← Back to 3R Performance Tracking

Privacy Notice

Effective: 2026-04-29 · Last updated: 2026-09-10

This notice explains how 3R Inspection Services (“3R”, “we”, “us”) collects and uses personal data through the 3R Performance Tracking platform (the “Platform”).

Who We Are

3R Inspection Services operates this Platform as an internal business tool for tracking project performance, quality metrics, and workforce cost data in support of inspection services delivered to our clients.

Data We Collect

To administer your engagement on inspection projects, we collect:

• Identifiers (full name, email address, role)
• Job classification and applicable day rate
• Hours worked, overtime hours, mileage, per-diem entries
• Inspection-quality metrics (acceptance rate, NCRs issued and closed, documentation errors) attributed to the named inspector
• Authentication and usage data through our infrastructure providers (login timestamps, IP address, user agent)

Why We Collect It

Personal data is collected and processed to:

• Administer project assignments and access
• Calculate compensation, generate client invoices, and meet recordkeeping obligations
• Evaluate inspection quality in connection with our contractual obligations to clients
• Maintain the audit log described under Who Has Access, as required by our contracts and applicable law

Who Has Access

Access is restricted by role:

• Super-admin: Full access to administer the Platform.
• Admin: Access to project, quality, productivity, cost, subcontractor, invoice, and supplemental data for projects assigned to them.
• Inspector: Access to their own performance and assignment records only. No access to financial or compensation data of other personnel.

Every change to financial records, role assignments, and administrative account actions (invitations, and login deactivation or reactivation) is recorded in an immutable audit log accessible to super-admins only.

Third Parties (Sub-Processors)

We use the following service providers to operate the Platform. Each processes data on our behalf under their published terms and applicable data-processing agreements:

• Supabase Inc.: database, authentication, and hosting of platform data (United States).
• Vercel Inc.: web hosting and content delivery (United States).
• Functional Software, Inc. (Sentry): application error and performance reporting (United States).

A current list of sub-processors is maintained at /subprocessors.html. Material changes are communicated to active enterprise clients per applicable agreements.

Retention

We retain project, performance, and personnel records for the periods below to comply with applicable wage-record, tax, and contractual obligations:

• Project, quality, and performance records: held for the life of the pipeline for engagements subject to PHMSA 49 CFR 192/195 record retention, and not deleted automatically; a super-admin may purge them by hand once that requirement no longer applies.
• Invoice records: 7 years (consistent with IRS recordkeeping)
• Audit logs, including administrative account actions such as invitations and login deactivation: 7 years (the platform's configurable default; see /trust.html)
• Authentication and login records held by our infrastructure providers: 1 year. IP address and device information attached to changes recorded in the audit log are retained for the audit-log period above.

Records may be deleted earlier upon written request, subject to legal-hold and audit-retention obligations.

Your Rights

If you believe your personal data on the Platform is inaccurate, or you wish to request access to or deletion of your records, contact us at the address below. We will respond to verifiable requests within 30 days.

California Residents (CCPA)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act, including the right to know what categories of personal information we collect, the right to request deletion (subject to legal exceptions), and the right not to be discriminated against for exercising your rights. To exercise these rights, contact us at the address below.

Security

Data is transmitted over TLS 1.3 and stored encrypted at rest by our infrastructure providers. Role-based access controls and row-level security at the database layer restrict who can view or modify each category of record. The audit log described under Who Has Access covers every change to those records.

Changes to This Notice

We may update this notice from time to time. Material changes will be communicated to active users by email. The “Last updated” date above reflects the most recent revision.

Contact

This notice describes our current data practices and is provided for transparency. It is not legal advice. If you have legal questions about your rights, consult a licensed attorney in your jurisdiction.