Privacy Policy

Who we are

WorkSafe Sounds publishes occupational health and safety resources and runs free and paid safety tools. WorkSafe Sounds is responsible for the personal information described here. For any privacy question or request, email our privacy contact at info@worksafesounds.com.

On worksafesounds.com

• Contact form. We collect your name, email address, organization and message. The form also records your IP address and browser details. We use this information to reply to you.
• Downloads, articles, court cases, music and the podcast need no personal information.
• The site sets no cookies and runs no analytics, advertising or tracking scripts. Your light or dark theme choice and the audio player's position are saved in your own browser and are never sent to us.
• The site is hosted by Cloudflare, which processes standard request information, such as your IP address, to deliver pages.

Free tools

• Psychological Health and Safety Benchmark. When you ask for your report, we collect your email address, your answers and score, your browser details and the page that sent you. We use them to send your report and follow-up emails about psychological health and safety. Your email address is added to our email list (see Emails from us). The benchmark page loads its fonts from Google Fonts, so your browser sends your IP address to Google.
• COR Readiness Assessment without an account. Your answers stay in your own browser until you create an account, and are then saved to it.

Accounts, courses and payments

• Your account. Your email address and password, and a company name based on your email domain. If you arrived through a link that carries campaign tags, we keep the first one to learn how people find us. Your sign-up email address is added to our email list.
• Your work in the tools. Assessment answers and notes, corrective actions, safety-guide requests and the guides and reports the tools produce.
• COR AI Document Analysis. The documents you upload are stored with your account. Text from them is sent to Anthropic, whose AI model scores it against the COR questions. Anything in your documents, including names or incident details, goes with it, so leave out personal information the analysis does not need.
• Courses. Your enrolments, lesson progress and quiz results, and the name you enter for your certificate, which is printed on it.
• Usage. Which tools you open and finish, and when you come back. We use this to see what is useful and what to improve.
• Payments. Payment is made on Stripe's checkout page. We never receive your card details. Stripe tells us your email address and what you bought, and we use that to give you access.
• Visits to the app are counted with Vercel Web Analytics. The app is hosted by Vercel, whose server logs can include your email address when a payment or email-list update needs troubleshooting.

Podcast and YouTube

Podcast and music audio is served from media.worksafesounds.com through Cloudflare. You do not need to give any personal information to listen, and we keep no download records of our own. When you follow a link to YouTube, Apple Podcasts or Spotify, that service's own privacy policy applies.

We manage the WorkSafe Sounds YouTube channel with YouTube API Services. Our tool acts only on our own channel: it uploads our videos and updates their titles, descriptions, thumbnails and playlists. It collects no information about viewers or other YouTube users. YouTube's Terms of Service and the Google Privacy Policy apply to that use. Anyone who has authorized our tool can revoke its access at any time on the Google security settings page. Questions or complaints about this go to info@worksafesounds.com.

Who receives your information

We use these outside services, each for the job listed:

• Supabase: database, sign-in and file storage for the website and the app.
• Cloudflare: hosting for worksafesounds.com and the podcast and music audio.
• Vercel: hosting, visit counts and server logs for the app.
• Stripe: payments.
• Anthropic: analysis of documents you upload to COR AI Document Analysis.
• Brevo: our email list.
• Resend: sending benchmark report emails.
• Google Fonts: fonts on the benchmark page.
• Google (YouTube API Services): managing our own YouTube channel.

We do not sell your personal information.

Where it is stored

Your information is stored and processed outside Canada, mainly in the United States. While it is there, it may be accessible to the courts, law enforcement and national security authorities of that country.

How long we keep it

• Your account, everything saved in it and the documents you upload: while your account is open, and deleted within 30 days of your request.
• Benchmark results, contact-form messages and usage records: up to 2 years.
• Our email list: until you unsubscribe, or after 2 years without opening or clicking our emails.

Cookies and browser storage

• worksafesounds.com sets no cookies.
• The app sets only the cookies that keep you signed in. It does not use advertising or cross-site tracking cookies.
• Both sites save a few settings in your own browser, such as your theme, your audio position and unfinished assessment answers. If a benchmark request fails to send, the benchmark page also keeps your email address and answers in your browser so it can try again. You can clear them at any time in your browser settings.

Emails from us

People who create an app account or ask for a benchmark report are added to our email list, which is run through Brevo. Every email we send from it has an unsubscribe link, and we stop sending within 10 business days of your unsubscribing. You can also email info@worksafesounds.com to be removed.

Emails about your account itself, such as sign-in links, password resets and purchase invitations, are part of the service and are not marketing.

Seeing, correcting or deleting your information

Email info@worksafesounds.com to ask what personal information we hold about you and who we have shared it with, to correct it, to delete it, or to withdraw your consent. We answer within 30 days, at no cost, and deletion requests are completed within 30 days.

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.

Changes to this policy

We will update this policy when our practices change, and the date at the top of the page shows when it last changed.