Privacy Policy
Effective 24 October 2026. Applies to the Site Visitor app for iOS and Android and this website.
Site Visitor is operated by Hangar Marketplace, LLC ("we"), a Washington limited liability company. This policy says what we collect, why, who can see it and how to remove it. We built the app for hotel committees that handle confidential bid information, so the short version is: your organisation's data is visible to your organisation only, the bid packet file is never stored, and you can delete a visit or your whole account at any time.
What we collect
| Data | Why |
|---|---|
| Email address and name | To sign you in with a one-time code, to match you to the organisation that invited you, and to name you as the author on reports. |
| Organisation membership and role | To show you your organisation's visits and nothing else. |
| Visit documents: city, dates, hotel names and addresses, questionnaire answers, inspection scores, notes, waivers, recommendations and the trip summary | This is the work product. It is stored so your organisation's members can read it and so it survives a lost device. |
| Photos you take or attach in a visit | Included in the report and shared with the visit. |
| A daily count of AI drafts per account | To cap usage and spot abuse. No draft content is logged. |
| Access requests: name, organisation and message, if you send one | So we can follow up and set your organisation up. |
We do not run analytics or advertising SDKs, we do not track you across apps or websites, and we do not collect location, contacts, device identifiers or usage events. The app does not use cookies on this website beyond what the hosting provider needs to serve pages.
The bid packet
When you import a hotel bid packet or RFP questionnaire, the file is opened on your device, the hotel's answers are read into the visit, and the file is discarded. The file is not uploaded, cached on our servers or seen by us. The answers that were read become part of the visit and are handled like everything else in it.
Where data lives and who can see it
Visits are stored on your device first and work with no signal. When you are signed in and belong to an organisation, visits sync to our database, hosted by Supabase in the United States, with photos in its file storage. Access is enforced row by row in the database: every member of your organisation can read every visit in it; only the author can change or delete a visit; no one outside your organisation can see anything, and that includes other committees, other unions and the airline. We, as the operator, have administrative access for support and operations and do not read your visits otherwise.
We do not sell personal data and never share it with any airline, union or hotel. Reports leave the app only when you export the PDF and send it yourself.
AI drafting
If you ask the app to draft hotel notes or a site summary, the structured facts from the form (your answers, scores, contract check results and your own notes) are sent to our drafting service and on to Anthropic to produce the text. The hotel's bid pricing is never included. Anthropic processes the request for us and does not use it to train models. The returned draft is marked as a draft in the app until you edit it, and you remain the author of the report.
Service providers
| Provider | Used for |
|---|---|
| Supabase | Sign-in, database and photo storage (United States) |
| Resend | Sending one-time sign-in codes by email |
| Anthropic | Generating notes and summary drafts on request |
| Expo (EAS) | Delivering app updates. Does not receive your data. |
| Apple and Google | App distribution |
Retention and deletion
- A visit is kept until its author deletes it. Deleted visits are removed from every member's device on their next sync.
- You can delete your account from the Account screen. Your sign-in, profile and memberships are removed. Visits you had already shared with your organisation stay with the organisation with no author attached, because they are the organisation's records. Visits stored only on your device are removed when you delete the app.
- When an organisation's licence ends, its data is deleted on request from the organisation's manager, otherwise after 12 months.
- Sign-in codes expire within minutes and are not kept.
Your rights
You can see and change your name in the app and delete your account yourself. For a copy of your data, a correction, or deletion of something you cannot reach in the app, write to hello@hangarmarketplace.com from the address on your account. Residents of the European Economic Area, the United Kingdom, California and other places with privacy laws have the rights those laws provide, and the same address is where to exercise them.
Security
Data is encrypted in transit and at rest with our providers. Sign-in uses one-time codes, so there are no passwords to leak, except for demonstration accounts that hold no real data. Access rules live in the database itself, not only in the app.
Children
Site Visitor is a workplace tool for committee members and is not directed at children under 13. We do not knowingly collect their data.
Changes
If this policy changes in a way that matters, the app shows the new effective date and we tell organisation managers by email. The current version is always at this address.
Contact
Hangar Marketplace, LLC
Washington, USA
hello@hangarmarketplace.com