Privacy Policy

1. Who this covers

Appalachian Integrity LLC provides the public website and the Weldbook AI software family: Weldbook AI, Pipe ISO Drafter AI, Tank & PV Drafter AI and API Report Builder. This policy also describes account and content practices for related client/contractor portals and internal tools when those services are used. An app name containing AI does not mean every action is sent to an external AI provider. The feature you use determines the processing.

This policy covers the Company's software services. Future inspection services require a separate engagement; using a documentation app does not engage the Company as inspector or engineer. Contact privacy support at john@appalachianintegrity.com.

Weldbook AI and Pipe ISO Drafter AI are separate downloadable apps provided by Appalachian Integrity LLC. They use the same Company account service, with product-specific work screens. This policy applies to each app and to the connected features you actually use. Installing one app does not automatically transfer local work from another app or grant access to every product.

2. Information collected

Account information includes the email address, name, company, roles and permissions you provide, a password hash, and account-recovery and sign-in records. Where additional authentication is actually enabled, its verification records are also processed. Payment information includes orders, selected plans and quantities, processor/customer or transaction references, payment status and billing details returned by the chosen processor. Card and bank credentials should be entered only into the identified payment provider's payment interface, not into a report or support message.

Credit and export records include the account charged, the person requesting the export, credit purchases, holds, deductions, releases, corrections and reversals, balances before and after an entry, amounts paid, order and export identifiers, and related dates and reasons. We retain checkout and subscription-change records, including attempts that fail, expire or are abandoned, to reconcile their status and prevent duplicate transactions. If you submit a privacy or account-deletion request, we process your contact and account information, the request and verification result, correspondence, decisions and the record of action taken. Do not include a password, payment credential or unnecessary confidential work in the request's free-text fields.

Work content can include project and asset identifiers, weld records, personnel names or stamps, measurements, inspection observations, checklists, photographs, reports, drawings, company logos and custom report sections. Previous-report and custom-layout features also receive the documents you upload, file names, extracted text or images, source references, layout fields and branding. Text assistance processes your entered text, questions, recent replies and remembered terminology; its server records include questions, replies, proposed wording, request and conversation identifiers, and usage information. Uploaded documents and suggestions can identify a person or facility even when their main subject is equipment. Provide only information you are authorized to submit, and avoid client names or report details in reusable terminology.

Technical records include IP addresses, request timestamps, requested pages, response codes, browser information and security events. Agreement evidence includes the accepting account, typed name where required, timestamp, IP address, user-agent and the hash of the accepted document. Contact messages and attachments are received when you send them.

Corporate account information includes the office name and billing contact; invited and participating accounts; membership, role and app assignments; job numbers and descriptions; credit-purchase and reload settings; credit limits and review results; and payment, invoice and audit history. Office output records identify the acting account, selected job, app, output type, time, credits used and transaction reference. Free field-copy authorization can also create an activity record. We retain the account, text, version, hash and time of a submitted monthly billing authorization and the status of related payment setup. A deposit request records the requested amount and any explanation; submitting a request does not fund a deposit. Avoid personnel evaluations, government identifiers, payment credentials or unrelated confidential information in job titles, audit explanations and request notes.

Regional administration also records the Region name and creating account; its designated Regional Managers; new offices created within the Region; delegated Office Manager permissions; regional unpaid-balance limits; invitation and acceptance records; and related administrative actions. Recorded actions identify the acting account, affected office or Region, and action time. These are identifiable operational records used for account administration and accountability, not anonymous statistics or an assessment of an employee’s inspection competence.

Mobile access also processes the app product and platform identified by its connection, ordinary connection and authentication records, and files you choose through a supported file or image picker. A remembered sign-in can identify a particular browser or app session through its stored token. This is distinct from collecting a hardware or advertising identifier. Ultrasonic thickness cards can include equipment and drawing references, measurement locations, readings, remarks, photographs, technician and instrument details, review history and records of sharing or notification.

