Privacy Policy

Last modified: August 19, 2026

WithinSpec is built for organizations that inspect real assets in the field. We believe the work your teams perform and the information they create belongs to you. This Privacy Policy explains what data WithinSpec handles, how it is protected, and what we do not access or use.

1. Customer Content Ownership

All content captured, uploaded, or generated through WithinSpec is owned by the customer organization that controls the workspace. This includes:

  • Photos, video, and audio captured during inspections
  • Transcripts, captions, and observations generated from that content
  • Inspection reports, deficiency logs, punch lists, and related documentation
  • Uploaded checklists, templates, standards, manuals, and reference documents
  • Notes and shared content within a workspace

WithinSpec does not claim ownership of customer content. All content remains the customer's proprietary and confidential information.

2. Private and Isolated Workspaces

Each customer has their own private workspace.

  • Your content is not visible to other customers
  • Your content is not shared across workspaces
  • Your content is encrypted while being transmitted and stored
  • Only people in your organization can access your workspace

3. WithinSpec Access to Customer Content

WithinSpec does not have access to your content.

The only exception is if you give us explicit written permission to help with support or troubleshooting. If that happens, access is limited, temporary, and logged.

4. How WithinSpec Uses Customer Content

WithinSpec processes your content only to provide the services you ask for, such as generating inspection reports, captioning photos, creating transcripts, and powering search across your own documents.

By using WithinSpec, you give us permission to process your content for these purposes only. This does not give WithinSpec ownership of your content, and this permission ends when your workspace is closed.

WithinSpec does not:

  • Use your content for advertising or marketing
  • Share your content with third parties
  • Sell your content
  • Make your content public

5. AI and Machine Learning

WithinSpec does not use your content to train or improve global AI models.

Your content is used only to generate outputs inside your own workspace. It is never used to benefit other customers unless you explicitly allow it.

6. Transcription and Captioning

Transcription, translation, and photo captioning are performed only to provide WithinSpec's features. Processing happens within WithinSpec's systems, and the results stay inside your workspace.

7. Metadata We Collect

WithinSpec collects limited non-content data needed to operate and improve the product, including device identifiers, timestamps, user IDs and workspace IDs, and usage and performance data.

8. Service Providers

WithinSpec uses trusted service providers, such as cloud infrastructure providers, to operate the platform.

These providers are required to protect your data and keep it confidential. They are not allowed to use your data for their own purposes. A list of service providers is available upon request.

9. Data Retention and Deletion

Your content is stored for as long as your workspace exists. You can delete content at any time. When your contract ends, your workspace and all associated content are permanently deleted.

10. Security and Incidents

We use common, well-accepted security practices to protect your data.

If there is a confirmed security issue that affects your content, we will notify you promptly.

11. International Data Processing

For customers subject to GDPR or similar laws, WithinSpec processes personal data in accordance with those requirements. Additional terms are available upon request.

12. Contact

Questions about this Privacy Policy can be sent to privacy@getwithinspec.com