approval or signature is later disputed.

We do not use this information to track you across the internet or build advertising profiles.

Who can see your data

Your organization's information is available only to users who have been given appropriate access.

When you work with another organization through Pit & Rig, that organization can access only the records that have been shared with it or that it is authorized to review as part of that relationship.

For example, a client may see the tickets submitted to it for approval, but it does not automatically gain access to your other clients, unrelated projects, rates negotiated with other customers or invoices belonging to other relationships.

Access controls are enforced at the application and data-access level, not simply by hiding information in the interface.

Approval links

When Pit & Rig sends an approval or signature link by email or text message, we may record delivery and access events associated with that link.

This allows users to understand whether an approval request was delivered or opened and helps maintain the audit history of the record.

Pit & Rig does not use email tracking pixels for advertising or behavioural profiling.

Who we share data with

We use trusted service providers to operate parts of Pit & Rig, including cloud infrastructure, database and file storage, email delivery, text messaging and payment processing.

These providers may include services such as Google Cloud and Firebase, Resend, Twilio and Stripe.

They process information only as necessary to provide their services to Pit & Rig and are subject to their own contractual, security and privacy obligations.

We do not sell your personal or business data.

We do not use one customer's confidential business information to benefit another customer.

Where your data is stored

Pit & Rig uses third-party cloud infrastructure to store and process information.

The location in which particular information is stored or processed may depend on the service being used and the infrastructure supporting it.

Where information is processed outside Canada, it may be subject to the laws of the jurisdiction in which it is processed.

We maintain appropriate safeguards for information handled by our service providers and will provide additional information about data residency where required.

How long we keep information

We retain information for as long as reasonably necessary to provide Pit & Rig, maintain business and audit records, meet legal or regulatory requirements, resolve disputes, enforce agreements and protect the security of the platform.

When an account is cancelled, certain information may remain available for a limited period to allow authorized users to export their records.

Some information may also remain in backups or be retained where required for legal, financial, security or recordkeeping purposes.

When information is no longer reasonably required, it may be deleted or anonymized in accordance with our retention practices.

Your rights

You can access and export much of your organization's information directly through Pit & Rig.

You may also contact us to request access to personal information we hold about you, correct inaccurate information or request deletion of information where permitted by law.

Some records may need to be retained for legal, contractual, financial, security or audit purposes even after a deletion request is received.

We will respond to privacy requests in accordance with applicable Canadian privacy laws.

Security

Pit & Rig uses technical and organizational safeguards designed to protect the information stored in the platform.

Access is scoped by organization and user permissions. Sensitive operations are handled through controlled server-side processes, credentials and secrets are not intentionally exposed to end users, and finalized business records may include audit and integrity controls designed to detect unauthorized changes.

No system can guarantee absolute security. If we become aware of a security incident involving your information, we will investigate it and provide notice where required by applicable law.

Contact

Questions about privacy or requests concerning your personal information can be submitted through the Pit & Rig contact page.

Privacy-related requests will be directed to the person responsible for privacy matters at Pit & Rig.

Text messages

If a contractor texts you a link to approve a ticket, your mobile number is used only for those ticket-approval texts, and only after the contractor confirms you agreed to receive them. We do not sell, rent or share mobile numbers or text-message consent with third parties or affiliates for marketing or promotional purposes. Reply STOP to any text to stop them. Our text message policy (pitandrig.com/sms) has the details.