3. Where work is stored

Local working data: individual Weldbook records and some drafter work are stored in browser or app storage on the current device. Weldbook browser storage is separated by account identifier. Local content is still accessible to someone who controls the device or browser profile; this is not encrypted isolation against the device owner. Local files do not automatically appear on a different device. If you clear storage or lose the device, we cannot recover content for which we hold no copy.

Shared and connected data: shared crew jobs, optional synchronization/uploads and portal submissions send selected content to the server. Saving a report draft stores its fields, measurements, checklist responses, photos and selected branding. Sending a drawing to the Report Builder uploads the selected rendered drawing sheets, source drawing model and identifying fields. Previous-report imports store uploaded originals, extracted content and analysis separately from the current report. Custom Reports stores source documents, working layouts and previews; locking a layout saves a reusable format and branding for your account and selected office. The reuse process clears entered fields and classified old answers, but original printed content deliberately retained in the layout may remain. Review each preview before reuse. Text-assistance questions, replies and remembered terminology are stored for the account, app and selected workspace. Other report-style controls may use browser or account storage as described by the control.

Preparing a server-generated export preview sends and stores the selected report or drawing content, even if you do not proceed with the export. We keep a snapshot of the selected revision, inputs, attachments and quoted output, together with generated preview or completed files and their transaction references. Editing a working draft does not rewrite an earlier snapshot. An action that deletes a draft does not by itself represent deletion of export snapshots, financial records, backups or copies already distributed. Where a team pays for an export, its payment records can identify the acting account and export reference; payment alone does not grant access to the acting user's personal report content. Content sharing follows the access controls of the specific workspace or sharing action.

Crew members and managers with permission can access their shared jobs. Saved personal reports are associated with the owner's account; using the same login across the apps does not itself publish them or share them with every crew. Downloads and copies you distribute are controlled by you and their recipients. The Company cannot retrieve a recipient's independently saved copy by deleting the server draft.

Account, order, security and agreement records are server records even when a particular work record stays local. It is therefore inaccurate to describe all of these services as never receiving your data.

A corporate workspace is attached to each employee's individual sign-in. Office Managers can manage corporate memberships, app assignments and billing, and can view or export identifiable office usage and billing statements, including activity recorded before an employee's access ended. An Office Manager role does not by itself grant access to another employee's saved reports, drawings or paid files, or to separately maintained personal work. Current server documents and paid outputs require both the author account and the applicable office permissions. Sharing an output outside that boundary requires a separate authorized action.

Corporate base Weldbook records remain in the current browser workspace unless a feature sends selected content to the server. Selecting an office separates its browser working storage from personal work through application storage names; it does not encrypt the device, synchronize every work record, or erase copies when membership changes. Anyone controlling the device or browser profile may be able to access local copies. Arrange authorized handover and keep independent files before changing devices or ending an employee's office access.

For offices created within a Region, designated Regional Managers can view the office roster, app assignments, access status and permitted office usage or administrative statements. Office Managers receive only the management permissions granted for their office. This can include identifiable historical office activity. The invitation screen identifies the actual office and Region and describes this audience before the invited account accepts membership. This regional arrangement does not automatically open personal work, another employee’s saved inspection content or unrelated offices. The existing author-account and office checks still apply to stored inspection files and outputs. It does not merge office billing accounts, determine employment or client ownership rights, or create a shared report archive.

In the mobile apps, local working storage and sign-in cookies belong to that app on that device. A file you select is used by the feature you chose; selecting it is not a general backup of your device. Where a supported mobile export offers the operating-system share menu, the app first downloads the selected authorized file to its temporary private storage. Your chosen destination or recipient can keep its own copy. Closing the share menu, signing out or deleting a server draft does not recall those copies. Keep an independent copy of any file you need.

