Legal
Privacy Policy
Last updated: October 21, 2026
OSHA Action Packet is operated by S-Block Technologies LLC (“we”, “us”). This policy explains how we handle your data.
1. What we collect
- Email address for access links, receipts, and case notifications
- Uploaded federal OSHA citation PDFs
- Extracted case data, packet progress notes, and generated packet outputs
- Payment metadata from Stripe, but not your full card number
- Basic product analytics and operational logs
2. How we use your data
- Generate your preview and paid packet outputs
- Save packet progress, proof status, and packet QA answers
- Send transactional emails such as access links and purchase confirmations
- Operate, secure, and improve the Service
3. Where your data is stored
- Database: Neon Postgres
- File storage: Amazon S3
- Payments: Stripe
- AI document reading: OpenAI, which reads your uploaded citation PDF to build your free preview and your packet
- Application hosting and logs: infrastructure providers we use to run the Service
4. Data sharing
We do not sell your personal data. We share data only with service providers needed to run the product, such as hosting, storage, database, email, payment, and AI processing vendors.
To build your free preview and your packet, we send your uploaded citation PDF to OpenAI through its API, along with the citation item text we extract from it. OpenAI reads them and returns the structured data we use for your case. We do not send your email address or payment details to OpenAI. We delete the PDF from OpenAI when each run finishes. OpenAI handles this data under its own API data policy.
5. Cookies and sessions
We use a secure session cookie for authentication. We may use privacy-respecting analytics and operational monitoring, but we do not use the Service to sell advertising audiences.
6. Retention and deletion
We keep uploaded files, extracted case data, packet progress, and packet outputs so you can return to your packet under Your cases. We do not delete them on a schedule. To have them deleted, email support@oshaactionpacket.com from the address on the case; we then delete the case from our database and its files from storage and reply to confirm. Stripe keeps its own payment records under its own policy.
7. Security
Data is sent over TLS. Uploaded PDFs and packet files are stored in Amazon S3 with server-side encryption (AES-256), and the database runs on Neon, which encrypts stored data at rest. Access to production systems is limited to authorized personnel.
8. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the last-updated date on this page.
9. Contact
Questions about privacy can be sent to support@oshaactionpacket.com or by mail to S-Block Technologies LLC, 4705 Northwest Creekside Lane, Blue Springs, MO 64015, USA.