HiVisly · Updated 8 November 2026
Privacy & data
Pre-launch notice: these materials describe the current service. Contract terms, retention periods, processor agreements and international-transfer safeguards still require professional review and completion before live workforce use.
Who to contact
The service is operated by Xavier Bertran Sanllehí at the address below. Contact the service owner for account privacy questions. For crew records, contact your employer or the company that operates your HiVisly account; it generally decides the purposes of workforce processing.
Information processed
HiVisly processes account and company details, assigned jobs, time entries, location coordinates submitted with field actions, uploaded selfies and site photos, captions, dictated transcripts, reports, delivery items, incidents, certificates, inductions and signatures. Location is also used in the field screen to select nearby jobs. PINs are verified using hashes and device-based attempt controls. Stripe processes payment details; the app stores billing customer and subscription references, not complete card numbers.
Purposes and recipients
Data supports site reporting, time tracking, safety acknowledgments, account access, billing and customer-requested exports or sharing. Authorized people within the company may access appropriate records. Shared report links permit anyone holding the link to read that report. AI requests may include report text and private photo content to generate captions, extract tickets or draft English reports. Email and Procore delivery occur when configured.
Service providers and transfers
Infrastructure is provided through Lovable Cloud; AI features use Lovable’s AI gateway; billing uses Stripe. Resend is linked for configured email delivery and Procore is optional. Processing locations, downstream AI providers, retention by providers and contractual international-transfer safeguards must be verified before launch. No claim is made that all data stays in the UK or USA, or that providers never use inputs for model improvement.
Security and retention
The application uses authenticated access, company-scoped permissions, private media storage and PIN attempt throttling. No system can promise absolute security. Retention periods, backups and end-of-contract deletion arrangements are not yet finalized. Contact the service owner to discuss export, correction or deletion; this page does not promise a specific deletion deadline.
Privacy rights
Depending on applicable law and the processing role, individuals may request access, correction, deletion, restriction, portability or objection. Contact the relevant employer/controller for workforce records and the service owner for account-related processing. UK users may complain to the Information Commissioner’s Office. US state-law rights and appeal procedures apply where the service or customer meets the relevant statutory criteria. We have not assessed every state-law threshold.
Cookies and browser storage
Browser storage supports sign-in and a persistent device identifier for PIN-attempt controls. There is no advertising-cookie consent implied by using the service. The public site loads fonts from Google, which receives a network request. Additional analytics, advertising, or non-essential cookies require a separate assessment and appropriate notice or consent before activation.
Service owner & contact
Xavier Bertran Sanllehí
NIF: 46560173-P
C/ Guinedilda, 29, 25200 Cervera (Lleida), Spain