4. Purposes and access

We use information to provide the features you choose, authenticate and administer accounts, save or share the work you direct, format reports, process purchases, investigate errors and abuse, provide support, maintain security, keep required business records and comply with law. We access stored work only as reasonably necessary for those purposes. We do not use your records to perform unrelated inspection work for another customer.

We do not sell personal information or use customer work for targeted advertising. We do not use your submitted inspection content to train our own general-purpose AI models. We process remembered terminology to assist your later requests in the same account, app and workspace. The external AI features described below send selected content to OpenAI to provide the requested assistance. This policy does not authorize unrelated reuse of your work or a new training purpose without the notice and consent required by applicable law.

We use corporate account payment history, credit purchases, office membership information and recorded payment problems to administer deferred purchasing capacity and to recommend or apply permitted limit changes. The Company can review and adjust those controls. This feature uses records from this service; it is not represented as a personal credit-bureau score or an assessment of an employee's inspection competence or work performance. Contact us to question an incorrect account fact or request review of a limit decision.

5. Hosting, payment, speech and other providers

The website and server records are hosted through Bluehost. Hosting and email providers process information needed to operate those services. When the website offers Stripe checkout, we send Stripe the account email, order or subscription references, selected purchase and amount, and information needed to complete and reconcile the transaction. You enter payment credentials into Stripe's identified payment interface. We receive and retain transaction, subscription, refund and dispute status and related references needed to administer the purchase. Our credit-pack checkout uses purchase references rather than the inspection report body. Stripe may process information for its own payment, fraud-prevention, legal and financial obligations as described in its Privacy Policy at https://stripe.com/privacy. A purchase screen identifies the available processor; merely viewing a quote does not establish that a payment has been made.

Some drafter features keep a local learning log of entered or recognized text, the parsed geometry, identifiers and later corrections. If you export or send that log for support, it can reveal work details; review it first. A remote learning upload requires the feature's disclosed configuration and permissions.

If you choose a browser or operating-system speech feature, that provider may process audio under its own terms. Grant microphone or camera permissions only when needed, and follow your facility's rules. When you request text assistance, we send OpenAI the entered text, your question, recent replies and saved terminology. Previous-report AI analysis sends selected extracted document text, source names and references, and available page images to OpenAI; other report-assistance features send the selected material identified by their controls. These requests can contain confidential work or personal information. OpenAI processes requests under the applicable API terms and data controls. A request configured not to store a response does not by itself promise that every provider log or security record is immediately deleted. Use these features only when you are authorized to send the selected material to that provider; do not send export-controlled or other restricted information to an unapproved provider.

We disclose content to recipients you authorize, service providers involved in those operations, professional advisers when necessary under appropriate confidentiality protections, authorities when legally required, or as reasonably necessary to protect rights and address fraud or security incidents. Where legally permitted and appropriate, we notify you of compulsory demands involving your stored content. A lawful business transfer may involve necessary records subject to applicable privacy obligations. We do not promise that independent payment or browser providers act solely on our instructions for all of their own regulated operations.

For corporate card setup and monthly collection, we send Stripe the office billing identity, account and operation references, app-charge categories, credit-purchase totals and the information needed to reconcile billing. Our corporate monthly invoice flow uses aggregate app and credit charges rather than report bodies or per-job inspection content. We retain the returned setup, customer, payment-method, invoice and transaction references and relevant provider responses. Enter card credentials only in Stripe's identified interface. Stripe also processes information for its own payment, fraud-prevention and legal purposes under its Privacy Policy.

When you issue a technician link for an ultrasonic thickness card, the selected card and its permitted input controls are accessible to a person holding the valid link, subject to its expiry and access checks. Treat the link as confidential and share it only with the intended recipient. The service stores the submitted readings and changes, revision history and notification status. Revoking a link stops later access through that link; it does not retract copies already saved or erase earlier card history.

