EHS ReconEHS Recon

Privacy Policy

Facility Recon, Inc. · last updated October 23, 2026

This policy says what personal information Facility Recon, Inc., doing business as EHS Recon ("we", "us"), collects through ehsrecon.com and app.ehsrecon.com, what we do with it, and the choices you have. We do not sell personal information, and we do not use it for advertising.

1. What we collect

  • Your account. Your email address and name. You sign in with an emailed link or with Google or Microsoft; when you use Google or Microsoft, they send us your name and email address. We never see or store a password.
  • Billing details you save. The billing name, email, address and tax id on your Billing page, used for checkout and receipts.
  • Payments. Our payment processor, Stripe, takes your card details in its own form; they never reach us. Stripe tells us whether a payment succeeded and gives us your customer reference and the links to your receipts and invoices.
  • What you keep in the service. Your orders, reports, monitored facilities, folders and client names, alert settings, date format, a letterhead name and logo if you upload one, and the email addresses of people you add to your account.
  • Our emails to you. Our email provider tells us whether each email we send you was delivered, opened, clicked, bounced or marked as spam. We use this to stop sending to an address that bounces or complains and to see whether our emails arrive. Your alert settings and the unsubscribe link in every alert email decide which emails you get.
  • The contact form. The name, email address and message you send, which reach us as an email.
  • Technical information. Like most websites, our servers record the requests they receive — the address and browser a request came from, the page and the time — to run the service, fix problems and protect it from abuse.
  • Your browser's own storage. The site keeps your order (the cart) in your browser, and the app also keeps your sign-in session, the folder chosen for your order and how you like the sidebar. We use no advertising or analytics cookies and no tracking scripts.

2. Public records about facilities

The service republishes public government records about regulated facilities and the companies that run them. Those records sometimes name a person — an owner, an operator or a contact the agency recorded. We show what the government's file says and name the database it came from; we do not change government records. If a record about you is wrong, the agency that published it can correct it, and once its file changes, so does what we show. If we matched a record to the wrong facility, tell us at contact@ehsrecon.com and we will correct it.

3. How we use it

To provide the service: to sign you in, take payments, produce and store your reports, send your alerts and monthly reports, and keep your receipts. To answer you, including data disputes. To keep the service secure and working, and to prevent abuse. And to meet our legal, tax and accounting obligations.

4. Who processes it for us

We share personal information only with the companies that run parts of the service for us, and only for that purpose:

  • Stripe — payments, receipts and invoices
  • Supabase — our database, sign-in and the storage of your report files
  • Render — the servers that run the website, the app and our nightly checks
  • Resend — sending our emails
  • Google and Microsoft — only if you choose to sign in with them

We may also disclose information when the law requires it, to protect the rights and safety of our users or the service, or as part of a merger, acquisition or sale of the business, in which case this policy continues to apply to it.

5. How long we keep it

For as long as your account is open. When you delete your account, we delete your reports, alerts, monitored facilities, folders, settings, letterhead and the access of anyone you added. We keep the customer record — your name, email, billing details, our payment processor's customer reference, your orders and the record of your payments — for receipts, taxes, accounting and disputes. Deleted data leaves our database backups as those backups expire. Server records are kept only as long as we need them to run and protect the service.

6. Your choices

  • Download your data — "Download everything" on the Account page: every report, every alert and your orders.
  • Correct it — your details on the Account and Billing pages.
  • Delete it — "Delete account" on the Account page, with what stays as section 5 says.
  • Choose your emails — your alert settings (immediately, weekly or off) and the unsubscribe link in every alert email.
  • Ask us — to know what we hold about you, to correct or delete it, or with any other privacy question, email contact@ehsrecon.com. These rights are yours wherever you live, including the rights California and other states give their residents; we will not treat you differently for using them.

7. Security

Every connection to our sites is encrypted. Card details stay with Stripe. Your report files can be read only through your signed-in account. Access to our systems is limited to the people who run the service. No system is perfectly secure; if a breach affects your information, we will tell you as the law requires.

8. Children

The service is for businesses and the people who work with them. It is not directed to children, and we do not knowingly collect information from anyone under 16.

9. Changes and contact

We are based in the United States and the service is run from there. When we change this policy in a way that matters to you, we will post it here with a new date and, for an account holder, email you before it takes effect. Questions: contact@ehsrecon.com. The terms of using the service are in the Terms of Service.