When the website or a mobile app connects to our hosted service, our hosting logs record IP addresses, request times, requested service pages, response or error codes, and browser or app technical information. Our first-party server statistics use those records to infer the country associated with the connection and measure service traffic, browser and operating-system use, and request errors. We use this information for service analytics and troubleshooting. The country inference uses the network IP address without accessing the mobile device's GPS. We do not use this statistics process to target advertising or reuse inspection content.

6. Cookies and device storage

Session cookies authenticate visits. If you choose remembered sign-in, the device holds a random sign-in token and the server holds its matching reference, a hashed verifier, the account and relevant timestamps. These records distinguish remembered sessions rather than requiring a hardware device identifier. The token expires or is revoked through the offered account-security controls. Signing out of one device, signing out of all devices, and changing or resetting a password have different session effects as explained by those controls. Revoking sign-in access does not delete work or financial records. Browser local storage and IndexedDB can hold work, preferences, templates and panel order; clearing them can destroy local work. Blocking necessary cookies can prevent sign-in.

Connected-report features do not add advertising trackers. Some existing drafting-related pages load fonts from Google Fonts, which creates requests to that provider. Your browser and outside services may use their own storage under their policies. New nonessential tracking or advertising requires an updated notice and any consent or opt-out mechanism required by law.

The app uses its embedded browser to display the selected Company service. Cookies and browser storage support sign-in and working records in that app. Where a file or image picker is available, you select the item to provide. An operating-system keyboard or dictation service is separate from the Company text-assistance request: choosing Ask AI submits the material identified by that control. A file placed in another app through the share menu is handled under that destination's settings and practices.

7. Retention and deletion

Keep your own complete copies of inspection records. The apps provide working storage and formatting tools, not an archival retention service. We cannot recover device-only work that we never received. Server storage is not a guarantee against loss or corruption, and we cannot promise recovery after deletion. Your employer, client and legal retention obligations require your own records; use of these apps does not satisfy them for you.

Different records require different retention decisions. Working drafts, previous-report source files and analyses, custom layouts and branding, AI questions and replies, remembered terminology, prepared previews, completed export snapshots and generated files are distinct from financial history and agreement evidence. Forgetting saved terminology removes that entry from future requests; it does not erase previous conversations, report content, provider records or backups. Deleting or replacing a report or layout does not by itself confirm deletion of those other categories. Capacity limits do not promise how long files remain available. No universal 90-day or 365-day deletion schedule applies to every category. We honor applicable existing commitments and give notice required by law and existing agreements before materially shortening an established period.

We retain account and transaction information as reasonably necessary to administer accounts and credit balances, deliver and reconcile purchases, prevent fraud, meet tax and accounting obligations, and establish or resolve legal claims. Financial corrections are normally recorded as additional entries so the history remains understandable. That accounting method does not authorize keeping every linked identifier or full inspection file indefinitely. Acceptance evidence is retained as reasonably necessary to establish the applicable agreement and resolve related claims. Request records are retained to handle the request, demonstrate the response and, where appropriate, prevent deleted information from being restored to ordinary use. Each retention purpose must support the categories and duration retained.

Backups, recovery archives and file mirrors may contain copies after removal from the active application. Their retention and deletion must be managed separately; we do not describe all such copies as erased immediately or as rotating on the same schedule. If information is retained following a request, we explain the relevant category and lawful reason, restrict it to that purpose, and remove or de-identify it when that reason no longer supports identifiable retention, subject to applicable law.

Request deletion or a copy of server-held information at john@appalachianintegrity.com. We verify identity and authority and explain what action was taken, what remains and why. Account closure, cancellation of future billing, device-token revocation, clearing local storage and deletion of stored content are separate actions that must be addressed as applicable. Deleting our server copy cannot recall files independently saved by a recipient. Your legal privacy rights do not depend on buying export credits or a subscription.

Ending corporate membership, removing an app assignment or canceling office service changes access and future purchasing; it does not automatically delete the office's staff history, jobs, billing and authorization records, saved content or distributed copies. Some stored content may no longer be available through ordinary app access after those changes. Ask the office to arrange authorized handover before removing access, and contact privacy support concerning information we hold. An unpaid balance or a disagreement with an office does not by itself defeat a nonwaivable privacy right.

We assess requests involving an office and an individual separately according to their identities, authority, the affected records and applicable duties. Necessary office accounting or legal evidence may require retention without preserving every related inspection file indefinitely. Any retained category must have a supported purpose. A request-received or status-update message is not confirmation that every live record, generated file, backup, mirror or recipient copy has been deleted. We explain the completed actions and relevant retention exceptions through the request response.

An active member of a canceled office may retrieve that member's own previously issued outputs while the files remain available. Inactive membership does not permit ordinary office-file retrieval, and manager billing access does not automatically transfer another author's content. Other access changes and storage limits remain as described above.

You can initiate account and associated-data deletion from the app's Request deletion control or at https://appalachianintegrity.com/weldlog/mobile-delete.php. The same privacy contact is available if you cannot access that route. Submitting the form records a request for review; it does not itself erase all records. We verify identity and authority, explain the expected completion time and provide a response identifying completed actions and any retained categories and reasons. A shared Company account can be used by both mobile apps, so a request to delete that account may affect access in both. Identify any request limited to particular content clearly. We do not require a separate purchase to exercise applicable privacy rights.

8. Security and incident response

We use access controls, protected connections and hashed account passwords, with safeguards appropriate to the data and service. This policy does not claim an external security certification, universal two-factor authentication or guaranteed prevention of unauthorized access. Protect your device and credentials, review crew permissions, and notify us promptly of suspected misuse.

We investigate security incidents and make notifications required by applicable law, including required timing and content. No disclaimer relieves us of those obligations. Do not include passwords, full payment credentials, government identification numbers or other unnecessary sensitive information in work records or ordinary email.

9. Access, correction, deletion and appeals

Write to john@appalachianintegrity.com to ask for access, correction, deletion or a usable copy of your personal information, or to raise an applicable opt-out request. You need not create a new account solely to make a request. We may use an existing account or request information reasonably needed to verify identity and authority; do not send a government ID unless specifically required through an appropriate secure route.

We respond within the time required by applicable law. Where the Virginia Consumer Data Protection Act applies, we generally respond within 45 days, with the permitted extension and notice where necessary. If a request is declined, our response explains the reason and how to appeal. Send an appeal by replying or emailing the same address with Privacy appeal in the subject. For a covered Virginia appeal, we respond within 60 days and identify how to contact the Virginia Attorney General if it is denied.

Privacy rights depend on applicable law, including statutory scope and exemptions; this policy does not declare that every business record falls under every consumer statute. We will consider reasonable requests even where a particular statute does not apply. No software fee, print watermark or acceptance condition overrides a nonwaivable right. A required personal-data copy is distinct from purchasing a finished branded inspection report.

10. Children and sensitive information

These professional field-documentation services are intended for adults aged 18 or older and are not directed to children. We do not knowingly collect children's data for these services. If you believe a child has supplied personal information, contact us for investigation and appropriate deletion. Do not upload unnecessary health information, identification credentials, precise location information or other sensitive personal information. Facility locations and image metadata can themselves be sensitive; review your authorization before submitting files.

11. Communications and changes

You may opt out of marketing communications using their unsubscribe route. Account, security, billing and required legal notices are separate service communications. We do not require marketing consent as a condition of responding to a privacy request.

We display the revision date and give appropriate notice before a material change in data practices. Where law requires consent for a new purpose, posting this policy is not a substitute. A change does not retroactively authorize a use that was impermissible when it occurred. We retain prior applicable policies and acceptance evidence as required.

12. Contact

Appalachian Integrity LLC · Craig County, Virginia · john@appalachianintegrity.com · (540) 524-2290. Use email for privacy requests or appeals so the request can be tracked. Do not include confidential reports unless necessary and authorized.